
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier: ddKMk4u3S2wwZny1WngEfm1ZXUsLF3XHReo3qDexWpY=
Subject key identifier: 39:D4:E1:74:F6:BC:07:E8:40:44:A8:B9:D3:03:F5:B0:EC:A7:0F:45
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1DAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number: 1D9C
Signing time: Sat 28 Mar 2026 16:04:26 +0000
Manifest this update: Sat 28 Mar 2026 16:04:26 +0000
Manifest next update: Sat 04 Apr 2026 16:04:26 +0000
Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: k9QnW5IBzn0h3QAozjguBejv5m/BT4OeX1Xj2GqoYVQ=)
2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: pnBR0xS0dQQ2SDLLqNdwnP0A7v24fxl8+oyuwqvoLV8=)
3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: EH6q56ISDCHDpLM+gTINYlfYJSkWlD4ZZojPS20s3Yw=)
4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: f1TZSDO6dOE9en1CMS/wAFiLo9UGCV0vwp3Y9mMVLew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 16:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7598 (0x1dae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Mar 28 16:04:26 2026 GMT
Not After : Apr 4 16:04:26 2026 GMT
Subject: CN=69c7fc0a-f549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:86:d9:54:2a:3f:a0:09:da:16:46:28:34:
31:c2:aa:96:29:5f:d1:55:eb:a7:d4:fa:08:bb:9c:
21:92:5d:31:93:8c:00:92:35:91:d9:ad:8a:44:25:
94:3d:c8:bc:8e:75:f4:c7:88:d6:2b:c7:21:91:0e:
00:a3:7f:57:64:15:bc:98:fe:0d:53:1e:c5:77:98:
e0:a4:58:e7:69:8f:27:dc:a9:2f:05:44:ad:56:4d:
33:0d:5f:1b:e5:88:aa:ec:55:b5:6a:3d:1e:22:f0:
e5:16:c2:28:ce:04:41:25:d3:d7:79:24:47:e0:08:
f3:92:8e:26:b6:c4:2c:4d:c0:b1:e4:b1:41:c4:bb:
5d:e7:1d:00:2e:19:f3:57:3f:97:12:e6:3c:ed:45:
90:88:af:07:af:8d:3b:f9:58:60:00:64:80:1b:d7:
19:e0:bd:e3:3c:02:d2:28:c4:02:42:f1:df:5c:3a:
72:d1:92:73:b2:e3:0a:83:f0:6e:d0:a3:6e:ac:81:
f7:f3:61:9e:f2:23:68:55:f6:a5:b7:6e:a8:e8:2e:
99:f3:f3:90:cb:c0:35:39:d5:95:de:75:38:e0:b0:
b4:8c:bc:dc:2c:4a:e6:ad:08:a4:93:c7:b9:a3:48:
d1:86:6e:f1:b4:5d:e9:2d:fe:14:09:22:a6:b9:c3:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D4:E1:74:F6:BC:07:E8:40:44:A8:B9:D3:03:F5:B0:EC:A7:0F:45
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:c9:76:fd:cb:07:0f:56:f2:d5:a7:09:50:d6:8d:a3:5c:0b:
87:ea:f5:75:27:86:1b:91:03:eb:5f:07:26:e0:f0:f2:f5:79:
9a:f0:04:c0:2c:70:41:a2:f7:43:c8:29:ac:b9:ce:b1:c1:4c:
7b:16:c5:27:ec:23:df:23:aa:69:fb:4e:2e:e1:38:73:19:10:
af:bf:fd:79:4b:e4:e7:37:fa:02:29:8c:99:e6:0d:f8:7d:08:
9a:d0:b1:ec:07:4c:63:79:e1:4b:dd:9f:eb:44:4d:bf:1a:45:
ec:47:d2:a3:ba:85:75:a1:a4:06:6c:2e:08:00:5e:6e:a3:bc:
87:60:dd:92:f4:a7:b6:9c:fc:cf:24:db:aa:4a:a3:ca:2b:57:
49:c3:90:4b:91:b3:51:a6:f8:a9:52:eb:da:89:bd:f8:fc:18:
6a:86:93:75:b3:2d:82:fd:90:d0:b0:ed:f3:10:ae:c1:02:b2:
fb:fd:82:91:80:44:4c:89:2f:e8:9c:dc:32:a7:e3:8e:b7:cc:
02:85:fc:f3:23:8f:0c:3b:76:a2:d4:7f:27:a7:6f:1a:df:6f:
f7:01:f6:93:ec:6c:51:8f:90:87:1b:bb:f5:7d:5b:ba:bc:8c:
c3:a5:e2:5a:7e:a1:42:db:01:61:48:16:a8:f7:fc:bd:c5:20:
26:c5:19:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 00:02:07 2026 by rpki-client