
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File: ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier: Fj0BADbz2euf25AOdceOFRcDPQVjWVznZQza90W5BBw=
Subject key identifier: E1:11:AF:F6:67:F4:3C:C2:4F:DE:FE:B8:00:7E:7B:95:80:99:1B:16
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer: /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial: 0B28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number: 0B1D
Signing time: Wed 28 Oct 2026 19:29:21 +0000
Manifest this update: Wed 28 Oct 2026 19:29:21 +0000
Manifest next update: Wed 04 Nov 2026 19:29:21 +0000
Files and hashes: 1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: cBk12o/YE0cZ9mt3xzTBM7+ULLt3SuEoqVmakt6SB/o=)
2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 19:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2856 (0xb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Validity
Not Before: Oct 28 19:29:21 2026 GMT
Not After : Nov 4 19:29:21 2026 GMT
Subject: CN=6ae24d11-cd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:e0:3d:d5:b1:58:42:e3:fc:86:2b:28:9a:
94:c2:8b:bb:30:f8:11:74:f9:bb:68:6b:55:fe:26:
99:20:b9:86:05:5c:91:93:19:7f:fa:62:bb:6a:10:
1a:37:18:3b:3d:6f:59:f0:9b:87:45:3a:91:56:cc:
d5:73:57:01:2c:c6:2a:45:dc:57:50:8a:6b:0d:9a:
5a:a8:e6:1c:16:be:e9:ec:a8:18:ea:cd:01:dd:15:
e2:96:df:37:da:26:65:99:e7:62:0e:f2:4e:85:d3:
88:68:62:1c:b4:d7:04:15:da:14:22:5c:7f:ff:d4:
b3:0d:36:5e:91:53:2e:65:44:2a:89:fe:fb:c1:3f:
16:5e:62:23:ae:92:2e:a8:b7:54:41:6e:a0:64:c7:
34:6c:e4:b0:b7:40:d6:27:c0:3b:81:0b:93:6d:9f:
18:fa:bb:a5:d7:f6:f1:a6:36:2e:13:dd:bf:fc:4b:
23:c8:20:9c:df:a5:71:14:72:d8:23:91:6b:dd:6d:
de:c5:f1:34:09:20:6f:80:78:42:ed:43:a9:85:f4:
31:ca:30:97:86:79:28:73:a7:01:93:8d:16:dc:5f:
cb:85:b7:10:c6:a9:cf:ea:c8:ca:27:6b:64:69:94:
09:4d:41:92:dc:8b:4e:39:3f:34:ee:1a:b2:ae:35:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:11:AF:F6:67:F4:3C:C2:4F:DE:FE:B8:00:7E:7B:95:80:99:1B:16
X509v3 Authority Key Identifier:
keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:53:0e:fa:f1:20:75:9d:bf:9e:a4:d6:97:d3:62:2e:09:e0:
47:2e:b1:1c:c0:36:02:ed:68:0a:de:07:60:27:5a:f2:54:f6:
e1:7b:64:56:0d:2e:0f:30:4f:19:18:a7:b6:46:cf:d9:f4:30:
4f:7b:8b:10:64:e5:9e:61:17:7f:a0:b1:43:52:80:90:7c:e1:
ea:94:a5:9e:6c:3a:45:31:4c:3a:ee:2c:aa:85:54:d8:9b:0d:
bf:cc:7d:5b:22:21:fc:fc:67:04:75:c5:d2:4a:7b:22:94:4a:
ae:2d:57:be:2a:89:f5:ff:da:59:00:ef:91:07:1c:60:c2:de:
57:f3:c1:20:41:6c:d8:d6:77:3e:57:1f:2d:ec:6b:02:0a:d2:
e7:ae:1b:55:e8:5a:4f:6e:8e:e5:53:14:e7:0a:a4:56:f1:a0:
10:40:d2:fa:23:9f:34:eb:c4:d5:a0:99:66:a5:86:7d:77:60:
6b:c6:b1:8f:a5:2b:61:56:b0:2b:3b:f5:9c:24:4c:5c:fc:b5:
e4:9c:dd:85:12:98:8a:7d:18:5b:74:bf:c5:d2:11:f5:e5:00:
25:56:ab:a1:34:61:c9:a6:f2:6f:c5:63:b0:8a:ad:bd:60:5e:
2c:3b:e9:a6:67:19:5b:40:42:a1:82:f2:b0:f2:f2:ce:4d:fd:
13:f2:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:49:19 2026 by rpki-client