
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File: EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier: YVnp7RE0/gC4tqAC1T9MFBjnV29LSa1bfMdRFRnV/XE=
Subject key identifier: 3A:03:8B:B9:BE:4A:5B:BE:8A:49:8F:A7:1A:F0:38:21:48:3B:A6:8D
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number: 0245
Signing time: Tue 21 Jul 2026 03:42:24 +0000
Manifest this update: Tue 21 Jul 2026 03:42:24 +0000
Manifest next update: Tue 28 Jul 2026 03:42:24 +0000
Files and hashes: 1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: H0Rym9y5K1ViY+whaTW/f9lyENb4UMv+N/zt7VeppKU=)
2: 32D39C06224511EE81776175C4F9AE02.roa (hash: hNFbYhd9+ijqK3DkikE6pXZI2IbUd5uk8px8ztk57j4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Validity
Not Before: Jul 21 03:42:24 2026 GMT
Not After : Jul 28 03:42:24 2026 GMT
Subject: CN=6a5eeaa0-97a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:c2:66:ce:e2:96:2d:3d:a3:d1:b2:89:7c:
55:ae:0a:50:65:87:ad:43:1d:29:1d:43:f3:e1:6a:
db:27:d8:1b:f6:13:01:9f:f1:5e:42:81:98:29:9c:
8c:35:67:4b:e4:84:b4:fc:d4:4e:28:f3:d0:a5:9e:
4a:f5:20:1d:f9:be:d5:e0:16:b8:b0:aa:97:4a:cd:
0c:b5:a6:a0:0d:81:bb:02:c5:6a:70:61:34:f3:9a:
7a:c2:6b:8b:0c:af:5e:08:5c:32:a6:28:1b:97:66:
62:38:c7:7c:02:a4:2d:82:38:53:bc:6a:0b:b9:71:
94:d8:8d:b5:f9:e1:91:64:17:03:cc:2f:d0:7a:e8:
4e:16:dc:30:e3:a7:3b:60:3c:cf:b6:c4:fb:a9:51:
2a:9e:6d:9f:8b:0f:19:4a:97:a2:cf:34:fc:5b:14:
07:60:0a:ee:70:ca:35:90:7e:0b:05:73:4d:1c:81:
6f:45:c4:15:50:97:61:11:ec:be:e3:28:40:87:03:
2a:01:0a:f5:64:ea:fc:14:ba:26:29:b5:fd:ba:68:
df:8e:58:e9:b1:d5:6e:45:d8:b1:48:2b:e3:bb:08:
7a:69:90:c4:0c:aa:7c:26:a3:e1:37:0a:cf:34:d8:
8f:7e:9e:8a:ee:04:e5:46:98:56:3f:51:32:9d:a7:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:03:8B:B9:BE:4A:5B:BE:8A:49:8F:A7:1A:F0:38:21:48:3B:A6:8D
X509v3 Authority Key Identifier:
keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4e:e9:c2:52:76:fe:61:d9:b8:e5:3c:99:5d:3f:af:35:50:
02:49:b1:5a:07:09:46:b3:89:31:69:5e:e0:55:2c:ff:7c:76:
75:d5:6f:7d:75:b3:f0:ba:0c:9d:58:8d:d0:a7:81:97:7b:8a:
4d:d5:90:4f:53:35:86:05:6d:9f:37:ce:be:5b:e0:81:78:66:
0d:c5:66:89:44:97:e9:e7:ef:16:43:c4:27:c2:f8:1f:05:a7:
db:a6:f5:8d:94:a1:b5:8d:8b:c8:c7:42:f1:5a:44:e5:74:76:
7d:a1:cc:91:1d:90:69:42:d2:0b:02:9b:c0:96:f6:fd:8d:01:
14:be:7d:c4:38:60:70:68:c5:19:68:19:6e:de:e0:bf:0b:cd:
b7:1e:49:92:6a:84:83:d2:b9:9a:c0:14:b3:7a:ab:86:83:94:
c3:57:28:01:1d:3f:50:23:2e:b5:55:c6:e4:5f:92:be:ca:bb:
f6:e6:7e:04:a7:6e:12:94:81:3f:df:35:8f:a5:92:98:13:ea:
16:9f:de:99:65:0a:35:88:de:e3:45:35:98:14:02:e9:a3:87:
5c:29:31:89:83:87:bf:af:2d:fc:09:eb:63:c7:a2:22:3e:b1:
31:89:83:fa:c5:b8:8a:13:7c:34:1e:e7:56:32:e8:4a:44:b6:
8e:79:fe:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ4NDQxMTAvBgNVBAUTKDExNjREQTYwNDM0REVFNUVCMTRCQjUzRDRCNTk0RTY2
NURGMjZGRjYwHhcNMjYwNzIxMDM0MjI0WhcNMjYwNzI4MDM0MjI0WjAYMRYwFAYD
VQQDEw02YTVlZWFhMC05N2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4afCZs7ili09o9GyiXxVrgpQZYetQx0pHUPz4WrbJ9gb9hMBn/FeQoGYKZyM
NWdL5IS0/NROKPPQpZ5K9SAd+b7V4Ba4sKqXSs0MtaagDYG7AsVqcGE085p6wmuL
DK9eCFwypigbl2ZiOMd8AqQtgjhTvGoLuXGU2I21+eGRZBcDzC/QeuhOFtww46c7
YDzPtsT7qVEqnm2fiw8ZSpeizzT8WxQHYArucMo1kH4LBXNNHIFvRcQVUJdhEey+
4yhAhwMqAQr1ZOr8FLomKbX9umjfjljpsdVuRdixSCvjuwh6aZDEDKp8JqPhNwrP
NNiPfp6K7gTlRphWP1Eynaf5IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDoDi7m+
Slu+ikmPpxrwOCFIO6aNMB8GA1UdIwQYMBaAFBFk2mBDTe5esUu1PUtZTmZd8m/2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDg0NC83ODc2OTQ3NDE2
NTIxMUVFOTE0QjdCNTZDNEY5QUUwMi9FV1RhWUVOTjdsNnhTN1U5UzFsT1psM3li
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VXVGFZRU5ON2w2eFM3VTlTMWxPWmwzeWJfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDg0NC83ODc2OTQ3NDE2NTIxMUVFOTE0QjdCNTZDNEY5QUUwMi9FV1RhWUVOTjds
NnhTN1U5UzFsT1psM3liX1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArk7pwlJ2/mHZuOU8mV0/rzVQAkmxWgcJRrOJMWle4FUs/3x2ddVvfXWz8LoM
nViN0KeBl3uKTdWQT1M1hgVtnzfOvlvggXhmDcVmiUSX6efvFkPEJ8L4HwWn26b1
jZShtY2LyMdC8VpE5XR2faHMkR2QaULSCwKbwJb2/Y0BFL59xDhgcGjFGWgZbt7g
vwvNtx5JkmqEg9K5msAUs3qrhoOUw1coAR0/UCMutVXG5F+Svsq79uZ+BKduEpSB
P981j6WSmBPqFp/emWUKNYje40U1mBQC6aOHXCkxiYOHv68t/AnrY8eiIj6xMYmD
+sW4ihN8NB7nVjLoSkS2jnn+Rw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:47:03 2026 by rpki-client