
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
File: EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json)
Hash identifier: Dxki5GT4s7+4VIaEWwsDjs0b0kSTM7O34cF/IXFdOhI=
Subject key identifier: 17:E8:C0:EF:41:84:DA:2E:03:58:88:49:D6:9A:D5:54:4F:23:52:81
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial: 0EE8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
Manifest number: 0EDE
Signing time: Sat 28 Feb 2026 17:45:06 +0000
Manifest this update: Sat 28 Feb 2026 17:45:06 +0000
Manifest next update: Sat 07 Mar 2026 17:45:06 +0000
Files and hashes: 1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: mALZnEbfvOVZg6NcE7iVj5t4hbUeQrW37ODwqB5c8yM=)
2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: 0mTstOtlN/36Gmv0U1vXBpu9wAUBHuJ7+PKxStc1hKc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 17:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3816 (0xee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Validity
Not Before: Feb 28 17:45:06 2026 GMT
Not After : Mar 7 17:45:06 2026 GMT
Subject: CN=69a329a2-42a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:7c:f6:fb:2e:08:a2:8c:04:05:16:ae:98:
26:b9:94:2e:a1:c3:c7:e9:df:57:fd:17:5e:e1:a2:
8e:f1:3d:36:86:4b:f1:6f:72:66:c8:89:d1:41:21:
9f:49:0a:f2:8f:10:90:7f:71:c8:6b:cf:50:6f:a3:
30:53:a7:9a:25:76:ab:ef:ee:bf:5b:df:af:6d:4e:
12:34:d5:1c:e2:29:4f:f9:7d:3f:dd:9b:f9:ea:1a:
b1:6c:34:6d:41:ce:2f:a6:3a:2d:ce:5d:43:5f:43:
8e:e1:af:95:d9:4e:34:95:d9:fe:8e:73:c3:82:14:
31:0f:67:8e:de:0a:61:b4:8b:b7:2f:e0:c0:f3:8e:
42:b4:14:c7:94:fb:2d:08:a3:01:48:bb:4b:ad:02:
08:e6:ba:93:a2:67:92:b6:47:84:a6:bf:f6:3f:df:
07:19:7e:7b:d2:bf:94:3b:0f:a4:58:a1:02:3d:21:
e4:17:0a:b2:47:2e:00:12:c4:92:6e:3e:95:4b:40:
cb:4f:3f:8e:f0:6f:b0:d3:e9:f5:72:40:7b:77:7e:
c5:31:ec:5b:39:e7:a8:fa:08:31:eb:3c:c1:e1:4c:
19:cb:f1:2d:d6:7e:fb:1f:45:63:d9:7f:40:62:3f:
b7:d0:30:c9:85:9e:6e:30:68:02:77:5d:6a:5b:bc:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E8:C0:EF:41:84:DA:2E:03:58:88:49:D6:9A:D5:54:4F:23:52:81
X509v3 Authority Key Identifier:
keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:76:8d:65:9d:52:fd:aa:e1:ab:a7:0d:eb:47:d5:4b:f2:40:
15:05:49:4b:40:3c:e6:35:fc:bf:19:49:c3:3f:d6:08:3e:42:
00:5f:71:b4:c1:ea:1b:78:4b:4f:4c:fd:02:cb:d6:6f:9b:1e:
5e:c2:d0:6d:0f:d7:f7:92:1e:2f:5e:63:f4:5a:35:7f:fc:e5:
06:c9:50:74:6a:64:14:29:58:a9:d9:c3:c0:8c:97:af:f1:90:
08:2e:70:44:2c:12:f5:77:0d:4a:c9:1a:a6:13:19:80:0f:08:
7c:42:bd:d8:32:7f:fc:b2:8d:b9:fb:d3:21:23:d3:db:dc:b6:
d9:fe:52:1e:e5:85:65:a2:a8:39:1f:85:41:95:6c:0c:bb:96:
f3:e4:db:f8:1b:9f:0a:4c:46:d0:81:b8:be:d4:b4:68:fa:8a:
fc:ef:0a:53:0b:24:76:95:1f:f6:41:55:ab:c6:13:b1:fa:6b:
ff:13:1f:f3:ea:8a:d6:e3:06:0b:aa:cf:28:fe:00:7f:4d:82:
96:4c:35:26:58:0f:33:11:56:b8:dd:8c:18:76:20:e9:ed:8c:
a2:3d:f5:75:2d:34:65:98:03:a2:c9:c4:c8:44:d2:4a:70:93:
52:6b:a2:64:8a:52:ee:cd:9d:7d:06:ab:31:d8:4e:7a:ae:d4:
37:89:b6:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg3QjQxMTAvBgNVBAUTKDEwNDQ5OTdCQzYzQTgxM0RBMDRDMUI5MTg5NzM3NEI2
OEIwNEJBNjEwHhcNMjYwMjI4MTc0NTA2WhcNMjYwMzA3MTc0NTA2WjAYMRYwFAYD
VQQDDA02OWEzMjlhMi00MmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmc189vsuCKKMBAUWrpgmuZQuocPH6d9X/Rde4aKO8T02hkvxb3JmyInRQSGf
SQryjxCQf3HIa89Qb6MwU6eaJXar7+6/W9+vbU4SNNUc4ilP+X0/3Zv56hqxbDRt
Qc4vpjotzl1DX0OO4a+V2U40ldn+jnPDghQxD2eO3gphtIu3L+DA845CtBTHlPst
CKMBSLtLrQII5rqTomeStkeEpr/2P98HGX570r+UOw+kWKECPSHkFwqyRy4AEsSS
bj6VS0DLTz+O8G+w0+n1ckB7d37FMexbOeeo+ggx6zzB4UwZy/Et1n77H0Vj2X9A
Yj+30DDJhZ5uMGgCd11qW7zZuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfowO9B
hNouA1iISdaa1VRPI1KBMB8GA1UdIwQYMBaAFBBEmXvGOoE9oEwbkYlzdLaLBLph
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdCNC8zNjA4OTIyMDlE
OUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdUMmdUQnVSaVhOMHRvc0V1
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFU1plOFk2Z1QyZ1RCdVJpWE4wdG9zRXVtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODdCNC8zNjA4OTIyMDlEOUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdU
MmdUQnVSaVhOMHRvc0V1bUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAHaNZZ1S/arhq6cN60fVS/JAFQVJS0A85jX8vxlJwz/WCD5CAF9xtMHqG3hL
T0z9AsvWb5seXsLQbQ/X95IeL15j9Fo1f/zlBslQdGpkFClYqdnDwIyXr/GQCC5w
RCwS9XcNSskaphMZgA8IfEK92DJ//LKNufvTISPT29y22f5SHuWFZaKoOR+FQZVs
DLuW8+Tb+BufCkxG0IG4vtS0aPqK/O8KUwskdpUf9kFVq8YTsfpr/xMf8+qK1uMG
C6rPKP4Af02Clkw1JlgPMxFWuN2MGHYg6e2Moj31dS00ZZgDosnEyETSSnCTUmui
ZIpS7s2dfQarMdhOeq7UN4m2Hg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:21 2026 by rpki-client