
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
File: EJuU59mz5nnpnGKnotSXoX05lxg.mft (raw, json)
Hash identifier: 9vbNg66UZx2vK3UurAQJI4tyn0vNYMaFAEiCQlHOPOg=
Subject key identifier: 17:0A:AB:FD:95:3E:D0:57:4F:20:C0:0B:34:D5:14:D7:DB:5F:1B:AC
Authority key identifier: 10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18
Certificate issuer: /CN=A91AA1F9/serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
Manifest number: 3B
Signing time: Wed 07 Oct 2026 09:09:26 +0000
Manifest this update: Wed 07 Oct 2026 09:09:25 +0000
Manifest next update: Wed 14 Oct 2026 09:09:25 +0000
Files and hashes: 1: EJuU59mz5nnpnGKnotSXoX05lxg.crl (hash: 9vjJUl9gaYF40+O2CJSOt8pUSg+ThEdJtUXGqBNN44w=)
2: 4A12ECDA687B11F1991CF7FE6647A888.roa (hash: DUotnWkAe6FNoAWorklQvryeqsRSLpu4L9xS7rYPygY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl
rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA1F9, serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
Validity
Not Before: Oct 7 09:09:25 2026 GMT
Not After : Oct 14 09:09:25 2026 GMT
Subject: CN=6ac60c46-34dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:b9:42:ef:ba:ab:33:d8:2e:5c:36:58:c4:
14:d1:fa:2f:2d:13:fd:99:d9:e3:a3:f7:52:e7:51:
b9:e4:87:7b:a4:4d:10:50:28:d7:c7:70:d8:f6:96:
1a:a6:3a:db:d6:2c:cb:90:df:b0:93:81:76:7a:4f:
9e:09:d9:8f:7a:d0:29:b7:70:80:e2:3e:64:aa:68:
69:06:1f:84:59:77:ce:ba:d7:21:32:c4:7f:f2:0c:
df:9a:91:99:7c:3c:11:f3:cf:a1:f0:88:c2:09:50:
af:b7:5d:b5:f4:5d:a1:01:f3:34:e0:8f:70:cd:25:
9a:1d:52:2e:0b:95:ca:d1:69:be:cf:18:b4:07:4e:
2c:07:03:34:bb:4a:1e:9c:6c:bc:36:c2:1b:ed:0b:
f9:1f:d8:11:bf:e2:be:13:73:7f:fe:44:e6:27:d8:
e1:38:f6:b0:f9:90:9b:06:24:ab:f6:55:9d:f7:08:
61:57:81:55:a6:19:ed:79:3d:12:eb:04:3b:f7:1a:
83:3a:f4:60:dd:62:0f:6f:5b:f3:a7:71:6e:d5:e0:
ce:5d:ec:a4:c7:9e:3e:0d:94:40:30:8d:8e:46:40:
69:5d:8e:48:2d:b5:fc:c6:ab:ca:6f:75:b2:27:63:
14:34:5f:80:b3:65:1c:46:16:04:46:b5:73:3a:0f:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0A:AB:FD:95:3E:D0:57:4F:20:C0:0B:34:D5:14:D7:DB:5F:1B:AC
X509v3 Authority Key Identifier:
keyid:10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:00:16:01:f3:cd:af:70:fe:eb:7d:c8:0e:83:d5:8d:c2:eb:
f3:d2:22:e3:73:cb:a5:4b:7b:67:7c:8c:5c:82:d6:59:fe:23:
0c:e3:75:28:0f:20:21:21:49:18:05:0d:a3:c7:fc:9c:27:1a:
01:ee:07:14:fb:02:34:b6:2e:c2:53:dd:f7:b5:04:cd:08:ce:
dd:86:b2:bb:cb:65:bb:17:52:e7:3e:cd:28:41:07:a9:27:47:
13:c2:d0:8d:1f:3c:78:28:5a:dd:d2:ff:d5:54:b1:ec:db:ff:
27:d3:81:0e:0e:f5:07:4c:2d:f4:e8:95:07:a3:66:21:d0:46:
a4:d1:3d:89:05:8c:0c:fe:ed:51:20:9a:26:9b:86:4e:ec:cc:
d3:a3:13:19:be:ff:99:ba:c2:8b:1f:5e:29:b7:5d:fd:b5:fa:
e3:02:04:31:23:1f:9a:d0:57:f3:5b:29:08:57:a5:33:7d:9e:
c6:6a:a1:59:9b:7d:f2:29:8a:89:e0:4e:0f:61:fa:bf:9c:92:
20:6b:98:77:52:9d:de:a7:3f:e8:29:c8:f6:be:a9:43:ce:4b:
94:b9:59:fe:bc:74:22:77:cb:c7:e1:e9:e7:e3:b8:3a:a7:5d:
0b:61:0a:28:cb:db:bd:12:1c:08:d9:fa:28:b7:6a:64:f4:7d:
74:e8:94:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:03:54 2026 by rpki-client