
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier: Ge+2L7gk9ErXlhfdWisoer5gtw7l9yzK7heEm6jQ5VI=
Subject key identifier: A6:2E:12:F8:37:46:0D:AE:C4:11:CA:48:13:B7:E6:07:85:64:A1:4F
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number: 0193
Signing time: Sat 05 Sep 2026 04:10:27 +0000
Manifest this update: Sat 05 Sep 2026 04:10:27 +0000
Manifest next update: Sat 12 Sep 2026 04:10:27 +0000
Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: wvAepmqSduwVMPnMbD+c463d+9mZ8hNMi1LsHSZMZwU=)
2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: dlecxqbZAMbSA14zl4WPnusRoWo06VnO1BHgu9deOAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Validity
Not Before: Sep 5 04:10:27 2026 GMT
Not After : Sep 12 04:10:27 2026 GMT
Subject: CN=6a9b9633-eb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:e0:9f:ac:3c:27:56:e1:70:cf:17:4e:67:
4b:7f:75:1e:c5:4e:26:7d:b7:56:38:a7:eb:25:c4:
ba:66:e7:df:75:f3:fc:6f:58:97:10:a1:99:59:62:
f0:e3:a7:b1:39:9f:e7:58:68:44:47:f4:bc:1f:75:
79:cc:16:94:61:86:53:c8:ac:52:09:17:c2:99:27:
b1:9c:0b:8a:30:0e:e7:94:9b:ae:67:dd:77:49:d8:
71:ff:b1:c0:90:72:ae:bb:6d:04:0b:b3:fe:de:c3:
b2:aa:6f:ce:34:ec:43:c0:31:c1:14:1c:42:20:15:
67:f4:53:b4:f0:9a:ba:43:e8:7a:a0:07:49:97:eb:
d3:f2:e3:96:f8:6c:d1:a6:ae:1e:65:37:05:c2:b7:
f6:78:27:22:5b:74:83:2f:48:ff:4a:22:69:ce:87:
e3:91:ca:a9:69:9e:c9:4e:e7:77:a3:4f:d7:a8:2a:
89:54:2a:32:48:38:2f:2a:3b:27:79:20:db:d2:6e:
93:dd:0d:a3:c3:3a:34:be:26:3d:2a:6e:52:f6:ec:
de:8d:f6:43:f1:4e:4d:86:c3:94:ac:fd:1f:ab:75:
fa:e6:83:c6:3a:43:01:f5:50:19:37:9f:a0:d2:9f:
c3:95:fd:c2:27:49:48:01:49:20:63:98:e6:c3:8a:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:12:F8:37:46:0D:AE:C4:11:CA:48:13:B7:E6:07:85:64:A1:4F
X509v3 Authority Key Identifier:
keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:7f:9a:ac:51:02:e3:f5:8c:24:d4:8b:8f:5b:bc:c0:20:68:
da:73:ec:a1:ee:1f:fb:f8:c8:ef:78:a7:4e:80:34:83:70:59:
0f:fc:2e:0c:df:75:d4:5f:49:a5:ca:de:c9:76:61:2a:fa:79:
94:d5:be:6a:91:31:21:23:2d:5b:d7:8f:f3:95:f0:01:bc:ef:
ae:39:4c:6a:86:25:3c:bd:fd:67:ee:1c:34:78:d6:e1:f3:61:
a7:ae:94:e9:0e:31:86:ff:40:89:6b:2b:08:91:82:b3:1e:bd:
02:66:cf:e0:2c:f3:81:5c:0c:e4:2e:69:87:32:29:25:35:f1:
c5:6e:ea:28:46:08:41:c2:b2:19:9e:05:51:da:f1:dd:6d:56:
f4:98:8f:8f:a9:de:ee:a3:3e:34:df:27:8e:32:04:7b:a8:01:
dc:20:dc:31:8c:2d:2d:5c:79:82:14:23:02:99:90:41:c8:de:
9f:59:85:22:75:95:89:fb:18:19:c0:43:c1:52:15:79:e9:00:
2f:4a:d2:8a:72:be:84:a2:f2:ae:97:fa:98:12:c5:c7:7e:29:
bd:84:59:57:5d:3c:e8:1e:71:78:31:be:56:b4:00:91:bc:b7:
98:49:68:e2:9d:46:89:a7:66:d8:16:4c:b9:de:9b:7e:8a:e4:
05:24:b4:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5
M0RFQTIzNzUwHhcNMjYwOTA1MDQxMDI3WhcNMjYwOTEyMDQxMDI3WjAYMRYwFAYD
VQQDEw02YTliOTYzMy1lYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwnXgn6w8J1bhcM8XTmdLf3UexU4mfbdWOKfrJcS6ZuffdfP8b1iXEKGZWWLw
46exOZ/nWGhER/S8H3V5zBaUYYZTyKxSCRfCmSexnAuKMA7nlJuuZ913Sdhx/7HA
kHKuu20EC7P+3sOyqm/ONOxDwDHBFBxCIBVn9FO08Jq6Q+h6oAdJl+vT8uOW+GzR
pq4eZTcFwrf2eCciW3SDL0j/SiJpzofjkcqpaZ7JTud3o0/XqCqJVCoySDgvKjsn
eSDb0m6T3Q2jwzo0viY9Km5S9uzejfZD8U5NhsOUrP0fq3X65oPGOkMB9VAZN5+g
0p/Dlf3CJ0lIAUkgY5jmw4q6iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYuEvg3
Rg2uxBHKSBO35geFZKFPMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz
RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG
amZ4S01vVkE4Yk9UM3FJM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANH+arFEC4/WMJNSLj1u8wCBo2nPsoe4f+/jI73inToA0g3BZD/wuDN911F9J
pcreyXZhKvp5lNW+apExISMtW9eP85XwAbzvrjlMaoYlPL39Z+4cNHjW4fNhp66U
6Q4xhv9AiWsrCJGCsx69AmbP4CzzgVwM5C5phzIpJTXxxW7qKEYIQcKyGZ4FUdrx
3W1W9JiPj6ne7qM+NN8njjIEe6gB3CDcMYwtLVx5ghQjApmQQcjen1mFInWVifsY
GcBDwVIVeekAL0rSinK+hKLyrpf6mBLFx34pvYRZV1086B5xeDG+VrQAkby3mElo
4p1Giadm2BZMud6bforkBSS0sQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:43:59 2026 by rpki-client