
$ rpki-client -vvf rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
File: eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft (raw, json)
Hash identifier: Spj58ZSuAn7SOdB+clvhgEbz1q4tkdQfnb4KrpJDxSk=
Subject key identifier: 74:56:C3:35:F3:1B:ED:04:82:E2:2C:61:5F:A4:91:70:99:6D:0E:48
Authority key identifier: 78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
Certificate issuer: /CN=A91458BD/serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Certificate serial: 0629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
Manifest number: 0612
Signing time: Sat 04 Apr 2026 22:41:15 +0000
Manifest this update: Sat 04 Apr 2026 22:41:15 +0000
Manifest next update: Sat 11 Apr 2026 22:41:15 +0000
Files and hashes: 1: eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl (hash: zxdSLMmczWfPGtvP+11UM/EeslzC7QF40eVsZ1rFlZA=)
2: 2B2AA83249DA11F0ADC32972C4F9AE02.roa (hash: 0/laoLHIL/zDE6DfvUg8AUNMtCOl036HObAE+/SZXEk=)
3: 0A816CBA49DA11F09907E971C4F9AE02.roa (hash: yqTmXisx0OJdHsQMjT38VE/WSwPBITWKMsPdafbLD/c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 22:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91458BD, serialNumber=78C4919ECF9959BF7134E35DD5E42CDEAB42D548
Validity
Not Before: Apr 4 22:41:15 2026 GMT
Not After : Apr 11 22:41:15 2026 GMT
Subject: CN=69d1938b-262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:e1:5c:23:a9:35:d7:dd:74:75:8b:66:e3:
58:a4:9a:99:04:a3:38:80:4a:39:2d:63:b7:10:8c:
d3:3b:34:d9:a7:b9:4b:2b:6e:46:f2:39:82:c8:90:
60:da:f7:7a:77:dd:b5:0d:e7:b3:08:b1:1f:5f:d9:
8c:13:a9:b6:37:a9:e8:d2:bc:cd:d5:04:1a:49:aa:
98:44:23:65:d3:a1:a2:8a:a1:24:34:61:bc:64:6b:
d9:54:ac:69:d6:c8:00:68:d5:71:00:72:5e:be:5f:
0e:1b:6b:8d:39:4f:a2:24:89:c1:44:f5:da:f1:d1:
d1:d7:b6:0d:e8:b5:22:1b:42:9d:d1:d4:9f:8e:d1:
a6:8b:d1:90:a9:95:80:11:64:1e:96:a0:6d:df:f8:
d6:ea:62:ca:de:7f:31:b8:5e:e0:63:2b:5b:2b:e8:
b0:d8:76:6e:5b:02:03:81:e1:12:28:f0:e2:97:4a:
52:43:cb:2a:f2:11:7a:27:86:b2:6f:d1:ac:8d:c4:
c5:6b:02:2e:f6:1d:ba:59:8f:de:63:cc:8e:9b:04:
bf:38:6d:2b:62:8b:a0:5f:89:2f:77:95:46:4c:86:
6c:98:31:a5:13:43:9c:92:ec:93:23:10:f0:1a:7d:
15:57:6c:b0:c6:60:1f:23:1e:82:ff:25:7a:a3:49:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:C3:35:F3:1B:ED:04:82:E2:2C:61:5F:A4:91:70:99:6D:0E:48
X509v3 Authority Key Identifier:
keyid:78:C4:91:9E:CF:99:59:BF:71:34:E3:5D:D5:E4:2C:DE:AB:42:D5:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eMSRns-ZWb9xNONd1eQs3qtC1Ug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91458BD/9022F316E89A11EB98CACA7AC4F9AE02/eMSRns-ZWb9xNONd1eQs3qtC1Ug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:10:a9:6c:cc:a8:fb:50:9a:a5:3d:40:8e:d5:45:44:52:cd:
69:95:ac:ab:0f:90:da:93:a3:c4:94:8c:4a:7b:24:fa:0e:73:
c7:b5:63:4b:4b:29:a0:15:de:e4:26:f5:71:e7:60:35:00:3e:
88:5d:fb:95:2b:3f:f7:a2:6b:90:46:6f:0e:7c:d0:ee:7c:28:
52:6c:31:9a:54:6d:6e:df:7a:15:f3:59:3f:cd:11:cc:8f:eb:
02:eb:db:98:21:e6:32:ef:cb:73:e5:f9:63:fc:6d:5e:a5:fe:
a1:3c:49:f0:89:7c:b7:d7:66:1e:ee:bc:fd:36:ba:d4:e2:cb:
1b:a7:cb:d2:7d:ee:e4:31:e0:6b:69:58:4a:a2:91:58:ed:72:
c2:59:74:17:36:24:8d:2e:57:b6:ea:c4:4c:44:39:54:f9:3c:
9f:1f:fd:e9:4e:f3:e2:bd:e3:c6:02:b8:5a:fe:fd:42:41:3a:
ef:06:c5:40:c7:1b:4b:64:2d:d2:0d:df:4d:30:a1:9a:f1:88:
47:81:fa:2e:80:9f:7f:e8:66:5b:dc:40:1f:bc:b5:94:15:09:
40:f5:42:50:92:b5:6e:80:1a:1d:96:71:01:a9:b2:1d:10:e5:
25:dc:aa:e9:43:88:66:f5:3e:39:ce:ba:97:cb:48:32:0f:d9:
d0:b2:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:31 2026 by rpki-client