
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json)
Hash identifier: I/6mNJC1cD+J+5wlxykZlzsAyxRQHByvT9YEsG6xtCE=
Subject key identifier: F2:1A:70:2B:2C:FF:9F:A3:1E:1C:04:74:45:35:A4:B6:C8:03:37:5E
Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40
Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40
Certificate serial: 0F84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
Manifest number: 0F7B
Signing time: Wed 04 Nov 2026 17:37:18 +0000
Manifest this update: Wed 04 Nov 2026 17:37:17 +0000
Manifest next update: Wed 11 Nov 2026 17:37:17 +0000
Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: nHrtyxm7q6q5Vuof/FKRHo1tNihj1uEmhewInU0yTB4=)
2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: sV8U/i5WwH4Av3oNKS40QbsIgmPaWLmxx7jFy6MYKac=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl
rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 17:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3972 (0xf84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40
Validity
Not Before: Nov 4 17:37:17 2026 GMT
Not After : Nov 11 17:37:17 2026 GMT
Subject: CN=6aeb6d4e-d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:b2:4a:62:9c:17:aa:93:5b:f7:a7:86:71:
2f:e2:07:bf:bd:b7:55:cd:09:67:a5:44:44:00:a9:
5b:a9:f7:9c:3d:1b:61:93:73:bc:f3:46:5c:bb:85:
50:e9:e7:57:38:66:f9:ab:5a:eb:63:1f:56:09:3d:
9a:3c:ca:23:72:d8:ab:ef:9d:8d:2e:37:14:9b:56:
98:21:2d:c4:62:2d:0d:79:4e:67:8c:c4:ca:32:d0:
c1:7e:be:66:5a:21:99:47:64:a8:c5:f9:77:34:a0:
48:8a:66:8e:01:c9:e6:25:87:d7:79:b4:c5:03:12:
d6:db:09:11:e1:ea:5d:8b:c9:5b:f7:6c:36:66:bf:
ea:fd:fa:65:69:37:b6:4d:14:41:b5:c3:b1:3e:44:
10:a7:43:cd:0a:73:72:56:8a:de:f4:ff:c1:18:56:
84:a6:8e:95:1f:0a:ad:ef:fb:88:05:28:8c:48:38:
37:c4:ac:30:64:96:d9:0d:17:32:5d:5c:67:7b:43:
cc:fb:e5:cc:5e:fc:dd:b0:23:c7:76:64:b8:25:0e:
7e:27:0c:99:a6:74:35:15:96:57:e2:e4:e5:b2:ce:
61:a3:13:6d:3a:ed:f3:f7:61:21:5c:73:90:11:48:
1a:64:f3:ba:22:27:17:5b:a1:48:11:89:59:39:43:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:70:2B:2C:FF:9F:A3:1E:1C:04:74:45:35:A4:B6:C8:03:37:5E
X509v3 Authority Key Identifier:
keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:1c:81:de:9b:b2:4c:50:67:77:de:7d:04:ea:8f:c9:96:c5:
ac:d7:c7:18:4b:6b:c4:ae:c5:2c:65:b9:c8:1c:57:f0:7b:cf:
43:e2:7b:1a:f3:30:e2:47:aa:ca:25:bd:e5:85:0b:05:0e:73:
0f:0c:c2:94:14:26:5a:79:e4:b2:cb:eb:79:04:d3:d8:6b:79:
f4:c7:33:60:cb:20:4b:e1:80:8b:36:cf:f5:b8:57:41:42:6d:
21:ce:e3:23:f8:19:bb:53:3c:f9:48:d5:73:66:99:dc:36:29:
1a:ed:ab:f8:5d:68:b1:e1:58:70:a5:bb:94:95:fd:26:96:79:
51:29:64:a7:55:da:34:28:4d:3b:6a:67:db:3f:25:04:8c:df:
17:cc:50:83:a1:99:30:f4:dd:88:5d:cb:e5:a4:eb:71:d1:e9:
de:ba:28:b1:88:7b:46:d9:3b:ed:94:58:31:da:fe:20:b4:bf:
d7:62:2d:c5:03:92:56:de:26:80:d9:b9:dc:61:c7:3c:bb:e7:
f5:01:5d:d7:4e:d1:ee:4d:64:44:c4:8f:68:c0:e0:1e:4e:7f:
1e:d6:af:68:b5:91:7d:5d:ce:d2:c3:56:b8:0c:6e:b8:0f:bf:
a1:39:1b:db:5c:91:48:fe:76:1e:5a:6c:f8:21:69:66:ec:f4:
ba:a4:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:23:44 2026 by rpki-client