
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier: MFe8U/RtMFtyuDmylJGz0yns3EnmS6jctrLW3MK7ep0=
Subject key identifier: D6:05:A7:69:CB:62:A8:00:90:82:93:39:52:A5:12:53:A4:6B:FF:E7
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial: 0715
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number: 0705
Signing time: Sat 04 Apr 2026 21:45:05 +0000
Manifest this update: Sat 04 Apr 2026 21:45:05 +0000
Manifest next update: Sat 11 Apr 2026 21:45:05 +0000
Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: L7MgFpbQu8XInV0B1AN3O3ePZLyPXkExI3xPWLk5e50=)
2: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: pkrDM++jJmRWRRPlGhOoS7tmYdWnk1WVhEsoieFqvrQ=)
3: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: K8TnfaIsOICTY567FCqDzVnaqT1APmkcKZFRRplgeZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Validity
Not Before: Apr 4 21:45:05 2026 GMT
Not After : Apr 11 21:45:05 2026 GMT
Subject: CN=69d18661-e793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:7f:ad:1f:fa:03:36:7d:af:3d:a9:7d:dd:
e9:d8:ce:91:70:95:8b:d5:fe:39:3d:09:1f:1f:e0:
40:c2:b7:b2:0c:34:0a:1e:a9:48:f8:61:f8:51:47:
90:d1:c6:09:63:3b:af:c0:5b:99:94:97:4f:82:fd:
dc:58:01:12:58:5e:f7:c7:af:8a:dd:2a:d6:6b:ac:
72:0e:7a:d0:97:77:a5:37:ff:97:21:a7:73:9f:2a:
f3:7b:1e:82:21:38:dd:fe:1c:84:71:cd:98:76:f4:
09:cf:af:98:15:08:99:a6:81:48:10:92:01:fb:c4:
ce:19:13:56:07:ce:f9:9b:73:d7:29:4d:39:9f:35:
b2:c9:ec:78:9a:66:f6:bc:26:4b:43:22:fe:3f:11:
bb:2f:44:67:cd:9c:5e:d8:3c:9d:87:0f:26:f0:d3:
98:4c:1c:00:b3:c7:4e:a3:5d:c6:7c:82:ff:e8:00:
7f:f9:f4:6d:9c:54:e5:00:db:df:96:c0:9c:5c:e3:
80:6d:f2:92:c3:e8:fa:3e:b1:90:d2:e0:aa:bb:7e:
62:0d:8f:ca:b9:4d:0f:39:3e:1a:bb:3c:db:aa:e3:
1f:44:35:de:d0:60:ab:c2:f2:f4:ed:ba:41:1c:5b:
b2:00:77:73:f4:de:de:64:10:19:5b:b2:31:a4:85:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:A7:69:CB:62:A8:00:90:82:93:39:52:A5:12:53:A4:6B:FF:E7
X509v3 Authority Key Identifier:
keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:0c:e9:a2:c7:19:5b:9c:34:bc:04:82:f3:4e:86:c9:00:dc:
6f:f1:b7:30:eb:18:9a:70:fb:da:2b:76:5b:0d:4b:4e:fd:83:
93:07:cf:b3:1c:1d:de:ee:59:ff:73:33:10:24:37:e4:6e:b8:
7b:9f:d9:44:b9:83:c0:a3:78:60:45:4a:c7:eb:0f:ad:cb:49:
d1:78:d3:1d:e2:43:be:f8:0a:96:33:15:58:99:6f:f3:c0:31:
46:da:4d:4b:a5:e4:5d:3f:5e:1e:41:e1:88:94:7a:f9:1f:12:
51:aa:90:bd:43:a0:b3:d7:22:e6:a5:b4:27:fc:bf:18:9a:2f:
3c:4a:31:fe:69:3c:c0:86:2c:27:d9:75:73:97:95:fc:95:30:
1a:90:5a:9b:3d:43:45:cd:d4:52:42:e3:43:e7:4a:18:bb:dc:
46:b3:a3:cc:2a:99:a4:23:dc:ba:54:70:21:14:c6:b1:13:af:
c3:fc:25:93:f1:a2:14:e5:b5:56:6d:89:f9:8c:0f:82:1d:b1:
dc:4e:c0:00:58:e0:38:bd:f0:f6:d3:95:76:ab:bf:4b:09:1b:
93:57:49:01:fd:66:c1:d8:60:5b:12:cc:89:26:0c:3f:fc:41:
44:ed:91:c4:ef:1b:d2:8c:cc:34:31:a1:88:2c:75:b2:df:01:
b7:df:67:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyMjIxMTAvBgNVBAUTKDExQjQ0NTU2Qjc5NjI3ODUzRjQwMzFFRDZERDU3Mjg0
MDU2RUZGNTMwHhcNMjYwNDA0MjE0NTA1WhcNMjYwNDExMjE0NTA1WjAYMRYwFAYD
VQQDEw02OWQxODY2MS1lNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtv5/rR/6AzZ9rz2pfd3p2M6RcJWL1f45PQkfH+BAwreyDDQKHqlI+GH4UUeQ
0cYJYzuvwFuZlJdPgv3cWAESWF73x6+K3SrWa6xyDnrQl3elN/+XIadznyrzex6C
ITjd/hyEcc2YdvQJz6+YFQiZpoFIEJIB+8TOGRNWB875m3PXKU05nzWyyex4mmb2
vCZLQyL+PxG7L0RnzZxe2Dydhw8m8NOYTBwAs8dOo13GfIL/6AB/+fRtnFTlANvf
lsCcXOOAbfKSw+j6PrGQ0uCqu35iDY/KuU0POT4auzzbquMfRDXe0GCrwvL07bpB
HFuyAHdz9N7eZBAZW7IxpIVtswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYFp2nL
YqgAkIKTOVKlElOka//nMB8GA1UdIwQYMBaAFBG0RVa3lieFP0Ax7W3VcoQFbv9T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzIyMi9DQTA3NjE1ODgw
NzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0VV9RREh0YmRWeWhBVnVf
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ViUkZWcmVXSjRVX1FESHRiZFZ5aEFWdV8xTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzIyMi9DQTA3NjE1ODgwNzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0
VV9RREh0YmRWeWhBVnVfMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANgzposcZW5w0vASC806GyQDcb/G3MOsYmnD72it2Ww1LTv2DkwfPsxwd3u5Z
/3MzECQ35G64e5/ZRLmDwKN4YEVKx+sPrctJ0XjTHeJDvvgKljMVWJlv88AxRtpN
S6XkXT9eHkHhiJR6+R8SUaqQvUOgs9ci5qW0J/y/GJovPEox/mk8wIYsJ9l1c5eV
/JUwGpBamz1DRc3UUkLjQ+dKGLvcRrOjzCqZpCPculRwIRTGsROvw/wlk/GiFOW1
Vm2J+YwPgh2x3E7AAFjgOL3w9tOVdqu/Swkbk1dJAf1mwdhgWxLMiSYMP/xBRO2R
xO8b0ozMNDGhiCx1st8Bt99ncg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:25 2026 by rpki-client