
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File: etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier: 7+K0/0oyJs4y6Sk5o8etiC4kaXcG8icC7kMhOF1ZkOQ=
Subject key identifier: 64:E2:D1:7F:8A:3A:2D:9C:C8:DA:E8:D1:FC:D7:FC:54:2D:7D:32:A9
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number: BA
Signing time: Thu 05 Mar 2026 06:05:20 +0000
Manifest this update: Thu 05 Mar 2026 06:05:20 +0000
Manifest next update: Thu 12 Mar 2026 06:05:20 +0000
Files and hashes: 1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: 9ahzWfdYBxjyaEf8lIK/h323GqwcwcICcmK2hSPTrlU=)
2: 395D655C7E7D11F09D59515FC4F9AE02.roa (hash: g/g7DXG6Ubt8dKOM6X6VWHF4PzVg9zAkTugtS1fW6FU=)
3: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: Y942Edc3zkEm9fZtolJhfuXkLoHHfiwv6fjHDuYaXR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 06:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Validity
Not Before: Mar 5 06:05:20 2026 GMT
Not After : Mar 12 06:05:20 2026 GMT
Subject: CN=69a91d20-6b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:6c:4c:20:8d:cf:c1:c9:17:22:14:82:45:
ae:da:a8:87:61:0a:5b:a1:d8:ac:af:0d:ca:97:5b:
61:c2:3a:fa:08:9d:9a:f7:f2:e5:3f:3e:c2:fe:9c:
d8:37:21:67:36:97:bf:00:3f:d8:3b:c8:f8:2f:f3:
d2:be:75:6f:b1:28:b7:0f:bd:57:cb:a9:f6:eb:5e:
9e:8e:5e:5a:82:e8:ea:3f:0b:21:05:d5:97:73:5a:
19:47:53:89:9a:db:e4:4e:f6:28:5b:bb:fa:4f:ef:
46:8a:11:df:cc:47:7c:3d:52:bc:32:a1:7f:01:f9:
6b:2f:46:34:6a:8a:02:ba:a2:09:f7:26:6a:7b:b9:
b5:da:72:ad:56:e6:ed:3e:0b:f4:62:3f:c0:93:54:
c4:e8:16:fc:f3:a3:1f:e2:b5:92:18:25:f5:81:fd:
a6:cc:d2:c8:54:a7:2b:9d:58:b3:46:b3:55:9c:2d:
c2:0a:73:54:1a:ff:95:61:f8:04:c8:a6:42:18:d0:
8a:7e:05:7b:04:57:a2:46:b0:ac:57:c8:ae:1f:0c:
e1:eb:9f:70:7f:a8:65:c8:c8:4a:f5:52:aa:52:a6:
cb:b7:d0:6f:5c:24:86:ed:e0:c5:4c:01:22:97:9c:
34:8a:a8:d2:27:5b:31:d7:38:ad:3e:5a:6a:70:cd:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:D1:7F:8A:3A:2D:9C:C8:DA:E8:D1:FC:D7:FC:54:2D:7D:32:A9
X509v3 Authority Key Identifier:
keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ec:f9:bc:a5:3d:23:3d:42:1e:1b:18:03:9a:ef:fb:e5:f9:
0f:70:ec:24:9d:73:04:84:a9:2b:9d:14:81:fe:3d:51:47:47:
eb:ec:01:54:2b:e6:41:38:5b:4a:bd:17:5b:80:0f:e5:17:11:
fb:e2:9b:85:d1:19:be:b2:3e:ac:96:14:d7:ed:2a:73:ee:c1:
ce:e2:a0:d0:98:7a:18:66:1b:64:23:00:94:3e:aa:08:fa:e5:
27:b1:a5:21:a2:6e:fb:42:89:29:0a:9c:2c:e1:4b:f9:b4:75:
43:6d:8e:53:7b:bd:dc:33:50:71:8b:bd:8e:73:8e:89:74:c2:
45:41:33:4b:32:5f:e1:f8:8a:e7:09:01:37:96:1d:4e:fb:d3:
b6:84:62:74:98:26:ad:4c:a9:0b:2f:e4:a0:20:83:72:e8:1d:
91:d2:0c:9e:fc:57:34:98:e1:ce:c5:60:50:3c:f1:38:bc:47:
11:31:d7:55:d0:2a:00:d8:21:08:ab:f2:8c:13:f5:52:11:e1:
52:e9:4b:24:39:b1:46:09:53:b0:98:d8:c3:3d:70:81:a7:1c:
fd:a2:d4:50:51:8c:63:7f:d1:2c:6d:d0:e2:7c:67:90:89:0b:
46:1b:26:8c:1b:d0:06:16:1e:c1:2a:90:10:1d:00:1a:ae:78:
2c:38:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 07:46:27 2026 by rpki-client