
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
File: Egl6r4V7Yr00qic9P5s-2c5t8WE.mft (raw, json)
Hash identifier: AIwOnyVFL0usHsOSMx0S265OyA60zS73nEmzxKju4E0=
Subject key identifier: D2:91:0B:39:07:8D:53:6B:58:BF:48:D0:0D:DB:0D:0C:86:6C:29:8A
Authority key identifier: 12:09:7A:AF:85:7B:62:BD:34:AA:27:3D:3F:9B:3E:D9:CE:6D:F1:61
Certificate issuer: /CN=A91BBA31/serialNumber=12097AAF857B62BD34AA273D3F9B3ED9CE6DF161
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
Manifest number: A1
Signing time: Fri 17 Jul 2026 08:27:34 +0000
Manifest this update: Fri 17 Jul 2026 08:27:33 +0000
Manifest next update: Fri 24 Jul 2026 08:27:33 +0000
Files and hashes: 1: Egl6r4V7Yr00qic9P5s-2c5t8WE.crl (hash: creX9uErb65lE3tdCOOVCLDWuKCdTiurfTMZId/jzsg=)
2: D7F890AE893D11F0AE546821C4F9AE02.roa (hash: HQOF9cxORQdsB/zCNVYdskSeXOnxau/tyl16BSADtQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.crl
rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA31, serialNumber=12097AAF857B62BD34AA273D3F9B3ED9CE6DF161
Validity
Not Before: Jul 17 08:27:33 2026 GMT
Not After : Jul 24 08:27:33 2026 GMT
Subject: CN=6a59e776-533c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:63:bd:65:6f:b5:38:5d:a9:35:37:9a:22:
5f:d4:b5:b7:30:c2:56:1d:53:89:9f:58:51:5c:f4:
51:56:cb:3b:8b:66:08:cc:0c:58:91:cb:1b:a6:cd:
62:3e:86:fc:98:9e:a3:59:1e:23:d9:02:ee:67:74:
8d:1d:d3:e8:e5:bd:3b:c9:c2:85:57:04:35:d0:dc:
b4:80:f5:57:a7:e2:46:02:60:8b:0f:34:b0:03:51:
8c:2b:7a:0a:8c:20:ec:29:07:ed:fe:cf:a7:0c:59:
47:a9:1f:96:e1:9a:91:d8:09:ff:ee:0e:87:9d:4e:
9c:96:4e:3e:b3:69:84:02:a7:49:34:b4:35:73:3e:
54:b6:f3:4d:d8:35:24:d6:a8:da:cc:73:4c:a9:c8:
0b:e1:25:f4:28:2f:47:13:1a:60:c5:16:4f:4d:71:
4b:9c:c6:a0:63:79:01:28:9e:c8:4f:a6:7d:40:39:
2c:52:26:4e:26:e2:94:17:c1:39:ed:19:e5:77:3f:
90:94:8c:d8:16:97:63:46:50:49:cd:b9:07:7f:9e:
fa:a2:94:38:6a:24:26:e9:90:0b:99:cc:3a:bb:e5:
b4:69:e9:8d:84:11:13:1d:83:ce:7e:a7:63:6d:0e:
d9:4c:14:48:2d:c1:92:47:f2:c8:87:48:b2:b1:74:
f4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:91:0B:39:07:8D:53:6B:58:BF:48:D0:0D:DB:0D:0C:86:6C:29:8A
X509v3 Authority Key Identifier:
keyid:12:09:7A:AF:85:7B:62:BD:34:AA:27:3D:3F:9B:3E:D9:CE:6D:F1:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Egl6r4V7Yr00qic9P5s-2c5t8WE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/79870596893D11F0BCE7A720C4F9AE02/Egl6r4V7Yr00qic9P5s-2c5t8WE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:97:c7:c2:b3:50:97:43:82:94:c8:0e:d0:4b:84:ad:c2:d5:
ef:68:05:6a:73:b5:21:52:8f:df:ee:5d:f7:7e:1c:94:24:c0:
d5:d3:2c:79:84:ea:b0:20:e8:31:dc:c3:87:75:23:19:48:e2:
ae:04:39:f3:35:8e:de:22:7d:96:5e:01:6f:28:1b:53:99:b9:
4b:c5:cf:9a:df:6f:bc:62:b3:21:83:34:3e:0f:8b:0a:e4:b2:
5e:be:b9:b2:e7:9a:02:aa:ab:0c:b7:48:47:60:6d:f4:38:9d:
44:65:78:59:63:e0:9c:01:47:6f:ac:c7:ae:13:4a:56:39:4d:
f3:46:92:3d:57:a4:c3:7f:f9:f8:1f:f2:1c:ca:5e:95:09:a3:
82:f4:ac:aa:f6:a1:51:d8:af:76:08:16:89:b8:da:f5:3e:28:
e9:b6:e1:db:90:71:89:f1:f6:44:de:97:b4:35:ca:ce:11:2f:
0b:78:fa:b9:c1:fc:5d:d3:05:d7:ae:cc:bc:18:ff:cf:49:ad:
b7:e2:ad:0e:63:b5:74:c0:32:8d:08:6b:81:36:df:eb:3f:a2:
52:de:be:17:e2:4d:e8:1e:f0:7d:d5:db:b1:f4:16:48:49:35:
c0:0b:59:52:2d:e3:7a:c6:0a:10:1a:4d:07:c5:30:07:74:20:
13:33:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:24:33 2026 by rpki-client