
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json)
Hash identifier: 1CdXcekhn6Z+L2hyQPVRzpvkbT2tYhSawufmj8zRVA8=
Subject key identifier: 08:D2:F1:FD:87:0A:71:88:9F:7C:29:AC:CD:E2:83:0B:1F:0B:BD:46
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial: 048F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
Manifest number: 0485
Signing time: Sun 20 Sep 2026 23:51:09 +0000
Manifest this update: Sun 20 Sep 2026 23:51:09 +0000
Manifest next update: Sun 27 Sep 2026 23:51:09 +0000
Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: Qmi4DeWfpc0pg80QekEKSLHzF/513doiHg1KYFz5vTw=)
2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: qO1yzJmdBg/AExj7kOXHcZ1N7wKMwd9ke95bDjbUzzE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167 (0x48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Validity
Not Before: Sep 20 23:51:09 2026 GMT
Not After : Sep 27 23:51:09 2026 GMT
Subject: CN=6ab0716d-b92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:6a:86:3a:03:73:92:95:8f:60:fb:31:34:
3f:1d:98:b2:c3:f7:6d:cd:9e:7a:49:12:be:77:9a:
4f:30:73:e8:19:64:d6:bb:96:71:aa:d2:1a:b8:10:
1d:38:0e:4e:01:28:96:3c:b8:85:49:6d:1d:17:7f:
5d:65:60:77:56:54:e3:7a:65:d3:ac:08:e3:a0:f6:
f9:85:b3:4f:58:89:c5:88:24:8b:07:c5:39:24:9f:
59:07:9e:09:42:f6:bc:41:5e:98:ee:7f:51:d7:b6:
12:30:83:f0:bb:86:dd:48:4d:7c:60:fd:66:ee:ad:
5e:fc:df:11:09:b1:8a:ed:f6:bf:1f:ba:ad:07:14:
61:e2:12:56:8b:f5:be:d5:1e:85:eb:71:8b:8f:2e:
18:74:c4:92:ad:d8:f1:95:31:f3:dd:aa:26:d9:6e:
a0:f5:20:d2:ba:81:6c:38:d7:c5:91:80:58:59:5f:
06:c6:6c:e3:aa:8c:d2:06:d7:ed:53:81:92:0b:9d:
b1:57:4f:c9:e1:43:b4:c2:78:f2:ff:32:3c:63:e8:
91:2e:3d:ec:8c:1f:0f:56:7d:1a:66:4f:68:05:53:
6c:c9:94:57:b8:10:51:7d:56:9d:4e:4c:83:a6:18:
9a:4d:4d:d4:c6:6b:c9:0c:96:9c:a3:9a:6b:82:f4:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:F1:FD:87:0A:71:88:9F:7C:29:AC:CD:E2:83:0B:1F:0B:BD:46
X509v3 Authority Key Identifier:
keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:ac:55:f7:fa:6e:76:0e:0b:13:39:19:51:09:d1:e6:4f:00:
9f:24:6b:ee:2c:9c:e3:31:dc:07:d7:b2:26:f1:5b:1f:8a:e0:
37:5e:de:5a:9e:bd:13:e4:10:e9:43:49:45:c2:fb:d0:38:17:
e3:92:5b:fc:07:e5:a2:93:76:8e:a7:bb:bc:d8:3f:51:3e:ad:
31:d0:ec:7e:d1:33:72:83:f6:19:cf:a8:72:1d:4c:f6:49:3a:
ed:8b:19:82:5b:5e:e9:41:72:d8:23:05:05:57:8a:1e:cd:48:
b7:82:20:86:58:c3:49:fd:a8:91:70:30:cf:c1:f1:fa:d0:0c:
e5:5d:65:f2:ae:2e:0a:ca:8e:10:8f:e7:33:be:98:98:8e:38:
a1:53:f7:b6:0b:4f:79:70:79:36:20:ff:d0:2f:88:4d:3d:fb:
75:ec:08:82:b7:42:58:ab:d0:8f:da:4f:e5:7a:9c:a7:8d:67:
ff:6c:b4:d6:32:ac:df:ae:50:40:eb:d6:26:17:4c:39:4a:d6:
e5:6a:69:3e:56:31:8d:3f:0e:0c:47:c7:28:a9:d1:7a:8d:1a:
fa:e4:6b:e2:ab:66:e6:8a:35:0e:45:2a:68:d7:5e:43:a3:5d:
37:69:70:b7:dd:47:92:ef:8b:aa:dc:02:53:d9:8e:a4:4d:71:
09:f1:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:39:53 2026 by rpki-client