
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json)
Hash identifier: 8lGdvPDksO5sOG3fK/NS1Bg2XBJf7ZqzTxM93ATiZG8=
Subject key identifier: F2:94:1F:A8:1F:47:DF:B8:7C:31:23:A4:AD:9E:7F:DE:92:1E:2F:51
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
Manifest number: 98
Signing time: Mon 27 Apr 2026 07:25:01 +0000
Manifest this update: Mon 27 Apr 2026 07:25:00 +0000
Manifest next update: Mon 04 May 2026 07:25:00 +0000
Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: 6+enM7oJXBPDGZUryoehSI2s/YVNWvyQUX1eXQizoAw=)
2: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 82nHeS7CHoySaZHAiJzF0tyiNyUQq6elNqL8KAqq8/k=)
3: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 07:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Validity
Not Before: Apr 27 07:25:00 2026 GMT
Not After : May 4 07:25:00 2026 GMT
Subject: CN=69ef0f4c-0208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:40:c7:19:0c:27:4e:a5:65:5c:c7:6f:57:
e3:01:61:f8:90:df:90:fe:27:63:f4:c3:fe:25:ff:
f1:e3:38:08:e4:4f:ab:36:8b:16:73:7d:5c:2b:47:
84:43:9f:a6:30:0a:e6:71:2a:f4:2e:1e:b1:97:be:
c8:ed:48:0b:dd:61:c9:77:0b:d3:40:29:7b:44:c8:
f4:b3:b6:86:19:76:88:74:90:ef:b7:cb:f4:8e:91:
da:d6:81:d7:4e:9a:aa:87:87:8a:61:0b:d4:4a:38:
4e:38:31:59:5c:af:d5:54:53:79:f9:cc:6d:13:6f:
a8:31:8d:c4:8d:72:64:76:d2:df:cf:df:b2:71:d1:
fa:6b:73:cb:0b:3f:e0:d4:04:0f:d0:e9:d4:b5:39:
62:87:aa:8a:ca:e7:da:28:7c:08:44:8e:cf:2d:97:
50:ff:1f:da:7c:37:d2:82:1a:5a:f2:50:5b:2a:dc:
ab:9c:e2:64:d9:82:8e:a8:6f:d9:b5:d8:e5:50:ea:
f2:7c:62:40:ee:91:71:b1:7d:cf:85:a4:b4:ef:92:
9f:f3:fc:7b:d7:aa:c6:ac:29:9d:1f:0d:6f:34:12:
a5:e7:da:72:eb:9c:00:dd:17:3a:2c:f6:0f:d5:1e:
cb:ba:55:a3:58:d0:3d:93:0f:74:29:71:1a:3d:9c:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:94:1F:A8:1F:47:DF:B8:7C:31:23:A4:AD:9E:7F:DE:92:1E:2F:51
X509v3 Authority Key Identifier:
keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d2:8b:3a:b5:57:16:f9:33:d1:2e:9d:a2:90:65:c3:e6:25:
97:4e:41:ab:ca:0f:d5:e5:01:ae:38:2a:7f:d6:ee:bf:e6:d7:
35:30:18:4b:72:f8:7d:c6:46:fc:20:a7:d9:5a:02:2b:a1:a4:
ae:91:28:26:18:51:a7:16:0c:28:06:23:8c:27:65:9c:a8:b7:
21:01:fa:2a:9f:e8:a7:f7:9a:ae:a5:64:05:04:b1:2b:a0:06:
86:3e:47:82:ce:74:24:7b:7d:7f:1f:51:c5:35:64:63:36:55:
4a:3d:5f:a0:f0:b4:2c:ea:e6:4c:18:8e:32:6c:6c:4b:ab:54:
41:1c:69:10:ad:f4:88:2a:a9:81:a8:eb:3f:e2:c8:d9:ec:16:
70:9d:34:25:94:0f:74:61:7a:96:39:50:b7:af:83:42:99:67:
12:4f:b4:5f:7e:8b:c7:62:55:08:e2:79:dd:ae:0b:c8:1e:15:
bf:d9:34:3b:f8:17:e0:50:12:8b:c0:7d:05:67:d0:90:67:6b:
e7:87:b5:9b:d9:ad:53:3f:8e:f4:dc:52:fd:5d:26:19:02:b4:
a3:2e:69:56:01:2e:76:81:ba:70:a8:9c:7f:37:44:ae:6f:4c:
90:c8:8c:90:24:07:89:2f:d8:e9:cf:8e:13:1c:f3:f2:18:95:
00:32:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:28:38 2026 by rpki-client