
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
File: E0jUaqcLAwOwQCPwSmMFi01pY7c.mft (raw, json)
Hash identifier: 8VnY0uMkTRe4n30k1tCjvDYKy8+QKl5K8Ir4ROjL0So=
Subject key identifier: D9:EB:19:DE:3D:F9:44:F1:88:52:AC:BC:E8:CD:DE:7D:E4:9C:99:63
Authority key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
Certificate issuer: /CN=A91D30A3/serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
Manifest number: 3D
Signing time: Tue 23 Jun 2026 08:48:51 +0000
Manifest this update: Tue 23 Jun 2026 08:48:51 +0000
Manifest next update: Tue 30 Jun 2026 08:48:51 +0000
Files and hashes: 1: E0jUaqcLAwOwQCPwSmMFi01pY7c.crl (hash: NMOs0j7SIBaQuhdPifuQ2I+j2NpMH7iV9DsavIgm6e4=)
2: 5417C204181311F1BB2D572D153D8C67.roa (hash: H47VU5jKVIkhr4upeiTnHoZK3wbZs9wvqmAqlKqwqns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Validity
Not Before: Jun 23 08:48:51 2026 GMT
Not After : Jun 30 08:48:51 2026 GMT
Subject: CN=6a3a4873-69f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:6d:f0:56:be:6a:2a:43:0a:fc:a2:ed:d6:
7f:f8:13:80:a3:2d:7d:18:75:7f:ca:8b:17:55:96:
ec:1a:e9:c9:d9:61:f8:ce:c0:9a:a9:6d:73:2c:bd:
98:e1:22:66:2b:34:d5:14:d5:ab:df:45:67:e8:ac:
97:77:f6:bf:fc:7c:c4:ed:35:a5:5c:e4:58:6c:c0:
40:c9:6e:9d:d5:82:07:a1:88:2a:95:e2:57:82:9e:
4b:ff:34:9e:42:bd:7a:10:b6:14:00:c9:f6:f0:37:
5d:ed:34:e7:8b:bf:f2:d7:9c:a3:12:2f:5a:6e:5e:
75:9f:91:79:e4:01:69:30:a5:79:ba:fe:5d:44:41:
e2:f7:65:d3:03:46:38:f6:a1:d5:b9:d9:29:4b:b5:
32:19:2e:51:78:33:5d:03:fb:39:f9:b1:51:2d:28:
1f:da:9d:38:7f:26:95:32:5d:09:a5:5a:c4:02:01:
ff:9e:db:d7:70:3a:22:4c:37:89:03:37:9f:de:57:
2d:1e:14:89:f9:b0:e0:8d:e4:bf:34:8e:4d:ae:05:
37:c8:43:28:15:9b:56:f4:5f:1a:5c:bb:a0:cb:c8:
e0:3c:c3:9c:41:e8:4d:ff:70:e3:81:16:eb:34:f0:
9f:2f:c1:33:2e:b9:77:ab:8f:4b:39:db:e3:74:e2:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EB:19:DE:3D:F9:44:F1:88:52:AC:BC:E8:CD:DE:7D:E4:9C:99:63
X509v3 Authority Key Identifier:
keyid:13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9a:3b:be:18:6a:42:63:99:95:ce:76:aa:8c:fe:10:bb:30:
8a:82:75:9c:73:7e:b6:aa:87:16:86:7b:60:89:36:58:c2:d7:
82:75:16:8d:01:24:d8:a7:e1:67:b2:39:f5:da:73:0a:43:c5:
8a:8e:a9:5d:3e:0c:b5:bf:7f:62:39:c2:c7:65:a6:bb:c3:a8:
e5:31:d5:dd:0d:87:ae:d2:32:d9:3a:d1:91:e0:18:35:29:79:
29:a6:66:96:72:ef:0b:bb:04:8a:70:94:8c:6b:21:3f:a1:f9:
db:63:bb:6d:d2:2d:db:17:97:bf:6c:bd:1a:c6:a1:c0:0a:0d:
da:3a:b2:d7:b9:b5:b7:c4:c6:d1:80:4a:73:e7:1d:3d:37:6c:
63:6a:64:31:d0:9c:8e:e3:20:bc:06:c6:9e:89:ed:8e:a8:23:
91:e1:cb:3f:7e:f8:d4:c4:ac:8f:6e:eb:8f:3b:59:43:10:6a:
6b:92:7e:39:39:a4:fb:94:5e:bb:3e:f7:cc:9e:91:ad:e3:6e:
9b:6a:45:2c:9f:60:98:72:54:2f:07:07:b0:8a:05:da:1a:d6:
8d:ce:c1:7f:36:31:3a:49:10:c5:6d:8b:89:51:44:8c:c7:52:
f9:78:e0:93:d7:ba:3a:78:b6:52:19:27:11:87:59:e7:74:c7:
80:e9:aa:c9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MzBBMzExMC8GA1UEBRMoMTM0OEQ0NkFBNzBCMDMwM0IwNDAyM0YwNEE2MzA1OEI0
RDY5NjNCNzAeFw0yNjA2MjMwODQ4NTFaFw0yNjA2MzAwODQ4NTFaMBgxFjAUBgNV
BAMTDTZhM2E0ODczLTY5ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0rm3wVr5qKkMK/KLt1n/4E4CjLX0YdX/KixdVluwa6cnZYfjOwJqpbXMsvZjh
ImYrNNUU1avfRWforJd39r/8fMTtNaVc5FhswEDJbp3VggehiCqV4leCnkv/NJ5C
vXoQthQAyfbwN13tNOeLv/LXnKMSL1puXnWfkXnkAWkwpXm6/l1EQeL3ZdMDRjj2
odW52SlLtTIZLlF4M10D+zn5sVEtKB/anTh/JpUyXQmlWsQCAf+e29dwOiJMN4kD
N5/eVy0eFIn5sOCN5L80jk2uBTfIQygVm1b0Xxpcu6DLyOA8w5xB6E3/cOOBFus0
8J8vwTMuuXerj0s52+N04p6JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2esZ3j35
RPGIUqy86M3efeScmWMwHwYDVR0jBBgwFoAUE0jUaqcLAwOwQCPwSmMFi01pY7cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMEEzLzYwMDY0QkMyMTgw
ODExRjE5OTY1NzA1NjExM0Q4QzY3L0UwalVhcWNMQXdPd1FDUHdTbU1GaTAxcFk3
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRTBqVWFxY0xBd093UUNQd1NtTUZpMDFwWTdjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz
MEEzLzYwMDY0QkMyMTgwODExRjE5OTY1NzA1NjExM0Q4QzY3L0UwalVhcWNMQXdP
d1FDUHdTbU1GaTAxcFk3Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB7mju+GGpCY5mVznaqjP4QuzCKgnWcc362qocWhntgiTZYwteCdRaNASTYp+Fn
sjn12nMKQ8WKjqldPgy1v39iOcLHZaa7w6jlMdXdDYeu0jLZOtGR4Bg1KXkppmaW
cu8LuwSKcJSMayE/ofnbY7tt0i3bF5e/bL0axqHACg3aOrLXubW3xMbRgEpz5x09
N2xjamQx0JyO4yC8Bsaeie2OqCOR4cs/fvjUxKyPbuuPO1lDEGprkn45OaT7lF67
PvfMnpGt426bakUsn2CYclQvBwewigXaGtaNzsF/NjE6SRDFbYuJUUSMx1L5eOCT
17o6eLZSGScRh1nndMeA6arJ
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:50 2026 by rpki-client