
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File: EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier: X2gl7tcJbCLWzthNY+nrLgPt0x6yCNiotDThUgZgAzQ=
Subject key identifier: EC:9F:5A:8E:36:5A:32:8B:32:5F:5A:DF:FC:D2:E2:EB:05:C3:96:3A
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial: 0266
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number: 025C
Signing time: Thu 03 Sep 2026 02:26:10 +0000
Manifest this update: Thu 03 Sep 2026 02:26:10 +0000
Manifest next update: Thu 10 Sep 2026 02:26:10 +0000
Files and hashes: 1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: O3oD1R68gaDNwH6E+tHpWjuES7NHjYWbwMJevGR02cU=)
2: 32D39C06224511EE81776175C4F9AE02.roa (hash: hNFbYhd9+ijqK3DkikE6pXZI2IbUd5uk8px8ztk57j4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 614 (0x266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Validity
Not Before: Sep 3 02:26:10 2026 GMT
Not After : Sep 10 02:26:10 2026 GMT
Subject: CN=6a98dac2-51dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:f0:cb:2d:58:93:6c:be:ab:4d:74:1f:4c:
6f:7e:5b:67:84:fa:7c:2f:e3:12:f8:1e:59:bb:49:
e7:f1:97:d8:da:76:ce:2f:67:66:dd:7d:6f:8d:40:
22:b3:69:47:46:c6:04:ba:96:e7:2e:f9:31:8d:8a:
d5:f6:67:1e:ea:bc:6b:a0:cd:6e:30:1c:bd:d3:b8:
b8:70:d2:0a:48:db:f7:22:37:d8:a7:c3:cb:34:8a:
58:59:32:40:81:f5:8e:95:43:01:a5:d1:03:9e:66:
c2:6e:4e:3a:90:79:dd:27:6d:99:a5:36:54:8a:54:
b4:32:2b:25:3a:5a:3d:18:e5:c4:cb:f1:61:ff:16:
e7:e2:03:17:1d:ad:58:f7:92:2f:26:f0:d6:9d:ed:
d3:11:02:1f:9d:d0:2b:8e:3c:cc:1b:55:e4:32:bb:
5d:6f:96:eb:f4:9c:54:49:a5:16:ca:00:cd:54:8d:
9b:87:3e:85:6f:41:97:f6:29:12:2c:4b:66:3a:dd:
de:0f:b3:bd:e1:b2:bd:26:7a:26:4c:54:4e:b6:a1:
ab:9b:c6:11:23:56:fd:95:63:79:82:5c:d9:f0:e1:
1f:9b:2b:88:6d:ab:b9:c0:92:ee:15:6d:85:aa:57:
6a:96:3f:5c:7a:bb:52:df:1c:3b:7d:eb:62:c6:d2:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9F:5A:8E:36:5A:32:8B:32:5F:5A:DF:FC:D2:E2:EB:05:C3:96:3A
X509v3 Authority Key Identifier:
keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a6:f4:80:fb:20:1d:a5:b6:78:9f:34:49:63:fa:a2:57:0d:
f0:5d:a7:73:04:d2:02:44:23:01:d9:14:99:a1:17:37:4f:a3:
9e:91:99:7b:0c:31:3a:b0:68:02:e6:69:48:52:6a:91:d2:34:
a2:1e:6d:37:d9:47:6e:d1:c5:7e:6d:00:b2:d8:1d:f2:15:8f:
3a:41:67:d5:61:62:d5:49:e7:39:e0:61:0b:96:36:6f:95:a1:
cd:e5:d4:df:0c:38:7c:01:a0:fc:64:e0:61:41:2b:cd:23:71:
8e:e0:69:4d:f7:c5:db:60:3f:6d:55:92:31:43:f0:f4:55:2c:
10:9f:71:17:9d:9f:a8:37:03:8c:3a:51:9f:36:31:65:ab:4e:
7a:28:29:fb:e7:2c:65:57:a7:99:d6:19:de:99:b9:7b:98:10:
37:04:13:18:b2:8e:fb:18:49:b7:b7:4b:31:38:62:37:5d:cd:
77:40:9b:19:65:3f:f3:34:9c:34:a1:b9:1c:e0:cc:0f:98:c4:
57:ba:f8:dd:9b:2e:8c:6f:5c:25:17:59:98:cc:ce:82:0f:c9:
a8:fb:c7:98:50:b6:61:6c:32:85:3e:47:60:3f:e0:64:82:85:
c2:24:b2:4f:13:90:2a:0f:1c:9c:49:8a:fd:2e:c1:e1:6d:a9:
65:1e:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:51:08 2026 by rpki-client