
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier: h8pJGTQIu5FxjssRaXUO+iljX7ReemzIopU8d0bG2h4=
Subject key identifier: 14:A7:F4:34:23:F5:41:E5:69:0F:8E:94:54:DE:2E:45:8E:FC:86:71
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial: 0A0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number: 0A01
Signing time: Thu 16 Apr 2026 19:44:50 +0000
Manifest this update: Thu 16 Apr 2026 19:44:50 +0000
Manifest next update: Thu 23 Apr 2026 19:44:50 +0000
Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: 48tNBXOS8gT9vf052BUJXZRTbmVkLzcPo4CXOx25StU=)
2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: HjiLuMpEKDFq4BbZHd2t+ZeOPmcjFgJgpkLo6Is6Q70=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2570 (0xa0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Validity
Not Before: Apr 16 19:44:50 2026 GMT
Not After : Apr 23 19:44:50 2026 GMT
Subject: CN=69e13c32-eb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:5e:88:22:a5:e4:57:4d:7c:9e:02:1d:ae:
7b:cb:9f:ce:b9:3a:cb:25:73:5b:bc:b1:d7:8a:fc:
22:c3:b7:7d:48:88:62:80:6d:6b:e7:93:a2:cd:b0:
4e:73:f6:6e:15:0f:6a:c7:b6:a7:41:0b:9d:5d:24:
57:df:d2:3e:bc:65:05:64:ef:a6:26:d0:69:b1:67:
ad:b5:24:50:64:3d:29:f5:be:7c:06:44:0b:4d:fa:
a2:31:b6:be:f0:71:26:36:e0:ef:68:05:7c:e9:bf:
d7:c7:30:5d:ce:b9:d6:d0:cb:f6:4d:07:33:76:53:
72:6d:c4:77:d8:64:68:59:e4:fe:f9:34:8b:28:71:
2b:ea:49:8e:a5:14:29:dc:52:3e:40:81:5f:18:0e:
7d:fa:09:3f:bf:6d:0a:a0:07:ef:78:f7:c4:6b:3b:
bf:c4:a2:e9:c9:12:25:44:6c:76:03:18:16:7c:8b:
9d:99:25:16:ee:22:5a:a2:cf:60:79:1e:ff:9f:43:
d2:44:d9:eb:bd:76:88:d0:40:27:a6:38:d0:58:b1:
76:86:92:18:d3:2e:6e:96:74:da:66:10:07:ad:03:
e5:c6:18:78:84:42:43:d0:93:15:3e:91:ae:7e:97:
6b:77:5d:ca:38:43:71:73:c4:ba:fe:ad:1e:b9:16:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A7:F4:34:23:F5:41:E5:69:0F:8E:94:54:DE:2E:45:8E:FC:86:71
X509v3 Authority Key Identifier:
keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:f5:c2:41:89:d6:2b:58:20:84:00:fc:08:15:d5:bf:a7:b5:
f5:94:79:f0:f0:0a:84:ff:24:fc:ed:b5:ee:05:a0:76:3c:3b:
41:18:75:3e:18:6c:14:20:72:a9:2c:8d:75:dc:74:65:e5:42:
8f:81:bd:34:15:9f:51:99:ca:0c:04:ed:b7:4a:2f:7a:bd:17:
67:da:20:9f:97:a3:41:fc:8d:04:99:ef:f7:f9:7d:53:9f:1d:
85:9f:dc:3f:fb:1d:f2:b6:5b:70:ec:73:dc:7d:36:1b:82:d0:
c0:c3:80:bf:cd:46:f6:07:f6:22:21:05:33:cf:b1:0a:bc:c4:
6a:61:c9:82:9d:52:77:1b:9f:8f:2b:09:14:e0:f2:cd:34:aa:
56:d9:16:58:a4:29:b3:89:6c:b1:f5:f5:b3:da:65:71:19:48:
f2:02:9b:77:8d:1e:98:54:4d:69:3d:6f:04:ba:83:d2:f3:be:
9d:9e:a0:4c:a1:25:59:0b:34:fe:18:b0:61:7b:e0:93:71:06:
3f:c9:45:a4:f6:da:79:2e:51:92:d4:16:66:08:d2:27:28:4e:
5a:de:99:26:1a:3b:30:af:cf:9a:e2:89:e6:ba:df:dc:13:ed:
29:e7:f5:fa:db:98:0c:3e:77:9f:4f:87:27:3d:55:db:ec:f4:
7c:90:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:06 2026 by rpki-client