
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json)
Hash identifier: FGqxeEpyJ5QTFYtM/WjwdDjxLpKlUXtDefhU+neRcyI=
Subject key identifier: 87:6E:41:7E:9B:4D:25:53:21:2F:15:1B:1B:30:4B:4D:37:90:E4:4A
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
Manifest number: 0248
Signing time: Thu 21 May 2026 02:32:27 +0000
Manifest this update: Thu 21 May 2026 02:32:26 +0000
Manifest next update: Thu 28 May 2026 02:32:26 +0000
Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: 3dqvQa8rYtUv3+O+/hBJekU3Ml66T1cuFyloQXbNd+A=)
2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: Tnjt2fGEhLyDlPP5wmN279sZk46aIOs3pcrgnxrQla0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Validity
Not Before: May 21 02:32:26 2026 GMT
Not After : May 28 02:32:26 2026 GMT
Subject: CN=6a0e6eba-c1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:02:a0:28:a9:f7:24:5c:1b:69:99:fb:35:
75:ae:62:ae:7b:a8:5b:a2:a5:41:7b:60:13:f8:2c:
13:10:21:bc:29:e4:c5:23:fd:52:fd:89:16:eb:d1:
a0:7e:3c:a7:44:b0:4d:d8:3f:e2:7e:06:1d:a1:0e:
ba:98:4d:77:cf:9b:01:47:3e:ad:34:52:31:1e:d1:
fa:25:69:e8:0f:09:bd:4a:d5:a7:61:61:7e:b8:47:
e3:ae:c7:55:c9:36:2a:43:a2:ae:5f:7a:f8:1a:59:
d7:4f:36:fa:2d:ae:21:8a:89:3f:91:a2:4c:cb:f8:
d8:10:bb:3a:15:7e:02:00:c3:52:30:40:34:bb:5e:
6a:b3:04:51:78:5f:7b:c1:33:ae:7e:86:9c:4f:23:
5a:3a:47:54:a9:1d:e2:14:17:22:1e:b5:d6:c2:77:
ff:00:8e:14:28:f0:fd:fc:2c:5c:49:ea:e2:b9:2a:
f3:3d:cc:a8:1e:a1:a1:03:9f:a8:ab:ee:84:f2:fd:
74:f2:4c:e2:b8:5b:b1:b0:1d:33:b0:d2:b1:50:1b:
d5:57:cf:68:85:a7:84:17:17:b8:b8:d8:cc:1e:48:
22:69:65:68:bc:d5:ed:e6:ee:bd:1c:f5:77:5c:bf:
de:a6:aa:df:03:57:35:2f:2b:11:01:42:65:44:93:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:41:7E:9B:4D:25:53:21:2F:15:1B:1B:30:4B:4D:37:90:E4:4A
X509v3 Authority Key Identifier:
keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:7f:a8:0d:37:1a:2d:c4:92:1c:df:30:07:10:2d:14:0a:9c:
61:87:31:f6:85:8f:71:4a:a2:da:83:6c:c0:29:cc:ae:87:02:
37:fc:b9:13:30:3a:39:c6:e0:36:3b:28:f8:03:99:46:9e:18:
71:af:5b:d5:6f:94:62:b6:fc:9d:be:28:a2:25:14:74:ca:59:
d1:b6:86:f4:3e:4a:06:15:df:a4:a3:6f:5a:08:cb:1b:fa:d1:
66:d8:06:bf:b4:0c:52:7f:72:64:d9:c3:3f:28:0d:16:85:01:
62:17:b5:85:16:29:8f:f0:ae:55:68:a2:bf:4b:d7:0b:e8:a5:
49:61:3d:be:a1:35:4c:f0:d4:cf:62:bb:ac:ea:4a:0d:ce:36:
2e:de:aa:52:d5:e5:99:10:c3:97:06:20:10:01:2f:9d:e6:e8:
6e:31:61:68:fb:54:1d:48:40:f6:7e:1c:d1:3f:f2:0e:9b:9c:
52:e5:ff:ba:8f:a7:a7:b9:50:8e:b6:10:f7:df:13:fd:17:ee:
e2:b8:d0:ff:75:32:d2:71:03:67:dd:bf:23:bf:52:19:da:eb:
74:4e:cd:f1:54:2f:1d:49:4e:d2:ff:99:b7:98:9f:d1:0b:e7:
52:ce:8a:59:3e:2d:ae:ab:e4:76:9f:f3:53:bd:ba:9a:78:4f:
49:a3:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:11 2026 by rpki-client