
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier: BJvsKESQQkPuffKzNq+ji18g9wB/vGRUm2EP+XndxJs=
Subject key identifier: A4:7B:64:08:CA:9A:CA:E9:DF:74:29:12:02:A9:45:99:A2:FA:0C:0D
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial: 076B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number: 075B
Signing time: Sun 20 Sep 2026 21:37:10 +0000
Manifest this update: Sun 20 Sep 2026 21:37:09 +0000
Manifest next update: Sun 27 Sep 2026 21:37:09 +0000
Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: gPUeYBoBLEAG5qwYac81gYEEIXpeAazmp0z5U4pLjm8=)
2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: K8TnfaIsOICTY567FCqDzVnaqT1APmkcKZFRRplgeZI=)
3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: pkrDM++jJmRWRRPlGhOoS7tmYdWnk1WVhEsoieFqvrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Validity
Not Before: Sep 20 21:37:09 2026 GMT
Not After : Sep 27 21:37:09 2026 GMT
Subject: CN=6ab05206-e6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:30:56:f1:4c:a2:cc:ea:0d:8e:4b:2b:a9:
62:bf:92:9b:23:9b:39:85:53:4b:8e:d9:6c:4e:8d:
4c:0e:aa:48:0a:57:3c:61:bc:97:22:e4:52:43:3d:
a0:af:d6:08:84:fa:5d:38:a2:b8:93:96:74:db:88:
49:8b:1b:b0:25:e6:1f:10:2e:3c:82:eb:e2:e8:79:
e1:bf:70:56:d4:7a:01:79:83:38:fa:e2:5e:60:ef:
6a:b4:9c:5c:ef:24:1b:2c:78:70:53:a6:a7:7d:b6:
f1:e4:46:24:f8:43:94:17:0f:f7:e9:45:23:b5:0e:
07:aa:a8:34:bb:96:18:8d:b0:25:22:d3:06:e0:70:
91:7e:40:7a:88:cf:5b:ac:5f:ce:eb:b8:96:50:52:
07:56:41:ba:00:e1:61:d5:78:1c:b2:ae:12:a7:a5:
27:f0:83:ff:2f:bd:33:d6:db:8e:94:82:af:48:e0:
d8:51:4e:b6:3b:89:be:d7:d4:ca:60:dc:86:5a:e3:
d7:2e:68:ec:9f:e7:7b:2b:d1:69:cc:e1:70:e3:21:
59:dd:95:37:a1:6c:3e:2a:da:25:87:95:53:0e:e5:
f6:ad:b0:f6:3d:92:58:09:c2:85:3c:44:20:3e:b4:
b4:d3:4a:66:05:28:06:97:43:ab:18:fe:ca:1e:30:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:64:08:CA:9A:CA:E9:DF:74:29:12:02:A9:45:99:A2:FA:0C:0D
X509v3 Authority Key Identifier:
keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3b:11:f6:ef:1f:a4:45:7a:30:8a:6a:b9:dc:ac:0b:2b:6f:
a0:f8:ac:45:6f:f1:5c:59:85:1e:ad:47:34:23:53:cd:bb:9a:
6c:8a:00:c9:60:a9:47:b2:db:19:71:ea:36:a7:8b:f0:1e:74:
ee:19:7a:c3:ca:2e:f6:00:5d:bf:47:41:03:c6:a4:09:f7:4c:
8f:f9:f6:e5:7e:8b:94:b8:d9:41:f8:87:dc:fa:9c:a2:53:9c:
a2:19:73:ba:02:96:70:b3:be:5b:39:4a:95:f6:05:40:87:f0:
b4:b5:92:74:c5:c9:d7:70:04:93:b2:bd:3f:e8:5e:3f:74:30:
6f:e0:cc:5a:bf:ce:8a:6c:ee:e5:12:d1:75:28:03:76:38:bc:
ea:42:08:96:5b:0a:54:d5:43:c4:4a:92:09:22:44:c1:cd:ff:
2e:19:1d:23:14:ba:ce:70:d3:17:3d:05:92:ca:fe:07:83:b7:
97:74:22:c0:a7:8b:f7:f5:ba:71:b1:76:cc:0b:22:67:83:5c:
c1:84:f1:53:ae:f8:e0:92:bf:1e:56:27:29:97:0b:30:e8:8c:
6f:f0:5f:c2:4b:b6:f1:ad:26:75:ec:76:0f:b5:4d:d5:16:d3:
ad:b4:13:05:73:7e:17:0c:6f:23:0a:b9:fa:5c:6a:d9:43:b0:
0f:8b:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:50:49 2026 by rpki-client