
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
File: EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json)
Hash identifier: yMO/tupEsV8j1qYN+37NPQnsw/PeaPgaVg8TRsGKoWY=
Subject key identifier: 99:A6:16:48:64:CF:36:20:97:CD:CE:FD:D0:36:82:92:4C:84:39:6F
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Certificate issuer: /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
Manifest number: C5
Signing time: Mon 27 Jul 2026 09:09:18 +0000
Manifest this update: Mon 27 Jul 2026 09:09:18 +0000
Manifest next update: Mon 03 Aug 2026 09:09:18 +0000
Files and hashes: 1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: Aufg9e7F1l/lj11aTIwzN/xF1wd639J5arjdRprqEvE=)
2: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=)
3: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 82nHeS7CHoySaZHAiJzF0tyiNyUQq6elNqL8KAqq8/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Validity
Not Before: Jul 27 09:09:18 2026 GMT
Not After : Aug 3 09:09:18 2026 GMT
Subject: CN=6a67203e-700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:e8:df:ea:8f:c4:0b:83:4d:74:4e:ec:38:
a0:56:8f:a1:b2:3c:9e:2f:b1:ba:a3:7c:47:71:15:
10:c4:8d:98:97:cf:f4:b8:1a:ae:9c:54:2d:d0:37:
10:ed:c8:3a:cf:06:59:25:73:9d:26:67:3d:ce:c4:
f0:97:55:83:46:57:35:6a:40:b2:11:29:44:01:83:
bd:b0:a7:52:e8:8b:32:5d:cf:ce:21:0a:6d:ae:e6:
02:d4:22:71:71:95:94:aa:2e:28:4e:a0:5d:6c:40:
e7:a7:fc:14:88:6e:27:48:d4:8c:63:06:cf:c3:cb:
eb:13:17:df:99:28:84:68:4d:b8:59:3f:6e:f8:76:
8e:99:45:32:f5:66:e2:60:97:80:c9:7f:89:2b:da:
49:20:90:85:4e:6f:8e:40:e7:87:0a:ea:df:6f:70:
7f:b8:25:86:88:e5:9d:1a:6b:d9:db:d4:a2:02:57:
be:bf:d5:18:8a:ca:aa:f5:4a:e5:d9:99:42:48:62:
f0:50:e8:60:fb:f3:ab:4f:51:63:d1:d7:22:ad:bb:
14:f7:97:5a:40:6e:34:51:e5:8c:6b:6e:06:53:f9:
0f:2b:83:a6:f8:09:0a:e5:c8:63:d4:c5:40:bd:69:
bf:0c:6a:0f:2c:c3:4f:fc:e2:51:c9:11:0d:c6:a1:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:16:48:64:CF:36:20:97:CD:CE:FD:D0:36:82:92:4C:84:39:6F
X509v3 Authority Key Identifier:
keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:8d:4b:fd:78:83:d0:c4:61:92:e0:8f:c8:ab:f9:91:11:85:
57:23:3a:25:fe:28:7e:8c:23:ad:a8:64:7a:d9:60:af:c6:a0:
3c:09:13:75:c8:ba:04:07:77:d5:64:46:45:a1:67:0e:52:37:
26:59:0b:ee:a7:ac:dd:e9:0f:6c:db:ee:da:8f:bc:fe:82:9a:
5d:ce:65:4b:0b:31:3d:a6:b1:79:fb:16:13:6c:5e:50:71:96:
94:f5:01:e4:dd:d7:6e:d1:88:fe:48:59:61:9f:7a:53:da:66:
26:b0:72:16:eb:33:27:cd:a0:2c:04:5f:35:21:6f:91:8e:14:
e8:df:e1:ba:0d:7f:a1:39:76:a7:51:db:cb:e2:44:22:6f:d9:
02:78:9b:16:a7:ce:8c:5e:06:fb:ee:2b:ec:0d:ea:85:e3:de:
85:d0:f1:3d:21:72:08:37:1b:79:ad:d1:bd:61:71:0b:cc:cf:
67:2c:7e:2d:36:99:0b:b5:d5:db:39:25:8a:4a:b0:29:47:7e:
4d:ab:2e:69:76:fe:14:f6:1d:41:a0:ff:44:ab:db:de:bf:17:
6c:18:be:35:ec:a1:b0:17:6c:b2:31:a2:3a:19:1e:24:d4:d6:
11:ce:47:4f:d7:fa:47:5c:59:34:3c:8d:24:65:20:d7:03:2d:
69:ba:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 23:30:52 2026 by rpki-client