
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
File: EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft (raw, json)
Hash identifier: dHq19ED1YdEFbzlayDfpDe+8rj+jwAjZK1/mIQ6zlT8=
Subject key identifier: 29:61:2A:3E:F0:C3:35:8B:DC:2A:B3:EA:FC:7F:85:28:AF:BF:C7:6F
Authority key identifier: 11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0
Certificate issuer: /CN=A91DDB11/serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
Manifest number: 0B
Signing time: Fri 17 Jul 2026 10:12:30 +0000
Manifest this update: Fri 17 Jul 2026 10:12:30 +0000
Manifest next update: Fri 24 Jul 2026 10:12:30 +0000
Files and hashes: 1: EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl (hash: sp7t0s8gfXlf49TYhJmj5Tk72Ziv8WPwNOBkSaPIq3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl
rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDB11, serialNumber=11B0E4ADFFB81CA1AA84EC0856829CD83A0655E0
Validity
Not Before: Jul 17 10:12:30 2026 GMT
Not After : Jul 24 10:12:30 2026 GMT
Subject: CN=6a5a000e-1d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:ed:1a:9e:e6:57:e6:1c:87:19:cb:08:28:
fc:fd:05:3e:e5:df:52:90:8e:b0:93:54:83:b8:84:
f8:eb:c3:6f:d1:8c:fa:dc:33:60:fd:28:a0:bf:3e:
32:4b:0f:40:1c:f3:b0:cb:d1:0e:e3:a6:11:e5:aa:
32:b4:9a:df:ce:11:02:ac:2d:28:91:d1:b9:62:95:
bd:4f:ba:97:cf:65:ad:d5:42:7f:9a:af:1b:26:c4:
93:34:d9:ae:5b:ec:b5:e5:9f:ed:a5:13:e9:d4:1e:
41:16:0f:4e:36:b0:13:0b:c6:3d:d1:96:23:c1:69:
67:eb:8e:de:d2:77:d2:01:aa:51:c6:7a:e9:7f:6f:
47:27:d6:bc:6b:38:a9:c3:31:1e:fe:77:d6:8a:99:
6b:e8:25:a4:53:78:bc:59:67:41:59:fc:73:0e:2b:
a9:88:3e:0b:90:32:9e:6a:f5:3c:5e:6d:39:ce:a7:
f7:db:3f:e9:c1:7b:a1:f2:4c:49:ad:26:6f:9b:29:
3d:17:19:21:d8:7c:74:87:16:c1:3b:a1:6f:1b:6d:
a9:fe:45:01:d1:27:f6:58:6e:29:c9:55:24:75:80:
a7:27:e4:b0:3c:23:7c:96:e6:5a:77:0c:93:29:c6:
03:8c:65:6f:10:1c:66:fa:aa:37:21:07:15:cb:50:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:61:2A:3E:F0:C3:35:8B:DC:2A:B3:EA:FC:7F:85:28:AF:BF:C7:6F
X509v3 Authority Key Identifier:
keyid:11:B0:E4:AD:FF:B8:1C:A1:AA:84:EC:08:56:82:9C:D8:3A:06:55:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbDkrf-4HKGqhOwIVoKc2DoGVeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDB11/6DB10EB8743511F1B2DFA29865A30FBC/EbDkrf-4HKGqhOwIVoKc2DoGVeA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:d6:07:69:f1:59:34:2e:58:2f:10:a8:43:b9:48:3e:8e:41:
e4:6a:07:04:a1:40:8d:a8:59:fa:ec:a2:f4:9a:9b:45:3b:f3:
97:0e:a3:e5:fa:b2:18:53:be:88:c1:6f:6c:70:0c:a4:8e:70:
4c:3c:f3:16:e1:e7:14:0e:38:10:ec:1e:ce:d7:19:ac:02:d1:
18:58:76:ad:13:16:ab:79:0d:44:d6:84:d5:b7:23:91:a4:e2:
a3:7b:cc:43:42:17:c8:ce:c7:da:d2:fd:99:5d:63:8e:72:f2:
aa:b4:6a:1e:34:b3:d9:82:34:67:3d:8d:a3:b8:ea:d5:57:d9:
89:17:fc:cf:e1:1f:5b:6f:a1:bd:9b:18:f0:fc:e3:d5:d0:f0:
96:98:b6:af:f0:0f:f7:f0:49:a0:ae:d2:76:15:f2:cc:23:24:
50:a2:8a:2b:c7:ed:80:a7:c1:5c:ce:a5:8c:a9:d5:fe:be:b8:
2b:78:c9:6d:a3:9e:90:bc:58:83:c9:e2:74:aa:b7:65:41:c0:
e7:30:e4:ac:9f:3a:e3:80:0c:8f:cb:e5:e4:5e:87:b7:45:7f:
5e:ef:14:f3:aa:45:fd:c9:92:28:85:e9:5a:02:69:22:88:56:
b6:f5:ce:3b:62:89:05:b7:2f:1e:99:70:9f:f4:2e:0a:41:4b:
88:d4:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:11 2026 by rpki-client