
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json)
Hash identifier: F7aqSlaffJKgLS3OaJ/uNyod+MPzVsAaCTrJGEGbk88=
Subject key identifier: 23:84:1F:21:88:69:18:85:93:03:76:6D:5F:DB:14:5D:79:09:53:8F
Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
Manifest number: 0199
Signing time: Thu 21 May 2026 04:20:27 +0000
Manifest this update: Thu 21 May 2026 04:20:26 +0000
Manifest next update: Thu 28 May 2026 04:20:26 +0000
Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: 9pAFFgL9N1mFFC5+wCbPN2n0OBCnS7MsNs+zq+Om/D4=)
2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: qHKPAO+iCN/5xje+tGrEHy5PZ4Gr8KsPsnqdqu/3QUc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Validity
Not Before: May 21 04:20:26 2026 GMT
Not After : May 28 04:20:26 2026 GMT
Subject: CN=6a0e880b-6a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:f3:fa:69:2c:6f:36:23:98:bc:89:eb:99:
20:dd:8c:98:f3:da:fe:51:8e:7d:a3:c1:c7:64:2c:
b5:8a:4c:e9:56:f3:74:f1:87:5a:9e:df:72:2f:a3:
8d:41:53:a7:a9:84:07:0f:c2:2f:ea:95:eb:fb:6d:
ed:27:c7:c0:74:c1:fc:c6:92:56:c4:cd:ec:c5:5c:
cc:ca:dc:e0:c9:84:9b:92:cb:28:d2:46:70:4b:26:
ba:27:ff:9f:53:13:e5:55:3f:c5:b4:cc:5c:37:ad:
e0:22:e9:8b:05:36:fa:b9:bc:f0:d8:61:33:02:de:
1d:af:bb:c6:82:35:3e:95:01:d9:6a:93:1d:c3:83:
92:9a:5e:27:6c:66:f5:32:86:43:7a:16:28:31:f9:
b2:60:8d:a8:86:1b:49:02:eb:e9:6d:46:4e:62:71:
e1:17:61:d3:9c:20:24:d6:63:bf:7d:1d:e5:cb:4d:
c4:0b:7a:a2:c5:6b:ec:5f:fa:85:4f:a7:06:cb:a1:
c5:ac:ce:9d:fa:9f:07:c1:4a:c7:94:fa:73:aa:b3:
cc:36:99:b6:78:56:46:ce:1c:e0:b4:bc:09:bc:8a:
2b:75:46:a2:05:a4:be:fe:64:67:13:f4:fd:c1:ae:
3b:b7:a4:09:db:87:a3:50:ab:4e:e9:19:a6:ca:d5:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:84:1F:21:88:69:18:85:93:03:76:6D:5F:DB:14:5D:79:09:53:8F
X509v3 Authority Key Identifier:
keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:90:04:9e:36:fc:a9:d2:a0:bf:9d:4f:8a:50:01:1c:b3:61:
91:04:d4:1f:69:49:fb:39:df:fa:9f:98:85:a7:bd:00:c3:00:
b9:95:73:3c:0e:34:fd:64:8a:b9:12:ab:23:cd:aa:0a:5e:10:
8a:43:a0:c6:2e:81:14:25:6a:f2:4c:9d:7c:28:96:06:cf:c7:
60:79:84:8b:7f:53:73:d0:15:31:f3:af:5f:c8:60:cb:91:af:
4a:fb:df:54:0e:38:56:b5:22:dc:4f:fc:9a:2e:8d:b4:df:c9:
05:e6:21:ee:c3:a5:e0:a1:aa:e5:81:4b:44:68:5d:01:a8:fb:
96:45:ae:56:64:bb:fb:d4:4f:63:1c:26:06:8a:13:26:57:ca:
4d:6d:9c:c3:74:40:19:fa:2d:b2:75:e3:ed:90:dd:b2:63:89:
bb:0e:bc:1d:c1:d7:c6:da:25:89:67:eb:ea:93:fe:bc:18:86:
0d:33:d8:cf:37:e4:e6:1f:d6:44:65:e8:08:69:20:98:b6:d1:
de:56:d7:63:ae:30:dc:75:d9:21:11:b7:08:72:21:fc:ef:2c:
b5:0d:ce:86:65:9f:c4:c4:b9:62:62:52:98:87:23:71:e4:25:
20:88:0e:31:b4:d8:09:23:bc:ba:1b:28:8e:e2:ba:96:7e:60:
31:2d:43:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZCREExMTAvBgNVBAUTKDEwN0EzOUMxQ0MwNEYyN0NDNzI2NjNEQkY3QkFFNkQ5
MkE5NTAzODAwHhcNMjYwNTIxMDQyMDI2WhcNMjYwNTI4MDQyMDI2WjAYMRYwFAYD
VQQDEw02YTBlODgwYi02YTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApnvz+mksbzYjmLyJ65kg3YyY89r+UY59o8HHZCy1ikzpVvN08Ydant9yL6ON
QVOnqYQHD8Iv6pXr+23tJ8fAdMH8xpJWxM3sxVzMytzgyYSbksso0kZwSya6J/+f
UxPlVT/FtMxcN63gIumLBTb6ubzw2GEzAt4dr7vGgjU+lQHZapMdw4OSml4nbGb1
MoZDehYoMfmyYI2ohhtJAuvpbUZOYnHhF2HTnCAk1mO/fR3ly03EC3qixWvsX/qF
T6cGy6HFrM6d+p8HwUrHlPpzqrPMNpm2eFZGzhzgtLwJvIordUaiBaS+/mRnE/T9
wa47t6QJ24ejUKtO6RmmytUY8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOEHyGI
aRiFkwN2bV/bFF15CVOPMB8GA1UdIwQYMBaAFBB6OcHMBPJ8xyZj2/e65tkqlQOA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkJEQS82QUQzNzRBQUU2
NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThuekhKbVBiOTdybTJTcVZB
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VIbzV3Y3dFOG56SEptUGI5N3JtMlNxVkE0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkJEQS82QUQzNzRBQUU2NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThu
ekhKbVBiOTdybTJTcVZBNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAJAEnjb8qdKgv51PilABHLNhkQTUH2lJ+znf+p+Yhae9AMMAuZVzPA40/WSK
uRKrI82qCl4QikOgxi6BFCVq8kydfCiWBs/HYHmEi39Tc9AVMfOvX8hgy5GvSvvf
VA44VrUi3E/8mi6NtN/JBeYh7sOl4KGq5YFLRGhdAaj7lkWuVmS7+9RPYxwmBooT
JlfKTW2cw3RAGfotsnXj7ZDdsmOJuw68HcHXxtoliWfr6pP+vBiGDTPYzzfk5h/W
RGXoCGkgmLbR3lbXY64w3HXZIRG3CHIh/O8stQ3OhmWfxMS5YmJSmIcjceQlIIgO
MbTYCSO8uhsojuK6ln5gMS1DgA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:58:24 2026 by rpki-client