
$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
File: E0_EgN8WeugPs_TETe9qm6mZWpE.mft (raw, json)
Hash identifier: 4/oQTUnTjvdVQpT2MO2xolnFYERYS2VLO5HDltaHyIo=
Subject key identifier: 4E:7A:C9:65:41:E5:27:C7:E2:11:03:7C:FB:41:B7:A0:41:3E:F9:83
Authority key identifier: 13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Certificate issuer: /CN=A91736F5/serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
Manifest number: 28
Signing time: Tue 03 Mar 2026 08:29:37 +0000
Manifest this update: Tue 03 Mar 2026 08:29:36 +0000
Manifest next update: Tue 10 Mar 2026 08:29:36 +0000
Files and hashes: 1: E0_EgN8WeugPs_TETe9qm6mZWpE.crl (hash: QolsJ05eJRRf0kdpEBAvGNJP55J9Ap0ZNTUpY5HBjJQ=)
2: F2C40E76FCCF11F08F91A5156B6F56BC.roa (hash: cGwV7bgKdceFNs6VRRM2Am77NZHIMJxyNkGVkbRTjLY=)
3: 17CFC78AFBA611F084AB06C85C6F56BC.roa (hash: EFiAI8HriNBWNG3CIQNK3bGdXLBEF+nSIaNzRbQQUMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Validity
Not Before: Mar 3 08:29:36 2026 GMT
Not After : Mar 10 08:29:36 2026 GMT
Subject: CN=69a69bf0-1abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:7c:e6:ba:b1:a5:bb:0d:12:ae:50:a8:a6:
3b:45:ec:3d:58:69:29:d3:31:86:60:d5:c7:4d:ab:
e0:b7:79:5c:1b:29:b3:9f:c2:21:5e:1d:01:55:29:
36:67:5f:f6:22:93:d9:cd:80:1e:bf:d4:fc:ce:0e:
d3:1b:2c:73:5d:ab:56:e9:e9:97:86:d1:2a:72:eb:
4b:d9:e3:ec:a0:88:fc:70:65:31:6d:61:11:5b:3e:
5f:20:4e:e5:ef:8d:c8:df:b7:d2:86:81:fb:86:0d:
d6:4f:dd:06:da:26:96:84:bb:df:22:1d:16:19:d6:
d3:41:fe:a9:b2:da:ed:10:52:c5:00:ec:1f:01:6a:
8a:b1:7b:d8:7f:1e:3d:b3:96:8d:60:f9:fd:63:9f:
48:14:17:86:88:d1:8a:79:36:69:76:a5:77:9b:66:
ab:fe:da:a5:be:25:4b:21:0d:74:f9:31:18:52:b7:
05:a2:58:88:82:bd:03:a8:78:1d:be:37:ea:e7:90:
fc:28:cd:1d:2b:a9:09:5d:34:04:0f:8c:8e:e2:7e:
14:6f:84:5d:b1:12:19:13:ac:c1:55:00:d0:d8:06:
19:54:27:2e:60:5a:a4:9b:02:75:46:7d:19:77:ef:
f4:fb:90:27:ae:01:2d:96:e3:f7:4e:9f:c1:35:4e:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:C9:65:41:E5:27:C7:E2:11:03:7C:FB:41:B7:A0:41:3E:F9:83
X509v3 Authority Key Identifier:
keyid:13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:2a:4d:b5:1a:8f:1a:47:fc:ff:9e:75:51:aa:67:ce:a4:2d:
4e:5a:8b:59:cf:5f:7a:07:53:0a:bb:61:aa:dc:f7:d6:ae:62:
92:56:e1:65:66:a1:b8:8a:d9:f4:e8:9e:c2:47:36:01:eb:c3:
a9:65:6c:95:b9:03:44:06:0a:4f:bf:a2:de:e3:85:ab:cd:1c:
1a:3a:7d:3c:c9:8a:c3:83:65:15:7c:d9:c6:67:30:c8:73:cb:
c5:41:de:a3:81:b9:b5:29:8f:b8:93:08:e4:d5:60:a6:26:c0:
a5:e3:48:9a:2c:52:aa:99:6e:d0:ed:8b:2c:b8:53:ca:bb:64:
ea:03:8a:ec:02:5f:c7:66:86:88:a0:57:e7:2e:0b:47:c5:70:
c3:98:00:45:94:17:68:4d:89:20:33:57:a5:d8:72:d6:22:51:
6d:48:2a:aa:b9:4a:27:03:9c:aa:e3:2c:5d:8a:5b:b9:4b:38:
81:53:fb:6e:02:72:6a:e4:17:ee:24:28:24:6c:42:fe:3f:59:
71:d3:41:a8:03:61:6e:ce:9b:f5:b8:ba:be:d2:a8:2d:ca:95:
fd:df:74:a9:8b:6d:aa:b8:15:15:71:3b:ba:f3:a1:5d:92:d9:
0f:d1:c9:4c:95:97:d5:cb:e1:61:9a:a3:f7:0c:57:e6:30:84:
12:5b:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:55 2026 by rpki-client