
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json)
Hash identifier: alA/tgszmv9OFAiTN7qHAO/30lOGZ1vwdncmwh5Syjw=
Subject key identifier: 84:17:A2:6A:69:22:2E:8A:CB:2D:F2:70:82:65:AF:E2:79:AB:1E:17
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial: 042E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
Manifest number: 0425
Signing time: Thu 12 Mar 2026 23:55:47 +0000
Manifest this update: Thu 12 Mar 2026 23:55:47 +0000
Manifest next update: Thu 19 Mar 2026 23:55:47 +0000
Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: Gn1dzhzx443QmGjAOjw+XbSCgRM4vrBjBprix/wlvV4=)
2: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: NDb1B6PZCJBf2fRK/qRZGkVfT4s79ZM1HP5X452K/f8=)
3: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: ewFG9f1A1EcDgaPSb2+JVSwRlChjjJB/i/qV3kUsLPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:55:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070 (0x42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Validity
Not Before: Mar 12 23:55:47 2026 GMT
Not After : Mar 19 23:55:47 2026 GMT
Subject: CN=69b35283-8b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:63:a5:21:9b:f4:d9:4a:5f:94:92:9c:7f:
80:2b:10:18:8f:20:bf:6c:8b:7a:5a:da:17:91:b1:
6c:57:bc:ad:6b:c4:8e:20:ec:95:29:7c:92:de:7b:
a9:83:85:01:c3:01:39:fd:58:3a:71:c7:99:39:f4:
c7:fa:66:41:f2:e9:ae:e1:52:d1:be:60:7d:fb:c0:
5d:65:de:7c:65:3c:71:4b:86:93:3d:b0:cc:84:8e:
6b:73:de:2c:b2:f7:32:ad:8f:cd:e0:18:73:3e:1e:
a9:ed:42:a4:3a:08:08:d4:21:3d:66:4b:0c:65:e2:
1c:67:b2:ee:93:99:58:da:66:f1:89:93:b5:2f:fa:
5c:6c:4d:24:36:f8:7d:8c:d1:32:4a:ca:cd:63:0c:
e1:fe:07:23:78:e0:f5:ed:82:8e:d9:5b:01:2e:fa:
44:eb:28:3b:86:93:f8:e0:7c:e9:4c:b1:71:1c:50:
a1:5e:ea:3c:bd:5e:b4:fc:4a:88:a2:09:b1:e8:43:
7f:79:6a:06:17:8e:78:c9:41:77:30:cc:3f:63:9e:
09:f5:c9:36:8b:f7:ec:eb:c1:f6:88:92:f4:bd:02:
2b:a5:22:e0:20:95:13:4f:4d:d7:87:96:f1:2e:f5:
8a:54:ea:38:ca:b1:15:8f:4f:f0:f4:03:48:81:97:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:17:A2:6A:69:22:2E:8A:CB:2D:F2:70:82:65:AF:E2:79:AB:1E:17
X509v3 Authority Key Identifier:
keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:11:c0:e6:ce:3c:c9:d8:d4:fe:a9:ad:26:7b:61:23:8b:80:
2d:bb:36:3f:75:cd:52:c0:e1:0a:f2:06:df:65:2e:ea:df:9a:
79:3a:a1:80:70:2c:7a:d9:6b:d9:4c:7a:69:49:97:f8:05:d1:
be:51:7b:ee:47:ea:f4:90:51:f4:25:fb:d2:e7:16:d5:28:d0:
e0:36:cd:01:ae:88:82:2f:1c:cc:61:08:d7:10:6f:af:37:f6:
4f:59:43:be:0b:47:8e:9b:ec:bc:58:6e:09:7e:20:c0:fd:52:
c0:4b:48:fc:d1:82:9d:3e:40:3a:ba:b2:77:17:33:ac:13:80:
bc:2f:03:34:e5:35:ae:d5:38:df:67:f5:07:6c:b4:5d:3c:f3:
d6:13:40:38:8f:f6:bf:72:64:c5:f9:0f:d1:b7:03:6c:ea:39:
52:dd:b9:1e:40:6c:2b:b2:4a:56:f1:29:92:84:21:1a:5e:c7:
92:8a:a5:87:af:2a:37:4b:cf:26:e8:92:a5:cf:33:ea:49:f1:
f5:6c:a3:10:e6:ab:3d:b4:2e:64:4b:aa:e4:d4:ac:75:01:cd:
61:b9:15:b4:e2:51:d5:92:1b:ec:2e:9e:0e:ea:d6:f0:6d:69:
8a:d6:ad:fd:7a:56:e2:68:b1:c0:88:9a:a1:8f:9e:b7:ea:93:
df:cf:44:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:53:03 2026 by rpki-client