
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
File: EhrxRNkD4_iJffD-0gcaFkd17U8.mft (raw, json)
Hash identifier: 6O5d3r7kBs9C60yK0m6KeCF01NTmkWi+dxFt3o+1pO0=
Subject key identifier: 87:0F:3C:80:6C:A3:E5:5B:4B:66:92:CF:12:9D:C7:23:C8:6A:FA:B2
Authority key identifier: 12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F
Certificate issuer: /CN=A91E554A/serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F
Certificate serial: 018F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
Manifest number: 0182
Signing time: Mon 19 Oct 2026 05:25:25 +0000
Manifest this update: Mon 19 Oct 2026 05:25:24 +0000
Manifest next update: Mon 26 Oct 2026 05:25:24 +0000
Files and hashes: 1: EhrxRNkD4_iJffD-0gcaFkd17U8.crl (hash: noPxZfTjjmn9wNqRDeVQWHNOFPukLooXTpTR7dFmt6o=)
2: E12300F27DE711F1A1F9DA6963A30FBC.roa (hash: HWu++fZJ7qJBpUlP+w3MOqBUVps1PM4BfBzFANQKNlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl
rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E554A, serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F
Validity
Not Before: Oct 19 05:25:24 2026 GMT
Not After : Oct 26 05:25:24 2026 GMT
Subject: CN=6ad5a9c4-cf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:2e:62:3d:34:f9:1b:e1:a4:5e:36:93:17:
83:1b:53:17:bf:79:10:b5:ed:f9:1c:88:1a:30:e3:
49:9c:25:4b:59:00:fb:6a:a1:65:6c:70:38:59:f1:
a5:34:ee:cb:91:0c:8d:88:4e:5c:5e:d5:81:b8:a4:
d5:e1:b0:71:15:c2:53:2d:82:55:7b:39:b6:79:f8:
f9:f0:55:79:99:95:60:07:d0:3a:c5:9f:60:c8:6d:
e3:1c:c3:2c:61:61:68:a3:96:bb:d2:8f:d2:bc:db:
d5:75:d4:dc:5b:2d:21:b1:f9:db:96:c5:41:a4:7f:
00:63:8c:6f:fe:24:43:4d:12:61:15:50:65:b4:a8:
f9:7f:ed:fa:ba:76:3d:ec:63:8e:1c:4d:65:00:7e:
cc:a7:3f:f1:06:11:c3:f1:a2:5f:12:d6:7d:f6:3f:
6b:7a:63:34:fb:35:9f:a4:9f:21:6c:7d:81:54:af:
aa:22:e8:6b:d5:9a:2d:9e:36:b1:62:34:d7:e8:6c:
92:c0:d1:3f:d9:e3:2d:24:9a:74:df:2a:af:55:1c:
1b:bd:30:ee:b6:34:1b:66:6c:f3:cf:11:71:34:4e:
e2:96:e4:48:55:15:7d:ad:10:b4:9e:f5:8c:aa:b4:
4d:ee:e6:8b:17:2d:a0:88:e0:c4:9d:9b:14:d7:42:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:3C:80:6C:A3:E5:5B:4B:66:92:CF:12:9D:C7:23:C8:6A:FA:B2
X509v3 Authority Key Identifier:
keyid:12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:4c:59:5a:45:be:b4:45:ca:36:2e:06:69:2c:2b:f1:e7:65:
e2:ec:16:6b:e6:c0:3a:ae:a0:41:0c:2d:5a:34:10:52:3e:0a:
2b:b0:ac:c8:c0:98:52:28:a5:f8:d7:34:51:1e:79:98:1b:50:
fe:ea:1f:57:fe:f5:1b:71:d5:e5:b5:0b:12:14:ab:76:e0:13:
79:73:b1:55:e9:5a:5f:35:25:7f:18:0d:76:7a:c5:f0:18:d4:
be:bd:3a:87:dc:cf:80:0c:29:16:47:ec:d0:fb:f9:69:5b:c9:
31:03:bc:f3:94:04:8f:c8:53:32:c9:17:8e:3e:df:5e:86:96:
45:65:71:85:f8:8c:07:9e:af:d4:d9:dc:16:4e:08:e5:93:09:
0e:bb:23:df:7e:7e:4a:c2:ba:87:1b:69:ab:93:20:a1:9d:2b:
aa:a5:5a:97:9d:21:db:7e:33:87:b8:c8:3c:71:de:d8:28:90:
5c:ca:59:96:f8:7b:b8:59:cb:4d:5a:9d:fe:68:ac:e0:50:aa:
8d:59:49:ef:51:8d:37:0c:10:25:f2:a4:fb:0b:cc:21:9d:bc:
58:2f:66:16:05:14:1e:fd:46:6c:41:10:0c:0f:7f:e7:2a:b4:
98:29:58:d1:91:8d:15:60:9b:7d:fd:aa:7c:5c:3c:5e:a2:8e:
58:0e:b9:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU1NEExMTAvBgNVBAUTKDEyMUFGMTQ0RDkwM0UzRjg4OTdERjBGRUQyMDcxQTE2
NDc3NUVENEYwHhcNMjYxMDE5MDUyNTI0WhcNMjYxMDI2MDUyNTI0WjAYMRYwFAYD
VQQDEw02YWQ1YTljNC1jZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNUuYj00+RvhpF42kxeDG1MXv3kQte35HIgaMONJnCVLWQD7aqFlbHA4WfGl
NO7LkQyNiE5cXtWBuKTV4bBxFcJTLYJVezm2efj58FV5mZVgB9A6xZ9gyG3jHMMs
YWFoo5a70o/SvNvVddTcWy0hsfnblsVBpH8AY4xv/iRDTRJhFVBltKj5f+36unY9
7GOOHE1lAH7Mpz/xBhHD8aJfEtZ99j9remM0+zWfpJ8hbH2BVK+qIuhr1Zotnjax
YjTX6GySwNE/2eMtJJp03yqvVRwbvTDutjQbZmzzzxFxNE7iluRIVRV9rRC0nvWM
qrRN7uaLFy2giODEnZsU10JcPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIcPPIBs
o+VbS2aSzxKdxyPIavqyMB8GA1UdIwQYMBaAFBIa8UTZA+P4iX3w/tIHGhZHde1P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS83OTVFNzNEMDkx
RjcxMUVGQURFMTEyNjZDNEY5QUUwMi9FaHJ4Uk5rRDRfaUpmZkQtMGdjYUZrZDE3
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VocnhSTmtENF9pSmZmRC0wZ2NhRmtkMTdVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTU0QS83OTVFNzNEMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi9FaHJ4Uk5rRDRf
aUpmZkQtMGdjYUZrZDE3VTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFExZWkW+tEXKNi4GaSwr8edl4uwWa+bAOq6gQQwtWjQQUj4KK7CsyMCYUiil
+Nc0UR55mBtQ/uofV/71G3HV5bULEhSrduATeXOxVelaXzUlfxgNdnrF8BjUvr06
h9zPgAwpFkfs0Pv5aVvJMQO885QEj8hTMskXjj7fXoaWRWVxhfiMB56v1NncFk4I
5ZMJDrsj335+SsK6hxtpq5MgoZ0rqqVal50h234zh7jIPHHe2CiQXMpZlvh7uFnL
TVqd/mis4FCqjVlJ71GNNwwQJfKk+wvMIZ28WC9mFgUUHv1GbEEQDA9/5yq0mClY
0ZGNFWCbff2qfFw8XqKOWA65Gg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 19:49:48 2026 by rpki-client