
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
File: eee1l4EY_5x6llKfbFkJ49qSQMM.mft (raw, json)
Hash identifier: m4LCWNcfCxEzQy97+f0mnnmpg6S1YVDIy8RcADPGUJE=
Subject key identifier: 31:41:58:90:61:37:1F:C8:B1:FA:F6:B5:6D:86:F5:E7:E9:15:9A:C5
Authority key identifier: 79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3
Certificate issuer: /CN=A91E20C2/serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
Manifest number: 3D
Signing time: Wed 19 Aug 2026 09:14:16 +0000
Manifest this update: Wed 19 Aug 2026 09:14:15 +0000
Manifest next update: Wed 26 Aug 2026 09:14:15 +0000
Files and hashes: 1: eee1l4EY_5x6llKfbFkJ49qSQMM.crl (hash: WIU1Y0Vbsiz+9K1Z/YkpPKYuuzXDYizmGkLQlKoXrEs=)
2: 5487474E3E2B11F1962E9E0BB7833773.roa (hash: OmLUQ43QETaka1wexlDbKxhUGMOUSSWYIcjZLWyxezg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl
rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E20C2, serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3
Validity
Not Before: Aug 19 09:14:15 2026 GMT
Not After : Aug 26 09:14:15 2026 GMT
Subject: CN=6a8573e7-e1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:3b:75:00:c6:d1:c1:8e:55:6c:7f:b5:fe:
b2:e0:94:c7:30:4d:83:c7:ef:95:74:b2:d4:51:b2:
f0:3a:a4:3e:a5:a2:41:31:f1:bf:88:aa:b9:34:1b:
ef:97:2a:e7:1c:f2:ee:0f:71:1d:13:4f:4d:7e:4a:
6a:b7:29:97:ec:ec:32:0d:56:a0:d0:48:3d:52:ee:
be:1e:44:9a:4a:8c:2d:9b:21:26:ce:b3:2b:4e:3a:
5b:7b:23:1f:f4:16:37:aa:e5:b8:ca:60:5b:13:d3:
75:f0:dd:ea:bc:01:ee:eb:c9:89:a5:81:74:77:72:
52:48:ce:ac:47:f0:23:4a:39:a6:5e:66:e6:f7:8a:
dc:ee:ec:42:a1:0b:f2:da:bf:d3:34:ae:de:6e:8d:
7a:5c:5a:80:3d:b7:9b:41:6f:c1:68:06:2f:16:22:
2a:d7:ad:d9:d6:b8:e2:1e:2f:88:44:39:2f:42:d2:
f3:d0:0a:c9:84:af:dc:fd:25:cb:41:72:74:d0:a7:
3e:d4:d5:fc:6a:03:84:31:7b:68:c7:64:58:bc:27:
68:d6:4a:4d:01:87:7e:45:9d:c0:f6:55:68:2f:f9:
75:7b:46:61:6d:1f:23:27:28:9e:93:c8:8b:94:92:
80:ce:55:65:cd:2f:69:5e:46:78:3d:83:de:df:de:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:58:90:61:37:1F:C8:B1:FA:F6:B5:6D:86:F5:E7:E9:15:9A:C5
X509v3 Authority Key Identifier:
keyid:79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:25:50:2d:86:48:32:35:ac:fb:49:f6:b8:55:01:a0:8a:ff:
ed:56:bf:9d:9f:d0:23:42:f1:39:e1:89:16:28:13:1c:1c:fc:
cf:cd:f5:c2:76:18:b5:56:ef:5e:b5:72:1b:d0:28:d0:4f:73:
97:34:b0:4f:3f:dc:8b:b6:2a:c0:4e:3e:43:43:1b:70:1b:ec:
53:98:d5:96:f3:35:c8:b2:33:22:78:a3:42:6e:d0:af:c8:df:
f7:37:e4:5a:7f:0b:da:31:fc:53:70:73:56:ec:b4:d1:87:ec:
fd:fa:68:c2:9e:c1:3f:61:a3:d2:b8:74:3d:ac:8d:c7:f0:37:
6b:a1:2d:d0:77:41:e3:66:7e:ae:fa:ee:bd:73:64:a7:ff:93:
dd:eb:6e:65:c2:63:1e:79:12:a4:be:9c:d8:24:86:17:42:57:
3f:dc:e2:9d:ba:e7:5b:b3:ea:c7:86:c3:36:33:ef:06:f4:99:
c8:d8:d3:87:cc:a2:16:4e:52:58:8a:0b:21:2a:f6:71:eb:9f:
9a:e1:57:02:b1:eb:4d:ad:6a:df:99:33:bf:b7:2f:46:bc:5b:
4f:71:12:3b:15:cf:66:d5:91:53:f1:4d:e4:d8:78:8e:5c:66:
e8:d9:7e:08:9a:8c:bf:0d:03:91:a3:ff:95:0d:cf:8f:52:20:
16:67:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:22 2026 by rpki-client