
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json)
Hash identifier: 5so3H2x/6wWzpjc1RHVoW67tNAHuwEdJ3lIqcxd39zM=
Subject key identifier: B5:37:EE:76:0F:A5:8E:EF:60:A8:35:3F:EE:95:72:8B:94:69:F9:A6
Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99
Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
Manifest number: 013A
Signing time: Sun 01 Mar 2026 06:22:00 +0000
Manifest this update: Sun 01 Mar 2026 06:21:59 +0000
Manifest next update: Sun 08 Mar 2026 06:21:59 +0000
Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: J27VjyuktPWBMmCqMoU5oSOAeje606OG/XUmcHMktTg=)
2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: H9iBAev1i2fVG9Su0JRgr3VpHwr3qa10u8oippD4Mno=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl
rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499
Validity
Not Before: Mar 1 06:21:59 2026 GMT
Not After : Mar 8 06:21:59 2026 GMT
Subject: CN=69a3db07-12eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:f3:38:2d:81:d2:2f:61:a7:26:e4:67:45:
f8:33:15:f3:8b:de:50:22:37:b9:39:50:1c:4b:85:
74:5b:70:8f:57:10:3f:81:59:13:8d:ce:3d:61:76:
2b:a5:35:d6:72:f7:88:9b:9c:9c:6b:fe:e8:32:a8:
c8:88:4e:ab:9c:a0:c5:03:5c:8b:c2:18:a6:d7:83:
5e:a0:2e:1d:07:0e:91:83:59:79:f6:8f:a2:8d:cb:
91:07:ba:b5:04:5f:5f:01:77:46:73:b0:4f:a1:76:
03:e5:35:d5:50:19:a6:f2:d6:02:38:cf:f0:df:bf:
1d:a0:2a:dd:08:61:fb:3c:23:94:fe:0a:61:09:99:
d6:6f:7f:3f:df:61:76:60:56:ce:8d:71:d4:71:74:
f9:79:da:4c:0e:8d:4b:64:99:d0:6d:15:92:3d:2a:
64:ac:8e:d1:4e:55:d3:3f:d9:b2:bd:c3:b7:d5:05:
47:49:22:1d:3d:1c:20:fe:4d:74:97:64:f6:9a:50:
76:b7:94:c7:41:c2:87:e7:ad:5b:85:11:60:72:60:
e6:fd:76:a5:be:b7:02:21:35:97:ae:0f:55:29:9f:
7f:bd:b8:6b:95:93:67:7a:d8:c2:3c:75:16:8b:e8:
02:9d:49:ef:98:1d:77:14:cb:c6:af:7a:3a:58:85:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:EE:76:0F:A5:8E:EF:60:A8:35:3F:EE:95:72:8B:94:69:F9:A6
X509v3 Authority Key Identifier:
keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:de:99:31:f3:5d:52:f3:6f:56:23:3a:1a:d9:c1:a3:4d:06:
ef:e2:cf:2c:ea:09:43:1d:34:58:f8:dc:14:95:0f:90:a8:59:
dd:99:6e:0c:9e:e9:3e:b3:41:b7:08:96:47:d1:2e:c6:53:b0:
7b:b0:31:be:d8:97:b0:bb:7a:40:0a:8a:22:48:ab:a2:e1:8e:
58:43:b9:9e:ca:e6:31:4c:3e:16:6e:38:ac:ad:45:14:aa:e7:
bd:69:69:96:b2:b8:97:e8:68:a3:5b:ad:c6:96:b8:b5:77:29:
bf:ee:bf:6b:f4:dd:df:50:b9:d9:d7:cf:55:6f:47:e1:f0:b5:
f4:9e:91:e8:71:f3:80:4c:f4:2e:64:ce:9d:a9:b8:99:4c:cb:
47:d7:f0:58:d1:ed:3f:37:31:14:4c:f6:87:38:39:56:92:88:
33:df:79:88:dd:eb:e8:ef:14:91:c5:9c:b4:0c:15:06:38:33:
2c:13:df:8b:4d:d0:05:8c:97:c9:b9:54:14:59:75:f6:9b:23:
79:0d:da:59:86:25:f5:1c:ac:e7:6c:2d:d5:0a:2a:84:6e:4d:
8e:ec:a6:25:ac:1e:46:a0:f3:e3:36:90:d4:fd:a3:c4:51:7f:
f1:cd:fa:18:bc:f1:61:74:9c:d6:fe:6b:ad:3b:70:4b:c1:06:
b9:82:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:18 2026 by rpki-client