
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json)
Hash identifier: PS5/aMFa9MqbzUqt+0fb7XafD7R+4wGL2a81MGrDy34=
Subject key identifier: 0F:BD:4C:17:F8:5D:F9:43:29:67:75:10:B1:83:26:35:A8:6A:8D:20
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
Manifest number: 7B
Signing time: Mon 02 Mar 2026 14:53:52 +0000
Manifest this update: Mon 02 Mar 2026 14:53:52 +0000
Manifest next update: Mon 09 Mar 2026 14:53:52 +0000
Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: KsmCWdgc1cPXHRzcn7Sx+wvqqjPppYANyKmknXH93m4=)
2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=)
3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 82nHeS7CHoySaZHAiJzF0tyiNyUQq6elNqL8KAqq8/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Validity
Not Before: Mar 2 14:53:52 2026 GMT
Not After : Mar 9 14:53:52 2026 GMT
Subject: CN=69a5a480-5a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:c4:d2:21:49:3d:0f:68:ca:d1:ac:ca:61:
36:d3:1a:4d:7d:d5:70:86:8d:7b:76:46:1f:58:a9:
29:f8:ae:cc:41:2e:c7:db:db:ac:00:e6:09:06:e9:
65:f5:dd:74:a9:01:64:8f:a1:fc:30:c1:c0:87:51:
d6:c6:67:be:b6:1a:6f:a1:46:23:b4:9b:cc:26:82:
5a:23:28:bb:8a:dc:be:87:bd:f4:16:a5:6e:4a:be:
c4:79:7d:dd:e1:7b:33:d8:99:40:31:63:83:c9:45:
d5:81:d5:7f:b0:dd:1f:de:5c:e7:fb:0a:35:01:b5:
27:76:8b:53:23:1a:ab:cd:db:1a:4c:3f:a8:9a:3e:
a7:ca:8a:b4:e2:ef:ac:93:43:95:6a:d0:6b:f4:d7:
64:1c:0d:db:76:81:ae:ee:e7:f5:3e:0d:aa:d2:a9:
22:eb:7c:fc:f1:d6:b5:2e:25:18:0f:89:08:e5:f0:
05:f9:80:1b:0c:11:99:6f:b0:56:b0:d9:35:de:bd:
fb:ec:9a:a7:2f:e2:72:84:36:bb:f5:c0:38:98:19:
4c:6c:6a:09:38:ac:5f:fb:d9:50:e3:b7:79:82:0d:
17:d7:53:f0:fd:a5:98:57:44:8e:6f:e3:23:e6:5b:
2b:e4:a3:74:3c:2d:e8:4d:0d:9e:f2:82:dd:e0:e7:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:4C:17:F8:5D:F9:43:29:67:75:10:B1:83:26:35:A8:6A:8D:20
X509v3 Authority Key Identifier:
keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ff:b5:d2:1c:1c:f9:8e:9e:95:29:ff:ec:9d:b6:3a:a2:68:
87:a2:b5:d5:7a:f9:c7:5d:06:40:d4:78:9c:3a:eb:11:89:d6:
cc:f9:3e:bb:6a:39:21:17:c1:fd:5d:11:58:2e:e6:da:c5:bf:
a5:54:d6:d0:3e:49:db:f6:b1:ba:9e:71:ab:3d:3e:e3:ad:7a:
48:e8:d3:71:88:45:57:24:e1:11:e8:09:00:37:ff:e5:70:67:
43:55:3a:bf:4b:92:15:10:1e:fa:39:6f:49:5c:b4:bc:ef:c5:
94:ae:57:64:ff:8b:a4:ae:c7:63:06:a6:3b:e5:6d:a9:bc:07:
63:59:e6:e6:a7:08:ad:20:0a:13:a4:61:f9:69:94:4f:d8:8f:
09:df:0f:d9:e7:cf:b8:64:c9:cb:50:c2:5c:8b:51:7f:f0:e0:
0f:38:ec:89:ce:33:0e:f0:ee:f1:8f:d5:08:89:ad:3d:c0:ec:
22:80:86:fa:cc:32:92:d2:c4:40:63:36:d5:1e:5f:4a:51:f5:
8c:e0:aa:57:b0:d8:5a:2e:f0:be:c0:e3:84:93:cd:71:d5:67:
a8:d3:2e:4d:be:ca:0e:c8:ff:f3:35:c9:ef:6e:b8:be:b8:01:
90:4d:b2:18:7a:7f:46:23:88:20:9f:22:6c:3b:f7:64:27:c1:
8a:73:81:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ4OEMxMTAvBgNVBAUTKDEwMEIyNTM1NDY2NDY4MURBQUI5MDVDRUZGNEE0REE3
NDlDNEVCOEEwHhcNMjYwMzAyMTQ1MzUyWhcNMjYwMzA5MTQ1MzUyWjAYMRYwFAYD
VQQDEw02OWE1YTQ4MC01YTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw3jE0iFJPQ9oytGsymE20xpNfdVwho17dkYfWKkp+K7MQS7H29usAOYJBull
9d10qQFkj6H8MMHAh1HWxme+thpvoUYjtJvMJoJaIyi7ity+h730FqVuSr7EeX3d
4Xsz2JlAMWODyUXVgdV/sN0f3lzn+wo1AbUndotTIxqrzdsaTD+omj6nyoq04u+s
k0OVatBr9NdkHA3bdoGu7uf1Pg2q0qki63z88da1LiUYD4kI5fAF+YAbDBGZb7BW
sNk13r377JqnL+JyhDa79cA4mBlMbGoJOKxf+9lQ47d5gg0X11Pw/aWYV0SOb+Mj
5lsr5KN0PC3oTQ2e8oLd4OdC9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+9TBf4
XflDKWd1ELGDJjWoao0gMB8GA1UdIwQYMBaAFBALJTVGZGgdqrkFzv9KTadJxOuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDg4Qy80NkIwMDUwNDZC
ODkxMUYwOTVGMTEwMkJDNEY5QUUwMi9FQXNsTlVaa2FCMnF1UVhPXzBwTnAwbkU2
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDg4Qy80NkIwMDUwNDZCODkxMUYwOTVGMTEwMkJDNEY5QUUwMi9FQXNsTlVaa2FC
MnF1UVhPXzBwTnAwbkU2NG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACf+10hwc+Y6elSn/7J22OqJoh6K11Xr5x10GQNR4nDrrEYnWzPk+u2o5IRfB
/V0RWC7m2sW/pVTW0D5J2/axup5xqz0+4616SOjTcYhFVyThEegJADf/5XBnQ1U6
v0uSFRAe+jlvSVy0vO/FlK5XZP+LpK7HYwamO+VtqbwHY1nm5qcIrSAKE6Rh+WmU
T9iPCd8P2efPuGTJy1DCXItRf/DgDzjsic4zDvDu8Y/VCImtPcDsIoCG+swyktLE
QGM21R5fSlH1jOCqV7DYWi7wvsDjhJPNcdVnqNMuTb7KDsj/8zXJ7264vrgBkE2y
GHp/RiOIIJ8ibDv3ZCfBinOBrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:40:19 2026 by rpki-client