
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json)
Hash identifier: Wd+rgGcAhx+CAPtTv8Za5YbrYF11VYvb0teZ6Vnziks=
Subject key identifier: 58:11:20:B4:BA:DB:58:9B:1A:8C:AA:78:A3:5E:C6:84:12:C3:E9:94
Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
Manifest number: 0411
Signing time: Fri 17 Apr 2026 00:19:12 +0000
Manifest this update: Fri 17 Apr 2026 00:19:12 +0000
Manifest next update: Fri 24 Apr 2026 00:19:12 +0000
Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: ltb/c2BIqOsHFdKRNQRCzCl8P9S3OAiaefmtPSy3UCw=)
2: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (hash: D6VPmXFDc+G5ZgUvGAmbcPnFMvgmVskOcccS3cS1IpY=)
3: BA6115F6B19D11F08DA2A57EC4F9AE02.roa (hash: Utidw5eD+Ey8KmLxBNEaERSjjHpRl3N3GM7Q067OeCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Validity
Not Before: Apr 17 00:19:12 2026 GMT
Not After : Apr 24 00:19:12 2026 GMT
Subject: CN=69e17c80-63d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:0b:a8:0b:ce:37:c3:f9:92:38:0b:51:ed:
99:2e:5e:d2:2e:56:2f:b3:dc:ca:04:77:a9:a6:cd:
fc:c5:76:b6:e5:30:c5:95:fe:ea:6b:1b:0a:97:27:
13:5b:fd:71:ac:87:3b:fc:99:d4:d1:94:ad:87:39:
71:d2:cc:fa:77:fb:85:ff:58:4c:71:fd:1b:02:30:
fe:89:2f:22:bb:10:f2:22:e3:ca:54:72:2f:8e:35:
24:af:df:db:4d:13:4b:89:7d:02:ef:69:4a:19:4b:
5a:27:8e:c7:26:49:ec:c6:13:c6:83:cf:a6:86:3e:
ee:41:30:07:4a:23:47:ad:5b:20:2e:04:be:0d:36:
78:31:0f:8e:dd:b1:3f:27:d7:bc:a2:ca:b9:85:4e:
93:34:4d:64:d4:96:c5:97:e8:66:b0:9c:ce:38:34:
8d:15:df:2d:44:f6:dd:b3:a9:e7:71:c0:ed:e6:d7:
42:96:7c:41:3d:f9:2f:04:90:a0:29:fb:24:bd:d6:
bb:8e:d2:65:2f:cf:a8:d9:f9:73:42:a5:19:ae:46:
eb:fe:b6:21:42:88:8b:d0:cb:ed:ea:28:36:89:db:
78:bf:fe:a1:69:1b:09:b0:66:bb:de:dc:13:c7:b0:
52:1b:f2:d3:76:bd:76:1b:fb:dd:b7:4f:9a:6e:33:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:20:B4:BA:DB:58:9B:1A:8C:AA:78:A3:5E:C6:84:12:C3:E9:94
X509v3 Authority Key Identifier:
keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:42:db:41:7a:1c:41:b7:27:dd:32:88:ec:e5:20:fd:58:ef:
53:8c:cf:36:34:04:3a:d6:ce:e7:90:a9:80:ef:cf:85:5e:99:
b6:1d:94:ea:96:37:33:e4:af:96:df:5e:60:4c:3a:39:58:8f:
5c:b8:92:59:97:93:38:0b:ea:9a:a6:cf:d3:a5:db:30:3d:4e:
1f:11:fc:a4:13:c6:24:0f:39:4f:88:fc:fa:67:7c:eb:37:d6:
f6:1f:76:7a:51:17:ad:dc:7d:4e:3b:76:41:f2:49:f1:eb:02:
7d:9a:4d:de:af:ef:f5:29:3b:74:23:63:36:4c:4c:53:b0:b5:
53:7f:d1:85:9d:cb:25:00:60:d2:7c:51:5d:8e:cd:49:69:98:
57:b1:81:3a:08:f7:7a:96:51:51:4e:be:47:22:9b:ca:fa:91:
2a:67:27:a5:77:b9:75:c1:3d:57:2e:87:be:71:70:d4:bb:4b:
98:cb:8e:42:84:33:2a:fb:03:c8:49:7a:11:c6:f8:f7:36:fc:
a9:45:9e:3b:d3:19:16:a5:c8:b6:cf:f2:2c:ca:9b:76:3d:6c:
0a:8f:8d:43:a1:8f:da:3e:b3:c9:08:88:9f:d8:f3:f8:40:12:
ac:10:9f:06:c1:0c:ef:a4:fa:a2:0f:0d:f3:b0:3c:c5:a7:17:
6a:55:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:49 2026 by rpki-client