
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
File: ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft (raw, json)
Hash identifier: oQNeXJEHI4MqUs3l7OmC22/pLewzGL4J7AKqtEqd4/I=
Subject key identifier: E4:97:4B:35:63:A6:28:DB:64:BF:F9:20:3D:0D:1D:E9:00:56:8A:EE
Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
Certificate issuer: /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Certificate serial: 078A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
Manifest number: 077F
Signing time: Wed 20 May 2026 21:38:07 +0000
Manifest this update: Wed 20 May 2026 21:38:07 +0000
Manifest next update: Wed 27 May 2026 21:38:07 +0000
Files and hashes: 1: ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl (hash: PuoLzELMC6GdEvP4toSnBfd53DldGaGQiFvu8lvgQVQ=)
2: FE4992F25C3411EBA2B9004DC4F9AE02.roa (hash: q6f3I/pDthdLdMLSxBp5iyTcTb4DHogkmy15HWS90s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1930 (0x78a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5FA2, serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Validity
Not Before: May 20 21:38:07 2026 GMT
Not After : May 27 21:38:07 2026 GMT
Subject: CN=6a0e29bf-0ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:96:45:ed:4f:c5:62:f9:ef:7d:a6:db:ce:
b5:f0:73:0e:a6:92:13:64:49:7c:1e:67:78:98:af:
76:c3:56:f7:2d:5e:c2:d4:8b:24:af:9e:74:0f:a4:
1d:c4:cc:5e:25:ab:de:5c:5e:ba:13:d7:fd:a6:e3:
23:52:d5:49:0e:5e:10:df:d5:94:0f:92:69:c2:55:
85:b5:cd:c9:c8:68:1a:cd:04:59:5a:47:40:ee:48:
b6:c8:99:fe:d6:bd:0c:13:b5:01:6f:fd:e3:6b:43:
05:56:0d:c1:8f:d5:4c:09:46:fb:3d:ef:43:ac:ab:
62:0c:39:28:96:48:f9:ca:b4:74:d5:10:af:f3:52:
fd:c1:c6:5e:7b:94:5e:4f:3a:cd:ff:12:2d:77:fc:
c1:0d:67:ae:64:fc:ad:4b:63:ad:48:d8:43:6a:54:
72:9b:16:c3:fc:97:c5:93:99:6c:79:62:09:77:dc:
79:ef:91:0e:83:59:d4:40:03:9b:1d:02:e7:61:7b:
3f:f4:5c:04:a0:8a:dd:a3:91:3f:3f:bb:81:38:8d:
d5:c2:af:75:b3:62:7a:17:3d:5d:34:53:43:83:b3:
75:9a:94:55:ad:93:fa:f5:b8:28:bb:a7:52:a3:08:
da:0a:62:9a:ab:76:ff:3f:c1:01:70:43:cd:36:00:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:97:4B:35:63:A6:28:DB:64:BF:F9:20:3D:0D:1D:E9:00:56:8A:EE
X509v3 Authority Key Identifier:
keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8c:b7:4b:4d:f8:a1:bf:90:0e:6f:f4:dd:f9:2f:75:4b:27:
3a:b3:63:c0:24:02:92:f4:8a:13:e2:97:d2:e7:46:b5:20:69:
92:cd:75:37:dc:e5:89:4f:83:e9:77:63:97:a5:44:f9:cd:90:
2e:a3:3d:78:35:21:75:69:f7:db:fe:1a:85:ba:0c:41:f6:97:
00:16:ea:68:67:56:20:cf:2b:59:4b:d6:bc:e8:56:47:0c:83:
fd:6b:db:9d:74:61:9f:bd:13:e9:64:92:68:86:2e:3a:86:f6:
20:e6:a5:59:15:45:eb:74:54:60:7b:3e:92:e5:b9:e4:f7:0b:
89:81:87:26:63:95:51:4b:1c:c5:ef:ca:df:d7:70:7f:e7:f5:
83:5a:38:79:df:8d:47:23:ee:2d:b3:c2:1a:07:e7:1b:c5:16:
ad:d7:43:9e:d9:51:4d:40:58:87:2f:f6:2c:b1:75:d5:32:8d:
d7:f0:b1:8f:a4:06:54:f3:5a:71:d8:e5:1e:09:e4:62:f2:f3:
4c:79:fc:29:63:10:23:18:f4:02:9d:36:ac:ee:bf:4a:9f:b3:
02:df:45:63:60:1b:e5:05:95:3e:f5:8f:07:84:45:40:a2:81:
4a:3f:78:5a:36:df:b6:34:11:16:7c:2f:55:4b:96:7e:9e:27:
c8:fe:00:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjVGQTIxMTAvBgNVBAUTKDc5QTk0RDI4RTU0MjQ3MzgwOTEzODNENUY0OTc1QkZE
QkNFQUFFNzkwHhcNMjYwNTIwMjEzODA3WhcNMjYwNTI3MjEzODA3WjAYMRYwFAYD
VQQDEw02YTBlMjliZi0wZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOKWRe1PxWL5732m28618HMOppITZEl8Hmd4mK92w1b3LV7C1Iskr550D6Qd
xMxeJaveXF66E9f9puMjUtVJDl4Q39WUD5JpwlWFtc3JyGgazQRZWkdA7ki2yJn+
1r0ME7UBb/3ja0MFVg3Bj9VMCUb7Pe9DrKtiDDkolkj5yrR01RCv81L9wcZee5Re
TzrN/xItd/zBDWeuZPytS2OtSNhDalRymxbD/JfFk5lseWIJd9x575EOg1nUQAOb
HQLnYXs/9FwEoIrdo5E/P7uBOI3Vwq91s2J6Fz1dNFNDg7N1mpRVrZP69bgou6dS
owjaCmKaq3b/P8EBcEPNNgAf6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSXSzVj
pijbZL/5ID0NHekAVoruMB8GA1UdIwQYMBaAFHmpTSjlQkc4CROD1fSXW/286q55
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUZBMi8wMzI1NDQ0MDVD
MzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6Z0pFNFBWOUpkYl9ienFy
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VhbE5LT1ZDUnpnSkU0UFY5SmRiX2J6cXJuay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NUZBMi8wMzI1NDQ0MDVDMzIxMUVCOTdCRjdDNDVDNEY5QUUwMi9lYWxOS09WQ1J6
Z0pFNFBWOUpkYl9ienFybmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACoy3S034ob+QDm/03fkvdUsnOrNjwCQCkvSKE+KX0udGtSBpks11N9zliU+D
6Xdjl6VE+c2QLqM9eDUhdWn32/4ahboMQfaXABbqaGdWIM8rWUvWvOhWRwyD/Wvb
nXRhn70T6WSSaIYuOob2IOalWRVF63RUYHs+kuW55PcLiYGHJmOVUUscxe/K39dw
f+f1g1o4ed+NRyPuLbPCGgfnG8UWrddDntlRTUBYhy/2LLF11TKN1/Cxj6QGVPNa
cdjlHgnkYvLzTHn8KWMQIxj0Ap02rO6/Sp+zAt9FY2Ab5QWVPvWPB4RFQKKBSj94
WjbftjQRFnwvVUuWfp4nyP4ATg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:44 2026 by rpki-client