
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json)
Hash identifier: h17SdwkAfj551Vcm5lPK4QYNIo8TAthFnpBwtMs5KsQ=
Subject key identifier: F7:9A:F7:1B:DD:BC:DD:81:7D:AA:2E:65:2E:4B:45:07:89:20:26:57
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
Manifest number: 3583
Signing time: Sat 06 Jun 2026 14:23:00 +0000
Manifest this update: Sat 06 Jun 2026 14:23:00 +0000
Manifest next update: Sat 13 Jun 2026 14:23:00 +0000
Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: GdZRReuhtdgxO6n+QjbRbtBuZL6GBlXSNqc4PWtGM8w=)
2: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: qiT/GVvRCXwwQO5czxfwtuP70nIiPr4STQfaVH+7UL0=)
3: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: BJoCud12RqYU139X5Hg1YEdiSoJoBorro9yFYj7EiQY=)
4: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: ledywzn44AtfNdf65irkSbejoe2qe67kQVSrxPSpLj8=)
5: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: c5BWjsV+5qy4Czn1fNB7N39xouqCRvW12ZZgXgS4ZDQ=)
6: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: Im+A1kygYXCcmKM1N88CQpYfMfI1pkZXcprVNJAgc7Y=)
7: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: CWD+yCy6yNtHR/CgsSdRActZ6Gz+ygW0qqlW1BWQfN0=)
8: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: VXO5/U8cHHCFaikukuqO1qnp6nbKhmKzeuFoVz0LqaU=)
9: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: izVvMKnosN85WDCwiZeSTea3usmMiFXGuieIuV+2wlI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 14:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13775 (0x35cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jun 6 14:23:00 2026 GMT
Not After : Jun 13 14:23:00 2026 GMT
Subject: CN=6a242d44-8112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:f0:46:e0:33:d9:f3:06:8d:af:b4:5c:80:
b0:e8:fe:df:ed:3e:9d:1c:32:85:5f:63:c7:ea:e9:
fd:13:90:97:cf:cb:f9:50:70:a4:34:8c:9d:b8:7f:
8f:fb:14:5b:fd:31:e2:bc:96:1a:1f:5e:34:af:47:
59:16:b7:ec:b6:d7:85:af:47:60:69:45:f5:96:25:
3b:2d:da:04:77:30:c8:21:bd:e1:f0:44:df:f2:6e:
f0:2d:a5:ec:6f:21:8a:82:96:57:34:9d:4d:e0:94:
13:10:9c:11:99:1f:c1:45:58:45:cb:5d:d7:f2:66:
fa:ae:5d:fc:7f:2d:de:4e:e3:35:9c:ce:23:24:eb:
b9:9a:6a:45:40:eb:c2:b0:f8:e6:eb:f5:7c:b4:d8:
af:bd:24:84:8a:df:58:b7:73:e2:61:e7:8f:ce:1b:
c4:96:17:5d:60:67:53:14:07:68:9a:d0:9a:fd:75:
a3:76:a9:c5:6c:3c:bb:e9:26:a7:3a:ab:9b:de:0c:
85:a9:28:35:64:a3:26:4b:5f:03:6b:98:4a:4f:84:
1f:1b:14:36:8c:7d:ba:ea:cc:25:68:78:00:e7:a6:
11:79:a8:1d:f7:f5:e0:55:4e:c7:8d:63:27:cd:b2:
46:24:42:30:30:cf:9f:e9:7e:b2:b4:db:80:34:16:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:F7:1B:DD:BC:DD:81:7D:AA:2E:65:2E:4B:45:07:89:20:26:57
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bf:89:1b:62:6a:57:09:96:5b:52:b3:25:9d:98:2f:b5:34:
8f:ce:c1:46:0c:9d:c3:da:7b:0a:11:f0:b5:91:8d:c3:e0:0e:
ee:82:a9:13:8f:0f:a5:0b:03:af:11:62:ab:f3:de:5c:e9:ae:
cf:fd:84:24:9f:ee:13:1c:78:b9:9c:b8:a8:44:35:ad:e1:c8:
23:25:ec:99:ba:27:43:36:a6:04:67:46:78:f1:b5:cc:1d:ce:
f9:77:14:37:15:35:ee:e9:61:45:a4:65:7a:96:29:06:eb:e2:
9b:8c:e1:09:18:8e:08:56:86:19:b1:75:69:44:e5:c4:50:ee:
40:fb:8d:fa:6b:da:72:1e:e5:d0:7b:e8:0e:59:04:a3:65:ef:
58:82:31:43:2d:e9:f9:29:99:d3:67:79:25:a7:69:94:e1:fa:
62:1c:60:9f:f2:50:b6:d1:07:8b:97:c3:a8:ca:0e:33:8c:68:
3a:4e:38:ef:85:02:8f:4f:d1:92:07:b7:ce:7b:90:f8:0f:9b:
da:31:86:e2:ca:f9:e8:5c:99:c4:46:a7:20:e4:62:f2:28:b2:
8f:06:59:e3:b7:ce:f2:aa:00:ee:60:b2:aa:10:a9:4a:d8:3d:
bc:7a:0b:d2:2c:fb:8b:7c:3b:fc:40:8e:a7:50:dc:9a:37:24:
a2:ab:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:23:20 2026 by rpki-client