
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json)
Hash identifier: OW49n5a7+MwP0W6QtcTTHvzAoMjsrJxYnrQV2OuzfyM=
Subject key identifier: 6A:91:D4:64:9D:17:56:80:FC:28:80:08:A6:49:51:85:A8:51:2E:85
Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40
Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40
Certificate serial: 0F1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
Manifest number: 0F12
Signing time: Thu 16 Apr 2026 17:30:43 +0000
Manifest this update: Thu 16 Apr 2026 17:30:43 +0000
Manifest next update: Thu 23 Apr 2026 17:30:43 +0000
Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: 2dtd7poUax5a03qLqweUnKteeZiJZBNsZpgOhdTVIg0=)
2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: VIZdhiYSpiKQJVRkddgrRD+Jy12svVReopMn7lF4O6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl
rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3866 (0xf1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40
Validity
Not Before: Apr 16 17:30:43 2026 GMT
Not After : Apr 23 17:30:43 2026 GMT
Subject: CN=69e11cc3-3dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:17:eb:fa:a6:92:3e:32:1c:26:83:e6:0b:
21:0a:3f:85:ff:4c:a2:9a:5f:c6:57:9a:b0:f9:f6:
95:e6:f0:36:b6:27:ba:d9:6b:3c:1a:33:5d:e1:7a:
d1:8c:a2:66:87:b3:10:19:c4:6e:2f:3a:2a:5a:45:
b4:9f:a1:41:87:5a:dd:e1:dc:24:22:2f:2f:7c:0e:
6d:ba:3e:72:74:13:28:a6:27:05:53:dd:10:16:11:
e2:f8:68:56:0e:2f:78:89:8f:f8:28:89:39:db:ac:
aa:9b:3f:90:cb:25:61:a1:91:14:ce:d7:28:dd:66:
40:a8:06:ca:7b:e7:20:2d:88:1b:e3:69:a7:79:98:
32:19:e0:45:dc:94:e3:81:a3:aa:c2:8f:9e:94:5a:
34:4f:4d:3a:66:7c:f2:29:a6:e3:f2:e5:37:92:c6:
48:b9:ee:78:57:13:fb:cb:ac:f8:8d:b7:43:ff:55:
01:92:2f:d1:15:71:f8:34:70:dc:69:58:ba:5d:ff:
5e:0f:3a:ae:4c:1c:e1:c3:4e:eb:fe:53:f9:1e:ec:
43:45:9e:3a:87:3c:c4:ef:e4:8b:a8:52:70:d7:65:
26:1b:67:99:db:b5:2a:6d:46:a4:24:88:c8:66:67:
50:0c:94:26:b0:d8:3d:99:87:e3:b4:87:87:3f:45:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:91:D4:64:9D:17:56:80:FC:28:80:08:A6:49:51:85:A8:51:2E:85
X509v3 Authority Key Identifier:
keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a6:6b:b9:8d:62:5b:36:60:ea:d1:f9:7f:70:9b:20:a4:9c:
89:c4:4d:94:36:36:af:25:b7:a7:25:1d:d3:df:26:c6:0c:44:
16:be:d2:1a:77:5f:65:b2:e6:93:bd:44:28:1a:1c:52:97:39:
42:7a:d9:fc:61:02:bc:83:64:60:d0:a9:61:f0:82:cf:96:a0:
c5:e8:37:df:65:72:fd:6e:3f:b9:09:2e:d6:d1:9c:df:87:9b:
93:90:a4:c9:3a:f0:c1:53:34:e2:a1:48:d5:4c:c1:28:ed:3b:
e9:d4:d5:52:bf:19:f1:e1:2e:38:2c:c3:72:78:e9:68:a1:ac:
95:99:44:68:8d:c9:12:b9:e5:d7:a0:7e:cb:13:9b:9e:7c:6f:
1d:9c:89:d5:27:0a:c7:7e:c9:2c:42:be:71:d7:d4:48:c1:00:
ae:9d:56:93:5b:f7:ac:fc:3c:6b:c8:e3:34:bd:98:f6:a6:38:
c9:1d:16:dd:0d:e9:82:07:67:18:a8:55:b7:48:9f:ba:63:27:
21:c0:9b:7b:6e:bb:23:02:11:80:99:87:1b:f1:2c:26:13:3f:
02:88:f7:a0:1a:55:b0:bd:3b:81:35:db:cb:71:b2:44:2c:9e:
d7:06:aa:ed:7c:18:0a:c4:d0:56:98:8c:5a:bc:ad:df:cd:22:
dd:06:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:53 2026 by rpki-client