
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json)
Hash identifier: xfRBBqbf5WPeWir5Vo0WcmqadVGUc9DWPwDZYZI0U74=
Subject key identifier: 4E:2E:0C:42:C3:9E:31:21:68:DA:3D:EC:33:8E:09:5C:01:4A:57:C7
Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
Manifest number: 0182
Signing time: Sun 05 Apr 2026 04:01:17 +0000
Manifest this update: Sun 05 Apr 2026 04:01:17 +0000
Manifest next update: Sun 12 Apr 2026 04:01:17 +0000
Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: Yrx6jmiXkmhJjaBq7uycjQovvqrCSgC+rMJTjB3m2eA=)
2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: qHKPAO+iCN/5xje+tGrEHy5PZ4Gr8KsPsnqdqu/3QUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Validity
Not Before: Apr 5 04:01:17 2026 GMT
Not After : Apr 12 04:01:17 2026 GMT
Subject: CN=69d1de8d-c309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:a0:38:dc:42:a8:cd:59:76:62:45:6a:bd:
be:44:a9:40:d1:54:4e:56:03:83:da:3d:c9:7b:e0:
88:9c:a8:e1:4c:0e:98:12:38:ea:19:f9:99:ad:6f:
e6:d4:e8:da:4d:d2:f4:29:84:dd:b5:62:4a:2f:88:
06:68:c0:a4:d6:5b:f4:e3:ee:3d:5e:02:2b:f9:a6:
a8:e6:89:61:1a:72:1e:68:4e:32:a1:d5:6b:dc:9c:
11:cb:13:33:25:91:8f:26:78:5f:2c:fd:2e:f3:9e:
89:be:9f:85:2a:bd:fb:58:67:15:f6:dd:c9:5e:a8:
fc:28:71:80:00:c8:56:27:0f:4c:dc:42:b0:ba:9e:
d0:03:ed:02:2d:2f:e2:82:62:de:9c:fd:10:23:6c:
d2:7d:48:cf:d0:53:63:3d:ad:44:13:5f:16:78:bb:
d8:cd:9a:74:7b:62:de:0e:5d:12:44:0d:8a:85:42:
62:70:99:d6:60:00:df:78:20:0a:1b:f4:e2:b0:5a:
3c:78:19:05:17:44:8e:f5:10:16:08:0d:f4:8b:9b:
2b:46:17:af:45:77:37:32:e8:db:14:26:97:57:cd:
dc:6d:fa:d4:55:82:f1:5f:4d:20:6f:30:32:f4:2b:
a9:55:13:bd:3f:f1:c6:3a:d2:36:22:26:ea:2e:51:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2E:0C:42:C3:9E:31:21:68:DA:3D:EC:33:8E:09:5C:01:4A:57:C7
X509v3 Authority Key Identifier:
keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d6:9a:33:37:57:8b:f0:c1:32:77:5e:fa:87:0c:7d:df:7b:
1c:a9:67:97:66:6a:a8:31:33:b8:9c:d5:a5:e2:1f:38:d7:99:
6f:d3:f7:5b:85:f2:e1:43:a3:43:c1:02:d8:58:e0:bc:f4:9e:
56:6e:32:ae:a8:cb:b2:44:5d:c0:72:88:f9:d5:33:50:95:13:
13:16:b9:f9:f3:13:be:19:b2:ab:ce:2c:6f:8f:82:29:3a:06:
05:b4:90:e5:e8:85:f9:52:72:53:b8:7f:ec:ba:10:0a:e5:b9:
0f:a1:ca:50:89:f3:03:ed:40:9c:41:3c:f6:7b:ce:4b:72:db:
65:30:9a:ec:1c:9f:eb:7c:fb:6c:6f:a5:1e:18:8e:47:98:86:
74:8c:8a:fb:5d:47:3e:6b:89:a6:08:95:aa:a3:a3:2e:0c:88:
98:e5:a6:ff:b3:38:6c:92:6e:d1:3a:e4:24:21:93:2f:54:ef:
21:e7:e1:29:06:3f:35:c9:24:92:bc:71:57:2c:86:ea:b5:01:
3c:2f:72:3a:e9:f3:49:1b:8a:5a:62:67:6a:e6:77:e8:d3:b4:
76:b0:e9:1b:80:5c:d3:5f:ad:c3:5e:96:12:56:0c:be:dc:b9:
65:36:9e:1d:80:20:2b:da:ed:4e:b8:53:6b:1e:cd:40:75:d2:
21:58:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:38 2026 by rpki-client