
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
File: ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft (raw, json)
Hash identifier: XHUNusbAnsI0zc/gMW1etb8N2wg9HK9l7GXocT9BowI=
Subject key identifier: EF:37:30:3F:65:D5:E1:88:1D:75:87:E1:2D:C0:39:9D:37:AA:7B:5F
Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
Certificate issuer: /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Certificate serial: 0796
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
Manifest number: 078B
Signing time: Fri 12 Jun 2026 21:36:37 +0000
Manifest this update: Fri 12 Jun 2026 21:36:37 +0000
Manifest next update: Fri 19 Jun 2026 21:36:37 +0000
Files and hashes: 1: ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl (hash: n5aC/TgaTNtyxlQnzVAJa71POWcbIkuiyLBEvB3f88c=)
2: FE4992F25C3411EBA2B9004DC4F9AE02.roa (hash: q6f3I/pDthdLdMLSxBp5iyTcTb4DHogkmy15HWS90s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5FA2, serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Validity
Not Before: Jun 12 21:36:37 2026 GMT
Not After : Jun 19 21:36:37 2026 GMT
Subject: CN=6a2c7be5-8872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:fd:a6:ed:81:25:04:5a:c2:95:61:08:4c:
fb:0f:ca:99:9d:99:bf:f9:2a:42:f8:3e:a7:e8:fd:
03:d8:a8:99:2b:bb:6d:35:76:75:15:bc:21:3c:54:
6b:af:d8:7d:2c:13:ca:5e:43:8f:fa:8a:14:4e:ed:
91:32:8d:4b:09:0e:96:dd:85:38:b0:66:93:23:06:
1d:b1:9e:7d:02:08:9b:34:92:e9:37:9f:ca:4b:a8:
9f:00:f2:fc:a0:f5:ae:d9:0d:0b:94:aa:54:d4:da:
2c:5e:d5:9c:39:ad:9d:16:f4:f5:f1:3f:9a:41:99:
dd:7b:32:53:90:3f:1d:13:06:06:5f:19:4d:b7:b8:
d3:34:38:31:fc:59:ce:74:92:19:e5:6e:13:90:d5:
11:a8:64:1b:fd:3c:d8:7f:95:8d:6f:a0:9d:2f:2b:
3e:b1:16:45:b0:d6:6a:24:7f:ad:27:fa:ad:73:ee:
0d:70:7b:9b:0b:06:44:04:cf:48:75:af:41:f7:cc:
e1:bb:f5:b4:f7:11:8c:c5:a5:b1:1f:2b:a6:ea:47:
ba:0e:5e:9b:67:76:9f:17:fa:d6:7b:b7:4d:65:3c:
d2:61:12:7e:06:3a:03:c1:ed:14:4b:41:53:d7:35:
48:d8:31:11:d3:61:2c:40:98:8c:ca:58:e0:d6:1c:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:30:3F:65:D5:E1:88:1D:75:87:E1:2D:C0:39:9D:37:AA:7B:5F
X509v3 Authority Key Identifier:
keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b9:ca:e2:c7:06:70:6f:df:de:14:bc:a1:db:78:7a:9b:ff:
86:a8:4d:da:a2:08:72:4a:02:18:12:fa:5e:75:dd:f8:27:09:
19:d2:84:e5:c2:b3:bc:40:0b:bf:99:5e:9e:37:a6:eb:1f:81:
9b:e3:d7:b4:e3:a2:ee:b5:8f:7d:5d:55:7e:0a:80:9e:44:16:
d3:87:43:03:68:73:6a:b9:77:3a:a1:67:06:91:9c:0e:9f:51:
17:2c:a3:7f:f9:9b:4e:1d:f0:8c:1b:57:bc:c2:55:23:1d:17:
c3:18:10:1d:02:de:87:06:a3:5f:70:b9:e2:cc:6a:18:09:62:
a2:e5:68:7f:d2:9e:60:9d:8d:61:da:32:8a:ca:ee:10:7e:45:
75:f0:51:e3:f5:eb:bd:6e:ff:a4:84:c9:76:d8:b0:c8:09:9e:
00:30:0c:b0:27:1d:fc:2a:f7:91:f7:ea:ab:49:31:89:72:c7:
1a:4d:82:ae:28:a2:c6:9b:87:af:af:00:17:19:ce:75:94:bb:
22:1b:d3:e8:e8:91:bd:70:66:a4:95:a6:59:be:bf:6c:6f:e7:
b6:23:d5:ed:1a:4e:7f:bd:fb:31:df:f5:04:43:dc:37:2e:a6:
f1:99:cb:87:33:81:59:cb:44:4f:b4:2a:f6:39:52:95:fe:f5:
0d:c6:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:40:22 2026 by rpki-client