
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File: etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier: s+MU4xJOStE2MNut6NLGVd2cO2T1QcQrL8zVtKQQn/o=
Subject key identifier: E8:50:63:AE:91:91:F2:6F:9A:5B:C1:9D:9C:B7:2E:F0:CF:F5:77:22
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number: 0136
Signing time: Sun 25 Oct 2026 06:13:40 +0000
Manifest this update: Sun 25 Oct 2026 06:13:40 +0000
Manifest next update: Sun 01 Nov 2026 06:13:40 +0000
Files and hashes: 1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: VPXovfBuRYlNv6lv2IMqu7zs4D4BkMkNfe/5r7K00tw=)
2: 395D655C7E7D11F09D59515FC4F9AE02.roa (hash: wISzL57CKfWjmFG51rfgbb3uCs7qMuabttb3dl/m4bU=)
3: 20E14746C88211F1BD0C2FA35011F970.roa (hash: bJkiqKi3wu0WqvRDJOhUFbvZVQscKmX6GNZ1KZfPkJs=)
4: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: 1J7nQsHlQuAiAvo5aIiZqNyCzq3jV+3T1c+Q4mzMQvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 06:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Validity
Not Before: Oct 25 06:13:40 2026 GMT
Not After : Nov 1 06:13:40 2026 GMT
Subject: CN=6add9e14-9914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:36:bf:22:dc:b5:6c:9e:89:b9:5d:50:6f:
54:e8:82:d0:43:9d:3b:11:77:c4:12:d7:56:61:11:
87:df:28:4d:6d:70:c5:05:10:ac:60:1e:b6:ef:41:
de:5a:51:0e:82:be:19:11:f1:81:da:ba:75:39:3f:
ff:90:fa:56:a6:ef:75:75:00:9a:20:c4:fa:c1:43:
db:d3:ed:6e:fb:a8:cf:64:f5:4e:8e:79:35:a9:11:
8e:da:c4:8a:8b:7b:a5:df:bb:3a:93:74:29:ae:24:
b4:61:4e:6a:fc:67:24:ad:4b:66:a3:25:d8:3e:31:
de:bd:f6:ea:be:9a:1d:6e:80:ff:47:4a:51:11:3b:
f6:ee:0f:e3:dc:58:ec:7e:03:da:5d:ad:9e:81:d4:
70:f6:cc:77:f0:16:21:5f:e4:43:78:af:10:a6:46:
3b:d2:c5:a5:f2:d5:2b:30:44:6d:4c:ee:0c:72:18:
37:1c:42:a4:b8:32:b1:db:3e:dc:2e:55:98:4e:0a:
9f:cd:28:89:69:c9:eb:df:49:54:1e:23:be:f3:c4:
3b:05:3d:15:86:3a:a9:dd:a9:70:1a:57:36:c9:90:
f7:96:1b:ac:1b:da:7c:cc:4e:5f:3f:ae:6a:bb:30:
89:21:58:0e:48:f0:4d:89:e0:84:a9:e9:14:6c:e4:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:63:AE:91:91:F2:6F:9A:5B:C1:9D:9C:B7:2E:F0:CF:F5:77:22
X509v3 Authority Key Identifier:
keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ca:2e:45:1f:41:9c:3a:64:20:f3:fb:4a:83:94:5f:c2:be:
21:4c:1e:9e:74:a5:d6:11:98:84:72:b0:2f:d2:88:b8:e6:6d:
1f:04:1b:bf:cf:0f:b5:22:bd:6c:38:63:7a:d0:7b:f8:28:f8:
3f:a6:49:5a:ed:75:b5:7a:d0:df:68:60:b9:d5:c0:05:bb:60:
82:58:0c:3e:9d:fd:ea:d9:99:53:1d:b4:0d:f4:6c:37:03:79:
59:39:6a:5b:5b:2f:cf:fc:dd:0d:aa:0d:4a:11:e7:c7:f5:71:
33:c1:da:df:ab:77:5f:59:1c:18:36:ec:6d:92:17:00:3c:30:
5a:b0:12:e5:5e:aa:b8:54:d0:71:d5:ef:04:fa:8c:d5:89:f8:
01:35:95:16:4f:ba:00:28:49:76:9b:63:45:52:68:63:e1:dd:
b6:97:51:67:06:4d:3d:a9:3d:26:29:55:60:f5:25:c3:42:b6:
16:c7:89:94:4d:68:e9:fb:13:da:bd:8f:b5:a9:bd:fb:22:81:
f6:fb:e3:f5:fb:ed:03:7c:28:bc:10:2b:83:52:be:fd:b3:db:
71:a8:94:03:48:52:03:f3:ad:07:76:5e:64:ca:fb:e3:58:1d:
67:80:a0:4f:8f:0d:b2:d0:12:a6:f5:d1:9b:b3:ad:ff:a1:4b:
b6:6a:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:47:36 2026 by rpki-client