
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json)
Hash identifier: SpBQVr6PJ1zE4okwwUxvxKH/CpriSelYJQG0lb+cCBo=
Subject key identifier: F0:C0:C0:6D:FB:53:01:45:E1:59:EE:91:D2:AE:00:55:ED:99:79:9B
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
Manifest number: DD
Signing time: Fri 11 Sep 2026 06:46:42 +0000
Manifest this update: Fri 11 Sep 2026 06:46:41 +0000
Manifest next update: Fri 18 Sep 2026 06:46:41 +0000
Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: TOYqxJkX7ydNXhpfcUp8pVvGPyVGwk/D8/zE5LmZ//A=)
2: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 82nHeS7CHoySaZHAiJzF0tyiNyUQq6elNqL8KAqq8/k=)
3: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Validity
Not Before: Sep 11 06:46:41 2026 GMT
Not After : Sep 18 06:46:41 2026 GMT
Subject: CN=6aa3a3d1-3d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:ca:95:42:b5:60:e0:bc:e7:ae:23:34:90:
0c:23:a9:a4:5a:5b:aa:7c:e4:b2:e9:e3:32:6c:59:
65:0d:96:35:01:00:e6:c1:24:be:0e:83:84:8a:32:
02:2e:ee:8a:a1:40:83:85:4c:e4:7e:9a:5c:ca:ad:
41:ee:c6:6f:8f:58:ca:3b:eb:c5:af:2c:32:3c:2f:
53:b8:e6:1d:c3:96:f4:7d:bf:97:b9:85:ab:29:a2:
42:73:4c:98:c5:4d:59:08:de:8e:e3:15:3e:35:00:
87:ac:1c:72:3f:d7:76:44:bf:e2:c1:6f:d9:ae:67:
83:bb:6f:09:3f:ab:ae:c4:74:62:83:98:41:df:b3:
00:9d:71:3b:f1:6c:e6:c4:4b:7b:20:4e:01:c6:60:
a9:cb:89:dc:f7:ae:62:2c:03:db:fb:98:c7:0f:5f:
81:4c:0c:0a:83:0e:91:e1:c3:57:fb:96:bc:b6:e3:
c5:be:7e:8d:b7:12:ed:79:d6:68:38:e4:b4:8b:dd:
a1:0a:11:05:3e:87:6c:d1:f9:e7:87:46:5f:e8:93:
c5:43:80:68:2e:bb:66:f7:10:a1:7e:ca:b9:fb:f7:
1a:1d:11:3f:63:55:34:f9:7f:1b:b7:32:78:c1:87:
76:03:ed:c6:bb:c7:40:83:61:4c:ea:89:99:13:47:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:C0:6D:FB:53:01:45:E1:59:EE:91:D2:AE:00:55:ED:99:79:9B
X509v3 Authority Key Identifier:
keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d9:16:86:ec:2e:96:9e:8e:02:06:0b:d0:10:de:94:83:78:
cd:20:7e:26:9d:ac:74:c8:2a:4c:59:bc:2d:55:7f:c0:af:1a:
c4:8d:c9:1e:87:59:01:e6:75:ee:22:3f:18:15:40:6e:41:0e:
aa:3e:d6:83:8b:7d:88:d1:0f:cd:f7:b8:13:e8:92:06:c3:c9:
67:70:90:b4:7a:08:7d:9a:b8:8f:63:f3:c3:10:cf:b4:9c:cc:
10:7f:a5:65:25:78:60:d6:a9:df:70:b2:5b:a2:b1:7f:73:fe:
1d:5a:aa:4f:45:9b:00:0e:02:5e:48:6a:e3:58:dc:55:77:9e:
14:6f:ff:f5:6b:d3:ca:bf:b5:29:b1:1e:ee:65:bf:24:d1:b3:
35:cd:16:71:e5:7e:c3:a8:c9:3a:bb:4b:19:a5:85:57:f1:c3:
d9:26:d3:4e:55:e9:51:b7:92:95:5d:56:f7:0a:0f:95:0d:49:
af:07:56:c3:bb:c3:b4:14:50:88:aa:ce:98:77:f1:e5:cd:ad:
8e:30:83:61:d9:95:df:f0:e3:1c:4a:26:5c:88:31:c0:d0:26:
01:93:70:05:92:24:f8:2f:5b:97:cf:ed:e0:83:81:84:a1:a4:
9a:9e:80:42:bb:15:f6:31:33:22:e0:ac:a8:fa:7d:c0:d5:21:
0d:9b:95:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ4OEMxMTAvBgNVBAUTKDEwMEIyNTM1NDY2NDY4MURBQUI5MDVDRUZGNEE0REE3
NDlDNEVCOEEwHhcNMjYwOTExMDY0NjQxWhcNMjYwOTE4MDY0NjQxWjAYMRYwFAYD
VQQDEw02YWEzYTNkMS0zZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqvLKlUK1YOC8564jNJAMI6mkWluqfOSy6eMybFllDZY1AQDmwSS+DoOEijIC
Lu6KoUCDhUzkfppcyq1B7sZvj1jKO+vFrywyPC9TuOYdw5b0fb+XuYWrKaJCc0yY
xU1ZCN6O4xU+NQCHrBxyP9d2RL/iwW/ZrmeDu28JP6uuxHRig5hB37MAnXE78Wzm
xEt7IE4BxmCpy4nc965iLAPb+5jHD1+BTAwKgw6R4cNX+5a8tuPFvn6NtxLtedZo
OOS0i92hChEFPods0fnnh0Zf6JPFQ4BoLrtm9xChfsq5+/caHRE/Y1U0+X8btzJ4
wYd2A+3Gu8dAg2FM6omZE0fM7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDAwG37
UwFF4VnukdKuAFXtmXmbMB8GA1UdIwQYMBaAFBALJTVGZGgdqrkFzv9KTadJxOuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDg4Qy80NkIwMDUwNDZC
ODkxMUYwOTVGMTEwMkJDNEY5QUUwMi9FQXNsTlVaa2FCMnF1UVhPXzBwTnAwbkU2
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VBc2xOVVprYUIycXVRWE9fMHBOcDBuRTY0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDg4Qy80NkIwMDUwNDZCODkxMUYwOTVGMTEwMkJDNEY5QUUwMi9FQXNsTlVaa2FC
MnF1UVhPXzBwTnAwbkU2NG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaNkWhuwulp6OAgYL0BDelIN4zSB+Jp2sdMgqTFm8LVV/wK8axI3JHodZAeZ1
7iI/GBVAbkEOqj7Wg4t9iNEPzfe4E+iSBsPJZ3CQtHoIfZq4j2PzwxDPtJzMEH+l
ZSV4YNap33CyW6Kxf3P+HVqqT0WbAA4CXkhq41jcVXeeFG//9WvTyr+1KbEe7mW/
JNGzNc0WceV+w6jJOrtLGaWFV/HD2SbTTlXpUbeSlV1W9woPlQ1JrwdWw7vDtBRQ
iKrOmHfx5c2tjjCDYdmV3/DjHEomXIgxwNAmAZNwBZIk+C9bl8/t4IOBhKGkmp6A
QrsV9jEzIuCsqPp9wNUhDZuV0w==
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:29:06 2026 by rpki-client