
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier: qsaXpS6BYCTplrTIyC9ER1tQMNNbCD43bj4V2v1d9NI=
Subject key identifier: 95:CE:0B:51:AB:ED:96:F5:CB:B5:0A:95:09:2D:EA:D1:D9:7D:15:9E
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial: 0AF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number: 0AEE
Signing time: Tue 28 Jul 2026 19:41:29 +0000
Manifest this update: Tue 28 Jul 2026 19:41:29 +0000
Manifest next update: Tue 04 Aug 2026 19:41:29 +0000
Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: so//wZfOnQD7RqdYlmObGOWRuZugq1ipFMRXXHSIkHw=)
2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2809 (0xaf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Validity
Not Before: Jul 28 19:41:29 2026 GMT
Not After : Aug 4 19:41:29 2026 GMT
Subject: CN=6a6905e9-0b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:a9:44:ca:e5:e7:e8:53:a5:92:17:2e:16:
4e:ee:c1:95:be:47:0e:9c:24:3a:5e:4b:46:20:b2:
78:ff:5b:0a:75:1a:72:c3:75:80:d6:58:31:d2:90:
27:9d:4f:77:fc:90:60:42:0f:b1:cb:46:ce:44:ea:
09:ff:d3:94:6c:fa:fd:83:0e:2a:43:d2:76:20:38:
93:ec:93:01:76:65:ac:e2:b1:29:a8:bd:85:90:f9:
55:53:d7:83:8b:8b:cb:a6:80:73:19:d3:5c:94:a4:
f6:df:f8:db:80:1d:40:14:58:32:3e:3e:36:2d:9c:
6d:14:8d:33:86:f9:16:7e:ec:d4:f4:7a:97:ae:fb:
30:f5:3d:ad:1d:4a:92:0a:48:5b:be:70:66:d0:ba:
bc:05:9f:e5:a0:1d:e4:9f:e7:6c:6d:23:f7:22:f2:
94:cd:4b:9a:fd:bc:63:bd:aa:d3:25:93:55:9a:a6:
82:04:e2:3e:85:d1:50:95:5c:0e:3f:19:b6:0e:ea:
50:fd:36:b7:58:83:d8:47:61:78:77:db:bb:73:cd:
aa:05:48:36:d8:76:72:bb:1d:f4:5e:93:4c:40:a0:
50:5e:15:29:d3:92:45:94:c7:82:74:46:e2:21:af:
c3:bf:80:89:db:5f:f8:66:db:3f:a3:a3:3a:7b:77:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:0B:51:AB:ED:96:F5:CB:B5:0A:95:09:2D:EA:D1:D9:7D:15:9E
X509v3 Authority Key Identifier:
keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ba:08:84:36:9e:a4:c3:d2:ee:ee:34:a5:06:54:8e:cc:c5:
f0:54:3b:3a:7d:a8:e1:07:ee:91:ca:5e:1f:3f:4c:44:38:2b:
3b:56:8d:4c:a5:26:c8:7d:63:30:3e:b3:da:80:c0:ac:0a:25:
f7:6d:e5:b3:30:f3:aa:84:ed:88:5c:d9:ba:9b:0e:c2:05:18:
33:dd:6e:1d:6a:5e:0f:e7:ee:c7:fd:67:d7:c6:d3:a8:26:c6:
3c:44:32:df:34:8b:9f:21:d8:33:aa:7e:79:ff:c6:51:d7:3f:
c3:09:a9:24:65:de:8f:a7:06:31:cc:7a:f6:25:70:96:ac:5b:
0e:01:30:a7:99:56:5d:2d:e5:22:55:c8:9f:65:7e:e1:6b:d0:
be:a3:40:40:fe:4c:6c:0f:89:be:45:2c:70:c0:97:5f:7a:2a:
e0:bd:dc:12:29:d6:06:de:26:43:c3:f1:73:9b:02:b3:18:03:
ff:a3:74:98:a5:bb:c2:9b:46:8f:22:2c:77:6c:e8:98:9c:2c:
11:87:5b:b8:f3:9a:d6:20:39:a2:ec:cb:4e:72:c5:ec:75:92:
13:b2:a7:28:3c:65:b8:29:d0:b5:32:4b:4c:26:58:b0:43:42:
ae:ba:1b:74:a3:c6:93:37:ce:db:50:9b:d8:fd:64:aa:e6:27:
41:7a:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:45 2026 by rpki-client