
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json)
Hash identifier: iYTg7cJ5XqFwkEEaO/G+jnb5yLKZ8SIvR/RhWxDbOUs=
Subject key identifier: F1:65:C1:CF:3A:A1:CB:0F:B0:C5:FA:80:F6:13:2D:EA:DF:05:9C:F1
Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Certificate serial: 0503
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
Manifest number: 04FC
Signing time: Wed 20 May 2026 23:46:50 +0000
Manifest this update: Wed 20 May 2026 23:46:50 +0000
Manifest next update: Wed 27 May 2026 23:46:50 +0000
Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: Wo7Vbsbqrlxl9yNKiB1Xns2NqJDNXGiiyQrVQFZYHTA=)
2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: IKkH75+WRK2fgAHZzJYi1Oy9QxIGYcWmXMPe96PnP4E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1283 (0x503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Validity
Not Before: May 20 23:46:50 2026 GMT
Not After : May 27 23:46:50 2026 GMT
Subject: CN=6a0e47ea-64bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:d0:7a:7a:e7:c0:d8:63:ff:0e:17:14:95:
08:1b:56:b3:94:ee:3b:0d:cb:9e:4f:ea:59:7e:c4:
7f:18:da:4b:5e:75:1a:c1:84:22:41:e6:cc:2a:92:
21:da:27:5a:c7:99:01:c6:62:cd:6c:44:bd:d1:04:
53:d0:14:3c:0f:b8:33:28:d0:32:6d:08:bb:6f:e8:
22:68:55:6e:1e:81:c3:47:fd:d0:5f:c4:c7:66:02:
9f:86:84:2e:c3:8a:7d:09:22:e8:e9:42:64:02:7b:
5a:f5:1a:c5:ea:1d:1c:b2:d4:d4:a6:32:33:89:53:
39:50:67:c9:71:5e:2a:0e:fa:59:0b:42:35:a1:a4:
13:d2:b5:7e:9b:10:81:d0:48:64:e4:fb:0d:f8:dc:
9c:20:3f:5c:e1:c3:8a:bc:d3:0b:40:34:ce:ed:f5:
fe:94:11:f3:ce:99:2e:87:c3:a3:1a:ec:2b:e3:ea:
52:00:24:b5:6d:e4:e6:22:eb:df:fc:bf:8c:be:01:
b6:95:fd:99:b2:fe:9b:58:b7:27:c8:85:8a:e6:1c:
8c:61:e5:ee:44:17:8c:b3:19:e8:20:d9:f3:dd:5a:
c8:ff:9e:45:21:b5:ff:a8:1e:5c:b2:08:68:79:8d:
f1:88:ce:91:83:e4:ab:e3:38:df:c3:93:b4:8a:79:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:C1:CF:3A:A1:CB:0F:B0:C5:FA:80:F6:13:2D:EA:DF:05:9C:F1
X509v3 Authority Key Identifier:
keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d0:a7:46:6b:ef:e0:34:a9:bd:f1:54:86:00:08:7c:59:c1:
01:91:5d:05:17:42:61:a7:84:f3:b8:9a:fd:c0:5e:45:57:a6:
34:98:69:6e:85:8c:02:26:fe:fd:d4:a4:44:20:79:27:7c:d9:
d5:30:c3:df:13:9c:62:74:ba:a3:9b:0a:e9:bf:a8:3c:77:05:
96:0f:16:f7:1c:e9:c7:51:36:04:a7:fe:a6:04:ee:bc:82:9e:
5e:d3:bf:22:f5:07:fa:f5:b2:fd:25:5e:1b:88:97:be:ac:ce:
3f:93:ea:ff:53:9b:5a:ae:c8:19:68:8e:5e:7a:84:a5:db:84:
fc:56:58:e8:c7:be:bf:6e:99:0a:96:4d:b1:52:28:08:07:77:
3a:f6:d3:53:91:97:b4:f4:bf:b4:3f:e7:6d:2e:b8:cc:3f:ab:
28:de:7b:25:8d:6a:ef:bb:e6:47:67:d4:94:5d:f0:48:14:d3:
dd:28:6f:24:8a:ae:18:7a:0a:6f:66:f9:b4:7a:b6:78:fa:4e:
25:a2:df:21:78:d9:99:b4:89:95:88:0c:28:c8:67:6f:9a:81:
8c:65:9c:47:8c:c5:ca:aa:57:8e:ea:9c:e7:40:e1:69:2a:2f:
e1:5e:08:28:17:1c:e2:52:d1:c5:fe:1c:a9:21:2b:5d:2f:f5:
ea:9a:4d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:36:00 2026 by rpki-client