
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
File: eEgGhmLmMK0APXDe2HIXjOg8DEs.mft (raw, json)
Hash identifier: AwRQuf/L46SESF/hzbgj/dI9hgJOdfI9DSFQlUZ7//Q=
Subject key identifier: BE:14:5F:27:4D:C4:E3:08:3F:AF:35:24:3A:C4:76:A4:D4:01:A0:CA
Authority key identifier: 78:48:06:86:62:E6:30:AD:00:3D:70:DE:D8:72:17:8C:E8:3C:0C:4B
Certificate issuer: /CN=A91C873A/serialNumber=7848068662E630AD003D70DED872178CE83C0C4B
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
Manifest number: 0A
Signing time: Wed 19 Aug 2026 09:53:43 +0000
Manifest this update: Wed 19 Aug 2026 09:53:43 +0000
Manifest next update: Wed 26 Aug 2026 09:53:43 +0000
Files and hashes: 1: eEgGhmLmMK0APXDe2HIXjOg8DEs.crl (hash: WOSPrVVM8P+CIrVLig88f6FjSWqJVdA+k4HOLe6iWis=)
2: B57C128E8F1411F1B4F762993411F970.roa (hash: CyRdafZtYteQkqRhGDaejp5amAP2SU7A6K/gROP8/go=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.crl
rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C873A, serialNumber=7848068662E630AD003D70DED872178CE83C0C4B
Validity
Not Before: Aug 19 09:53:43 2026 GMT
Not After : Aug 26 09:53:43 2026 GMT
Subject: CN=6a857d27-db0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:97:ed:2c:bb:77:56:17:25:ac:91:26:e5:
6d:43:c3:24:73:79:9b:88:1d:be:5b:b9:25:0c:ef:
99:bc:79:40:c0:f3:06:7d:2b:7c:ce:a9:40:5d:95:
39:16:85:84:ce:06:d7:a2:74:86:ee:6b:86:17:4b:
b5:33:aa:99:d1:44:06:f7:17:f4:84:84:1a:4d:4a:
ea:12:ae:af:39:16:b3:c0:c3:9d:8b:94:d9:aa:4d:
5c:98:68:d2:ea:ff:24:0b:0a:1e:d5:92:c0:2d:c1:
4f:48:00:67:c8:12:12:98:d8:d9:33:b1:f6:73:2f:
d2:87:74:a7:47:7d:65:e6:84:01:fe:f0:99:ec:3e:
c9:52:be:ae:0c:1a:bd:ae:78:3c:fd:db:3e:9b:03:
86:f6:3a:36:df:04:14:55:10:ec:75:b3:22:f2:c7:
a5:de:b9:a4:7d:ca:ec:fd:a6:d4:e8:0f:0d:af:d2:
90:31:a7:77:7d:86:fd:9b:49:1e:17:bf:7d:cf:c2:
5f:0a:8c:b6:c2:6a:31:ee:48:b9:a8:e2:3e:02:8d:
38:13:26:fa:80:36:45:db:d8:73:f8:7b:c5:77:25:
05:bc:34:a0:95:8a:f5:a4:ee:cc:b3:63:f0:d0:31:
40:d7:ed:84:f4:78:88:d4:c4:a8:44:0c:45:58:2a:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:14:5F:27:4D:C4:E3:08:3F:AF:35:24:3A:C4:76:A4:D4:01:A0:CA
X509v3 Authority Key Identifier:
keyid:78:48:06:86:62:E6:30:AD:00:3D:70:DE:D8:72:17:8C:E8:3C:0C:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:fa:a9:e3:c2:4c:dd:6a:3c:63:88:fe:74:41:4b:24:d5:
c3:e9:66:93:05:f4:6d:ee:95:5e:6c:d2:70:55:a8:71:c5:31:
16:14:17:43:f4:34:cb:9c:e0:11:40:a9:80:7a:4b:6e:d0:8a:
6b:b8:43:92:90:ac:f9:ef:cc:40:3c:e2:6f:b2:c4:bb:62:ef:
a1:67:dc:b0:5f:1b:3f:17:3a:89:1b:39:f4:6a:22:70:12:55:
8a:5a:f7:80:6e:c6:69:a0:96:5a:9d:f2:13:ab:42:67:b6:21:
c6:f8:90:b8:00:80:0e:bc:9e:fc:64:be:e8:e9:06:e6:d5:79:
bd:a8:3d:73:91:82:26:c5:c9:1f:50:7e:c5:f8:7a:5d:e5:91:
fa:f0:5c:0a:b7:32:52:4b:e3:0d:6b:ac:d9:8a:55:0b:e3:a7:
de:d9:48:80:7d:c3:f7:51:97:68:42:0c:49:ae:d6:69:c2:5f:
04:69:ef:1b:8d:5b:0e:46:ee:ee:70:d1:b3:d4:d2:67:f8:64:
74:cb:a7:0e:dd:79:41:1c:ea:52:df:46:9e:a3:93:f2:09:4b:
c3:a8:e0:bc:53:dc:2a:a3:88:ca:53:f9:ab:b0:8e:c6:ab:b0:
f9:40:d1:0f:e5:e0:83:03:5c:42:bb:22:b9:7c:c4:f3:1d:a5:
e8:31:e1:fb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
ODczQTExMC8GA1UEBRMoNzg0ODA2ODY2MkU2MzBBRDAwM0Q3MERFRDg3MjE3OENF
ODNDMEM0QjAeFw0yNjA4MTkwOTUzNDNaFw0yNjA4MjYwOTUzNDNaMBgxFjAUBgNV
BAMTDTZhODU3ZDI3LWRiMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCegJftLLt3VhclrJEm5W1DwyRzeZuIHb5buSUM75m8eUDA8wZ9K3zOqUBdlTkW
hYTOBteidIbua4YXS7UzqpnRRAb3F/SEhBpNSuoSrq85FrPAw52LlNmqTVyYaNLq
/yQLCh7VksAtwU9IAGfIEhKY2NkzsfZzL9KHdKdHfWXmhAH+8JnsPslSvq4MGr2u
eDz92z6bA4b2OjbfBBRVEOx1syLyx6XeuaR9yuz9ptToDw2v0pAxp3d9hv2bSR4X
v33Pwl8KjLbCajHuSLmo4j4CjTgTJvqANkXb2HP4e8V3JQW8NKCVivWk7syzY/DQ
MUDX7YT0eIjUxKhEDEVYKkJ9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvhRfJ03E
4wg/rzUkOsR2pNQBoMowHwYDVR0jBBgwFoAUeEgGhmLmMK0APXDe2HIXjOg8DEsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NzNBLzNDMUY1N0ZDOEYx
NDExRjFBQUZDQzk0NjM0MTFGOTcwL2VFZ0dobUxtTUswQVBYRGUySElYak9nOERF
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZUVnR2htTG1NSzBBUFhEZTJISVhqT2c4REVzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4
NzNBLzNDMUY1N0ZDOEYxNDExRjFBQUZDQzk0NjM0MTFGOTcwL2VFZ0dobUxtTUsw
QVBYRGUySElYak9nOERFcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAW9/qp48JM3Wo8Y4j+dEFLJNXD6WaTBfRt7pVebNJwVahxxTEWFBdD9DTLnOAR
QKmAektu0IpruEOSkKz578xAPOJvssS7Yu+hZ9ywXxs/FzqJGzn0aiJwElWKWveA
bsZpoJZanfITq0JntiHG+JC4AIAOvJ78ZL7o6Qbm1Xm9qD1zkYImxckfUH7F+Hpd
5ZH68FwKtzJSS+MNa6zZilUL46fe2UiAfcP3UZdoQgxJrtZpwl8Eae8bjVsORu7u
cNGz1NJn+GR0y6cO3XlBHOpS30aeo5PyCUvDqOC8U9wqo4jKU/mrsI7Gq7D5QNEP
5eCDA1xCuyK5fMTzHaXoMeH7
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:45 2026 by rpki-client