
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier: TpJDOQWNBw5f96aQs5vttrt3IM9yFVll5DkdymaFD9A=
Subject key identifier: 15:A5:10:65:B6:8C:D2:2A:7B:83:D5:B2:68:D2:E7:88:31:31:95:5D
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial: 0D7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number: 0D69
Signing time: Fri 02 Oct 2026 18:15:19 +0000
Manifest this update: Fri 02 Oct 2026 18:15:19 +0000
Manifest next update: Fri 09 Oct 2026 18:15:19 +0000
Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: j9I7gNKQHOI/mpm6xi91siiEgmlFvTJkp811D9ru2Xo=)
2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: 7GgDsm4qfz7L4govKwRdOloWJBuVphbOH50u4jZ9bk4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 18:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3453 (0xd7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Validity
Not Before: Oct 2 18:15:19 2026 GMT
Not After : Oct 9 18:15:19 2026 GMT
Subject: CN=6abff4b7-032e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:11:e5:c0:7d:4d:47:6f:3b:93:5f:eb:9c:
02:ad:ba:cd:0a:98:92:62:05:c7:26:ff:7f:81:57:
01:71:78:ac:02:dd:91:05:dd:9d:4f:b7:97:b3:0d:
70:78:e1:f2:59:67:e9:f8:aa:3c:e9:e6:b8:a2:3d:
e4:ee:10:82:e0:7a:92:17:dc:88:fe:d3:41:22:82:
f3:2b:c0:ff:43:be:d5:30:12:79:e0:9e:d6:26:fb:
d4:42:d4:3f:84:29:f1:0c:79:bb:44:26:96:52:45:
4c:aa:92:7a:e7:6b:76:52:f8:26:24:13:b5:b1:cd:
b5:42:d9:60:9b:e5:cb:e7:7d:9e:63:4c:0e:75:f3:
f9:b2:ed:83:f3:29:e7:f0:57:ad:2e:3a:21:e2:ed:
00:4c:42:c6:5a:5c:51:ca:b0:a9:a5:10:d0:0e:da:
90:05:1a:17:f5:e0:ec:a4:f6:2f:fa:6e:da:4a:67:
4d:f8:c9:ac:b4:b0:ee:10:19:66:dc:ed:a8:8a:07:
a4:92:c1:73:4f:1b:e7:3d:f6:5c:b8:21:fd:b8:8f:
3f:df:01:76:d8:f1:b3:36:67:5d:83:12:54:f8:c8:
58:96:28:c8:1b:f6:27:0d:41:c7:fc:85:c5:03:76:
aa:26:7e:26:3b:03:c0:f4:4e:df:81:d7:a4:71:7a:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:10:65:B6:8C:D2:2A:7B:83:D5:B2:68:D2:E7:88:31:31:95:5D
X509v3 Authority Key Identifier:
keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8b:fd:2a:72:08:08:f3:2e:6e:93:b6:a5:9e:95:03:03:57:
7a:62:eb:ec:cf:45:bf:c1:bd:7e:d2:90:9b:00:6b:f0:54:d6:
e2:a8:44:8f:4d:71:9c:69:9a:d9:d6:10:af:a3:4a:e7:fe:ad:
8c:ba:24:b8:ec:a1:91:76:86:57:20:3b:79:dc:b4:1d:a5:5b:
1e:8a:31:89:31:6a:18:8c:e1:93:40:0b:0e:39:63:7d:62:ca:
96:82:2e:05:30:71:73:ad:ee:ec:73:3d:fd:23:e1:21:1b:37:
84:43:93:fc:99:78:93:fb:47:0c:ed:e7:be:7b:f5:24:27:5d:
ef:47:49:a8:88:10:67:46:22:7e:b3:47:a6:b4:c8:5d:60:83:
c5:9f:ed:8c:85:cd:cc:9c:89:a9:e2:49:67:bc:b0:43:77:ac:
7a:1a:87:44:23:46:4f:f4:be:aa:50:57:ea:30:fa:86:fe:0f:
7c:ec:38:0b:cf:f0:71:24:01:03:2d:12:c5:58:ae:44:a0:4d:
a6:57:e6:5c:83:bb:e5:1f:d1:4c:b1:87:57:ad:c7:01:ce:d1:
82:40:82:cc:a8:27:05:bf:de:b6:1f:65:db:50:79:84:b6:7f:
99:a2:cc:ca:d5:11:b1:25:da:ef:39:64:72:70:56:da:da:04:
b3:03:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:47:59 2026 by rpki-client