
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json)
Hash identifier: HrTJCJO4aSboTnVqD6BJ8ObPy7iqVcUK4PW5kOPNuQI=
Subject key identifier: EC:7D:4A:76:02:79:CC:2B:5D:2C:D2:09:84:DF:63:64:29:33:3C:FF
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial: 0BFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
Manifest number: 0BEB
Signing time: Thu 08 Oct 2026 19:05:56 +0000
Manifest this update: Thu 08 Oct 2026 19:05:55 +0000
Manifest next update: Thu 15 Oct 2026 19:05:55 +0000
Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: E7K+6jwxmtAClT3Uhbwsi3XSQH7kxdk1qIPmgM4cRbA=)
2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: OGoUhqxGb/v1NECssGQWXzp0QMgYwxdeF00KucDqSNo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3069 (0xbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Validity
Not Before: Oct 8 19:05:55 2026 GMT
Not After : Oct 15 19:05:55 2026 GMT
Subject: CN=6ac7e994-8adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:2d:e6:64:be:d5:97:20:9c:b9:51:f8:68:
9a:88:eb:1b:03:c4:c9:6d:45:08:a5:65:08:b6:8f:
e9:3d:42:46:a4:06:03:12:82:31:2a:d0:97:55:ed:
9e:cc:28:d7:f9:7a:e4:15:76:9d:81:bb:a4:53:27:
0e:80:81:90:47:6b:d6:9a:b1:6f:e5:96:61:ab:8a:
d0:f8:bb:a8:74:cf:ee:bc:e9:7c:69:f7:89:66:90:
3b:72:92:ea:80:47:1d:81:f4:21:a3:8a:16:c1:d8:
98:16:2d:09:97:a1:25:e1:c0:12:42:17:c2:89:4d:
74:59:c4:5c:79:dc:81:5c:76:5c:0d:dc:25:7d:91:
44:7c:cc:18:f0:ed:47:70:ac:6a:01:df:1e:27:97:
ad:0c:ed:5f:bf:76:ff:79:17:39:0d:ad:c0:c6:8c:
86:3c:29:80:e3:d7:7d:3b:01:92:9a:97:c4:31:5c:
2e:f4:7d:5e:2a:b3:4c:f2:fc:95:d1:00:e2:76:d7:
1d:5b:2b:14:7f:62:e5:e0:08:d4:a3:2a:4b:0a:85:
31:12:34:07:2b:d2:ca:d9:c8:c7:5f:d0:5e:56:3e:
86:01:3d:71:d7:b5:c8:14:ac:15:56:ec:c6:76:72:
42:34:e1:3c:ce:a5:b4:8e:a2:6b:7f:43:06:c6:98:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7D:4A:76:02:79:CC:2B:5D:2C:D2:09:84:DF:63:64:29:33:3C:FF
X509v3 Authority Key Identifier:
keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e9:8d:5c:38:30:31:6f:cd:82:db:16:f7:77:21:7d:46:1f:
69:53:69:61:7d:8f:60:5e:3f:ae:9d:38:be:8d:bc:15:f3:70:
01:df:e4:da:d7:a5:7f:fa:33:5a:67:96:d3:4f:bb:e0:07:02:
60:ee:37:9b:05:5d:94:20:e2:be:3c:4a:96:6b:e4:4a:8d:41:
9c:bf:27:13:be:49:1b:6c:7a:23:0e:9d:6b:3d:bd:f6:5e:bf:
38:3a:c9:a9:40:3e:7a:e3:b3:d7:d1:82:e2:2e:35:7e:48:62:
6a:dd:e8:df:4f:2e:6d:60:84:25:2e:47:5d:c2:97:b0:fa:29:
b0:c7:cd:55:57:d6:15:2a:99:f8:05:31:12:20:6a:12:c5:93:
d9:47:ba:70:a1:8d:63:bf:1f:4a:4d:db:42:ed:db:52:f6:31:
a0:e0:bb:c8:80:fd:2f:fe:e3:4c:73:cd:c0:ef:80:ca:d6:5d:
c1:ae:2d:ee:58:77:10:84:ac:9d:fb:54:ad:71:a3:d1:e7:5c:
25:5c:e8:32:20:ef:84:57:6e:2f:0c:af:69:c7:d0:22:99:c7:
f1:0f:03:95:10:1e:b9:17:50:c6:fa:d9:8c:c4:96:d5:86:8e:
66:82:f2:45:71:52:f6:54:b0:56:e1:67:81:e0:e1:3a:9d:2f:
e6:29:57:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:04:50 2026 by rpki-client