
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.mft
File: EyhCKbHsu-6lPFvajOLpVWaDhuk.mft (raw, json)
Hash identifier: xVrEkJUAcJvNg6OjRGumY938nrIt4n2a6kGuQ6lDIAU=
Subject key identifier: EA:A5:7D:EA:AF:47:5D:56:24:84:F1:90:6A:4D:07:D6:E2:55:B2:57
Authority key identifier: 13:28:42:29:B1:EC:BB:EE:A5:3C:5B:DA:8C:E2:E9:55:66:83:86:E9
Certificate issuer: /CN=A91D670B/serialNumber=13284229B1ECBBEEA53C5BDA8CE2E955668386E9
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyhCKbHsu-6lPFvajOLpVWaDhuk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.mft
Manifest number: 3A
Signing time: Mon 27 Jul 2026 10:54:09 +0000
Manifest this update: Mon 27 Jul 2026 10:54:08 +0000
Manifest next update: Mon 03 Aug 2026 10:54:08 +0000
Files and hashes: 1: EyhCKbHsu-6lPFvajOLpVWaDhuk.crl (hash: /67NB/PIIDPxT3TzsABxMBLeCT+25H3WGTDNQE4dHwQ=)
2: 04787626327611F19CC2E9A9C0833773.roa (hash: JLPz9sODgtunFq+F4lGANMjXg1Ujvuresv8kXnPXB8Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.crl
rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyhCKbHsu-6lPFvajOLpVWaDhuk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D670B, serialNumber=13284229B1ECBBEEA53C5BDA8CE2E955668386E9
Validity
Not Before: Jul 27 10:54:08 2026 GMT
Not After : Aug 3 10:54:08 2026 GMT
Subject: CN=6a6738d0-7c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:95:b8:5f:22:66:99:82:03:ce:6f:45:a0:
1a:4c:16:9e:e5:5c:cc:f2:1a:ad:d4:96:e1:21:ad:
1b:9a:21:67:a8:cf:84:96:ef:0f:5f:07:03:73:44:
db:8b:15:bc:77:e5:b3:9e:f5:f8:5c:0e:a4:9e:91:
5f:50:fd:c5:03:dc:a5:be:a0:0c:55:48:06:af:4c:
1a:9a:41:a4:80:3c:73:78:cd:31:80:a9:60:dd:56:
fc:a9:03:2b:3e:d4:ce:75:a8:95:82:5c:f0:39:e9:
78:08:4b:a1:69:33:0b:05:f1:b3:17:08:76:29:59:
83:36:02:70:b3:d5:f7:ff:13:44:e7:99:94:46:1e:
b1:7f:7d:d2:2d:23:2a:c1:e9:1e:4d:30:f3:71:b8:
c9:cc:58:55:a0:92:99:ad:c3:f1:11:77:13:b0:1b:
01:1f:75:7a:47:93:dd:88:fc:82:b6:61:ea:50:f8:
6b:e2:06:db:ec:79:1a:a2:00:43:5a:cb:18:42:3f:
4d:ce:d0:a7:cc:7a:38:7e:b5:7e:3f:de:c8:6c:97:
d9:32:0e:de:22:fc:86:0e:fe:6d:89:06:48:82:a8:
24:10:b9:98:f0:3c:44:16:5e:55:89:91:dd:f2:0e:
32:1d:0b:3f:d7:c8:61:05:55:0d:a5:40:ae:c8:3d:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A5:7D:EA:AF:47:5D:56:24:84:F1:90:6A:4D:07:D6:E2:55:B2:57
X509v3 Authority Key Identifier:
keyid:13:28:42:29:B1:EC:BB:EE:A5:3C:5B:DA:8C:E2:E9:55:66:83:86:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyhCKbHsu-6lPFvajOLpVWaDhuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D670B/05C178C2327411F18E8000DEBF833773/EyhCKbHsu-6lPFvajOLpVWaDhuk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:9f:83:85:4c:1b:f6:21:e8:43:64:91:a2:81:a8:97:39:c0:
b6:c3:4d:ed:90:94:6a:c0:bd:88:74:75:c1:f6:49:fe:46:15:
0d:4f:f2:d0:f3:46:81:cd:1b:e2:52:2b:e9:3d:12:23:2a:09:
12:0d:43:9b:ef:e7:47:2d:a5:1b:b9:80:bc:ac:ea:93:40:75:
5a:6d:fb:65:db:be:b1:e0:60:a8:c2:07:c9:bd:25:b7:27:e7:
53:03:3f:d6:60:45:ca:47:6d:09:0b:30:e6:2f:2c:87:86:0e:
8c:ba:e8:dc:da:98:80:75:61:26:f1:6d:02:02:72:28:88:72:
8c:cf:5b:45:ef:a9:c5:ac:1b:69:df:bf:72:89:82:00:6b:46:
40:a7:4e:9b:8e:01:a8:52:73:8f:96:f9:ff:4f:fc:bb:4b:57:
cf:e2:9a:2a:35:4e:58:8b:ce:a7:75:5f:a6:18:ba:1d:4c:1f:
7f:0c:6f:4a:1c:61:83:ed:57:51:5c:f0:b2:07:a0:92:3e:27:
e6:a3:cc:84:af:7a:36:1e:bb:15:ee:4b:ee:65:37:cf:c6:2a:
f3:08:71:ad:51:fb:1d:12:12:0f:12:c3:2c:b8:aa:f9:0c:56:
fd:6d:7b:01:2a:4e:27:53:b2:ba:3d:78:3d:9b:fb:69:ad:21:
ba:0e:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:58 2026 by rpki-client