
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File: etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier: i8VYPtztYKTlzYNGiv+nkSgD2wxg9BcXUPQhQhwiaRU=
Subject key identifier: 3A:50:21:9D:01:80:B3:55:75:63:03:1A:FD:A7:E7:29:E2:5D:2B:8B
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number: D4
Signing time: Tue 21 Apr 2026 06:43:40 +0000
Manifest this update: Tue 21 Apr 2026 06:43:40 +0000
Manifest next update: Tue 28 Apr 2026 06:43:40 +0000
Files and hashes: 1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: WVw+WqUWkmfUoCpWNDJoGZq7JVar8z/FmeXNZClj24k=)
2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: 1J7nQsHlQuAiAvo5aIiZqNyCzq3jV+3T1c+Q4mzMQvk=)
3: 395D655C7E7D11F09D59515FC4F9AE02.roa (hash: wISzL57CKfWjmFG51rfgbb3uCs7qMuabttb3dl/m4bU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Validity
Not Before: Apr 21 06:43:40 2026 GMT
Not After : Apr 28 06:43:40 2026 GMT
Subject: CN=69e71c9c-68e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:81:54:f3:52:56:e3:b8:1d:38:61:d6:fb:
2b:6e:f6:3d:5e:10:32:75:87:f5:6f:e7:7c:34:59:
42:17:52:96:b6:ed:3a:98:a2:14:aa:80:3f:24:4f:
0b:86:a2:c2:14:28:c4:72:84:f9:7e:93:cb:37:26:
f0:0b:0d:b9:dc:ed:f9:0c:6b:f9:9d:ea:ce:e2:b9:
19:07:a5:dc:c5:bd:b7:e0:eb:cb:71:b8:93:3c:05:
7a:1c:2f:73:56:da:de:28:ef:60:41:cc:4a:f6:02:
15:d9:10:76:1c:4a:7a:7d:7e:2c:3f:49:72:3a:cf:
b2:21:ac:0c:dd:8c:25:2a:c7:f4:ca:11:89:6c:68:
0e:9a:bd:30:2b:93:c8:f2:03:32:d4:f2:0b:f9:9d:
30:30:df:4b:e0:5f:eb:2c:ef:f0:16:12:83:46:d3:
b7:38:b1:1a:81:34:72:36:4f:50:e1:19:c0:0a:b6:
84:63:2c:e2:a5:56:5d:73:b5:50:22:68:fd:85:1d:
71:bd:a2:cc:f3:2c:db:c5:a3:65:02:02:a5:f9:ae:
90:3f:b1:45:50:e2:be:a7:93:36:63:0d:27:ec:bc:
e3:e6:f8:c1:86:d7:1f:e5:72:02:f0:53:1e:cf:d9:
22:75:94:b4:bc:ba:4b:a6:5c:9a:84:62:b4:05:dd:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:50:21:9D:01:80:B3:55:75:63:03:1A:FD:A7:E7:29:E2:5D:2B:8B
X509v3 Authority Key Identifier:
keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:e3:c2:44:4f:8c:f5:5c:68:d2:e0:c3:b8:e8:d2:b0:7e:74:
ed:19:06:7c:b1:46:67:30:eb:20:5c:df:7d:e3:cd:aa:c1:c4:
2a:4f:e2:02:b1:ce:d7:fa:1d:5b:75:43:38:c8:43:94:b1:79:
ae:45:8e:43:f4:e8:bd:9d:3f:a1:43:8c:59:3a:03:76:ce:aa:
0e:67:3f:74:32:d4:50:7b:53:9a:57:73:07:00:5d:aa:2f:8e:
11:f6:fb:b5:41:50:4a:36:20:a3:6d:2b:4b:c1:99:0c:48:99:
97:16:99:90:e3:f3:c6:97:c2:93:d2:ec:40:07:96:ec:f2:f7:
ef:2d:d0:06:5b:fa:f6:1e:c2:7c:bd:6d:f8:d9:e8:71:7d:1b:
45:43:ee:c2:d8:fc:18:4d:b6:af:61:26:93:3a:60:d2:6b:7a:
49:33:38:b2:93:03:70:ec:1e:31:24:27:ea:62:d9:c1:cb:79:
91:44:0e:e2:23:b4:ff:ff:1c:44:71:8f:77:7b:4a:51:70:b0:
ae:9f:96:ae:6b:68:e6:18:41:6f:0a:95:7a:dd:98:1d:dd:26:
9c:92:da:48:95:35:f0:42:bf:72:85:59:f5:7b:37:25:54:c2:
57:af:d0:1b:09:ec:17:4d:88:37:5e:ba:07:72:7a:e8:e6:7c:
8f:26:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:27:49 2026 by rpki-client