
$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File: ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier: k+5IVvsabfbg5iAcQOvtdcQ7yiLyVLknYpQKuUs+IIk=
Subject key identifier: 00:DF:8F:7A:5C:FA:8C:69:0B:DC:55:B4:31:7D:1A:45:25:46:89:E1
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer: /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial: 0F2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number: 0EFF
Signing time: Sat 28 Mar 2026 17:34:43 +0000
Manifest this update: Sat 28 Mar 2026 17:34:43 +0000
Manifest next update: Sat 04 Apr 2026 17:34:43 +0000
Files and hashes: 1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: ApkZC21XJgLE8FLcsnKWSMq9McY0a+IrEnnhixbRHOs=)
2: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 7mK7C2dDA9Pr5XARK5lfOZOhUbUYxwvET636T8UBOLs=)
3: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: stFWg1dMHznKMtzRSOUwWm0CGmuogU2NNcwYBYm0LzM=)
4: 93713A1442F311EDA8889068C4F9AE02.roa (hash: kW/azHIo/hS4GG4jZMMnW9bGd24sdPe70lFUMVnm2rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 17:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3883 (0xf2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Validity
Not Before: Mar 28 17:34:43 2026 GMT
Not After : Apr 4 17:34:43 2026 GMT
Subject: CN=69c81133-fcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:2a:40:9f:8a:26:27:66:eb:1b:01:93:a4:
43:1d:69:9b:51:d8:a1:56:39:f3:a0:da:fb:9d:4e:
d8:78:bb:d7:23:26:d2:51:9a:4a:d3:24:71:91:e9:
8d:c2:45:d2:72:d0:9e:71:c9:fb:5d:91:9c:a1:16:
a0:8d:b2:79:32:c0:17:42:9a:3b:eb:a6:97:d0:bc:
7f:11:1d:14:14:72:16:5c:7e:2b:a4:bc:47:6a:57:
d5:ba:0e:d5:94:6d:ee:31:7c:eb:35:62:01:d9:dd:
47:e8:ec:3c:82:70:c4:0c:05:66:5f:9b:04:d1:35:
99:e4:de:e3:74:9f:ea:6c:b1:e6:d4:fb:ac:5f:f9:
ef:b6:ff:7b:ba:b3:7a:11:50:e8:59:ce:dc:06:be:
fb:f3:b9:8b:1e:c8:5c:da:c3:61:e6:c6:5d:c4:f6:
3b:0b:9d:36:b7:3e:11:9f:ee:a7:ff:60:cd:2a:cc:
f3:d8:00:32:63:3c:b6:93:5b:1b:10:10:cf:34:b7:
17:8d:39:e8:0c:f9:44:58:9f:2f:08:6e:53:2d:c7:
fd:ed:c0:7d:08:2e:ec:22:90:9d:98:8c:10:34:a9:
9c:9a:d3:5e:ec:d2:ea:61:00:dd:1c:72:e2:2a:7e:
00:86:3d:0c:7e:d9:34:b2:74:4b:a6:d8:e8:72:4b:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DF:8F:7A:5C:FA:8C:69:0B:DC:55:B4:31:7D:1A:45:25:46:89:E1
X509v3 Authority Key Identifier:
keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:a3:13:c2:43:e1:c1:ce:b8:9f:fa:88:14:55:41:1f:bb:64:
c5:d6:23:19:04:cd:5c:46:f5:b2:1f:2a:7f:f5:d5:b7:70:16:
4b:48:6e:28:63:b5:f0:43:1c:b0:19:2a:c5:30:7b:60:c8:ec:
5b:c1:d8:b6:95:32:11:16:c2:5a:0c:bc:bb:12:69:65:39:86:
c8:a8:6e:55:43:87:a7:48:f7:65:5d:7c:05:d6:7a:40:24:71:
a0:2d:0b:3b:d8:67:93:f6:aa:cc:04:01:4a:a4:77:5a:69:cf:
81:e8:c0:c7:2b:37:cc:82:d3:9d:5f:d2:be:e6:62:93:18:b2:
1b:02:2e:6d:04:a7:1f:2d:c8:73:ef:eb:cc:eb:fc:48:94:54:
95:13:79:81:2a:c1:48:c4:21:9c:c2:26:25:de:c6:9a:ab:c5:
9f:99:f1:36:0c:a2:d0:10:0d:a6:ca:a7:4e:63:40:f6:81:06:
98:8d:65:2b:86:b5:ed:5f:a8:e0:8f:69:fc:21:27:04:e7:bd:
7c:f7:cc:bf:e3:f2:fd:60:83:d0:e4:8c:2c:2b:6a:82:ea:da:
b2:1b:3e:f0:7d:4e:f8:b0:c5:3c:c5:77:40:5f:c9:d0:25:f7:
29:3d:16:08:97:03:b0:0e:57:66:a9:08:59:54:81:6a:c3:49:
fa:49:61:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5
NTVFRDg5RTAwHhcNMjYwMzI4MTczNDQzWhcNMjYwNDA0MTczNDQzWjAYMRYwFAYD
VQQDEw02OWM4MTEzMy1mY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJwqQJ+KJidm6xsBk6RDHWmbUdihVjnzoNr7nU7YeLvXIybSUZpK0yRxkemN
wkXSctCeccn7XZGcoRagjbJ5MsAXQpo766aX0Lx/ER0UFHIWXH4rpLxHalfVug7V
lG3uMXzrNWIB2d1H6Ow8gnDEDAVmX5sE0TWZ5N7jdJ/qbLHm1PusX/nvtv97urN6
EVDoWc7cBr7787mLHshc2sNh5sZdxPY7C502tz4Rn+6n/2DNKszz2AAyYzy2k1sb
EBDPNLcXjTnoDPlEWJ8vCG5TLcf97cB9CC7sIpCdmIwQNKmcmtNe7NLqYQDdHHLi
Kn4Ahj0Mftk0snRLptjocksrAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADfj3pc
+oxpC9xVtDF9GkUlRonhMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF
MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTFENy82OEYwOTI5MjlFMkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFD
ckFhcEFkWmJ1YXlWWHRpZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZaMTwkPhwc64n/qIFFVBH7tkxdYjGQTNXEb1sh8qf/XVt3AWS0huKGO18EMc
sBkqxTB7YMjsW8HYtpUyERbCWgy8uxJpZTmGyKhuVUOHp0j3ZV18BdZ6QCRxoC0L
O9hnk/aqzAQBSqR3WmnPgejAxys3zILTnV/SvuZikxiyGwIubQSnHy3Ic+/rzOv8
SJRUlRN5gSrBSMQhnMImJd7GmqvFn5nxNgyi0BANpsqnTmNA9oEGmI1lK4a17V+o
4I9p/CEnBOe9fPfMv+Py/WCD0OSMLCtqgurashs+8H1O+LDFPMV3QF/J0CX3KT0W
CJcDsA5XZqkIWVSBasNJ+klhVw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:51 2026 by rpki-client