
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier: cayEr5hwgzQPp9OeWNi0WgRYCYT4iITfstHBLC2KXSE=
Subject key identifier: B8:28:77:C9:77:66:F3:D0:4D:EB:5D:2A:76:C3:79:59:EE:19:6F:4F
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1DDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number: 1DCC
Signing time: Tue 30 Jun 2026 16:15:11 +0000
Manifest this update: Tue 30 Jun 2026 16:15:10 +0000
Manifest next update: Tue 07 Jul 2026 16:15:10 +0000
Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: RZlLe2a2UBjHgn+tUKgUpet6fa+BpFCfV8xlZAwnn10=)
2: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: EH6q56ISDCHDpLM+gTINYlfYJSkWlD4ZZojPS20s3Yw=)
3: DBB62584510F11EE91E98858C4F9AE02.roa (hash: f1TZSDO6dOE9en1CMS/wAFiLo9UGCV0vwp3Y9mMVLew=)
4: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: pnBR0xS0dQQ2SDLLqNdwnP0A7v24fxl8+oyuwqvoLV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Jul 2026 16:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7646 (0x1dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Jun 30 16:15:10 2026 GMT
Not After : Jul 7 16:15:10 2026 GMT
Subject: CN=6a43eb8e-ceb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:43:80:f8:9e:df:86:7f:83:45:19:d8:9d:
5e:1e:3a:91:0a:54:d6:7d:8a:75:be:2c:da:4b:85:
90:fc:cc:8a:d5:e5:68:b4:d5:ce:4d:e2:c0:f6:de:
92:d0:cb:81:ef:7d:bc:de:6c:39:47:1e:73:fc:18:
19:90:a8:79:b8:b3:fb:24:f2:5b:5e:3e:4d:d2:6c:
1a:ce:5e:0e:c4:0c:76:6a:36:93:0c:6c:5e:d5:9c:
9d:6e:c8:10:1d:2b:81:96:03:7d:46:81:af:9c:f8:
f3:41:03:d4:39:00:41:05:b1:b7:ed:f2:94:4f:bc:
17:05:28:3d:6a:18:28:17:52:66:58:87:18:e8:31:
97:09:43:3e:bc:eb:50:18:3c:56:0a:2a:e5:1e:3f:
29:8f:d7:dc:db:4b:74:2f:36:39:72:e1:8f:28:a0:
79:e9:1b:6a:b8:c5:2d:57:a8:26:47:d6:13:98:02:
28:16:c1:e2:96:d0:bd:aa:17:0b:f8:65:28:81:ed:
98:34:ea:ef:d7:35:1d:43:33:fe:1d:d7:46:27:3a:
f9:74:2b:80:80:fe:35:93:fd:72:7a:2d:9f:eb:73:
82:5a:37:6b:2a:60:21:1a:39:b7:52:ab:c9:9f:f9:
4f:fd:1a:29:c4:b3:31:61:43:e8:3c:22:42:78:61:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:77:C9:77:66:F3:D0:4D:EB:5D:2A:76:C3:79:59:EE:19:6F:4F
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:69:d0:3a:5a:d5:43:68:98:4d:ec:d2:9f:26:21:ee:ee:47:
a7:71:b6:3c:d9:fc:b3:ec:e5:92:da:07:ea:0f:97:4a:56:67:
a4:aa:c7:e2:a7:e0:08:e2:9f:51:c4:91:23:c0:92:ac:11:1e:
16:e9:67:d9:29:30:a3:6c:73:8b:fa:d3:a4:16:e3:47:bf:3c:
22:6e:78:f2:ad:d1:36:3a:0b:e1:88:a9:ee:04:c2:78:c1:d9:
6a:c2:d3:86:4b:1b:a3:90:b6:77:24:57:8a:5d:56:87:70:f2:
a4:bb:a3:de:09:57:da:13:63:fd:78:0a:0d:fe:c2:42:c7:b8:
f6:a9:91:88:f6:21:02:a8:7a:b2:b6:c8:87:42:2e:a6:da:b5:
ca:29:ad:3b:e8:6d:0d:28:f8:d4:9b:6b:45:99:06:9c:c4:cd:
d0:37:27:6e:59:d7:3b:7d:a7:b9:02:1e:60:8c:d7:8b:be:77:
66:70:a8:85:c3:d9:26:81:bc:14:53:6d:67:28:9c:d3:f7:3f:
71:6f:ad:1b:71:11:d9:de:26:db:6f:a7:3c:57:c1:b5:85:50:
44:50:33:3b:73:74:5e:0f:14:86:26:49:71:a5:70:a3:86:63:
4c:1b:94:67:3c:eb:ab:d3:27:eb:56:9e:fb:fc:2c:f1:a5:c5:
c0:e2:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:37:38 2026 by rpki-client