
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
File: 64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json)
Hash identifier: Y/0hzwSiRzF9jNp3ZfpibN0slxvnH/HJiv/TKKKVxGI=
Subject key identifier: 7A:43:91:CC:9F:5E:82:4C:D3:E5:01:00:9E:AE:23:FD:B7:57:DD:93
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial: 0E26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
Manifest number: 0DF0
Signing time: Mon 30 Mar 2026 17:51:38 +0000
Manifest this update: Mon 30 Mar 2026 17:51:38 +0000
Manifest next update: Mon 06 Apr 2026 17:51:38 +0000
Files and hashes: 1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: +PSn0dyWPOB+MThxmFrXdF/AiCWQwDepFzs+O9Wp9Zc=)
2: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: it/3YpWQm+cSLbHWwAmBABlwHA8BsBUrAprFxWV5Rl8=)
3: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: 4SWrfrkL4KQ0GTNLnf+Lu03qdO1Vi/fN+eQr1sQ0Xl0=)
4: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: nmjI7Wi2B8aFQIAn+8Mjo7gbvju8oLY+EN7Rnxgggrw=)
5: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: Fepdq+V83ixXVbOQsCG8E8Is2e9E4BLsSWrOJhnPvw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3622 (0xe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Validity
Not Before: Mar 30 17:51:38 2026 GMT
Not After : Apr 6 17:51:38 2026 GMT
Subject: CN=69cab82a-2f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4f:98:28:d6:ae:0b:56:a2:d4:5b:8a:c6:9e:
52:25:b3:50:35:7e:47:91:78:37:3c:58:6e:b5:7e:
8e:72:9a:c0:b3:f4:23:d1:0f:d4:66:73:5e:2f:0b:
89:56:29:bf:78:c4:90:48:ae:9a:91:98:45:26:64:
8e:aa:e1:4c:d4:0f:0a:3d:0b:17:aa:01:12:ce:7e:
61:1f:db:3c:7f:94:db:a2:e7:05:8d:4b:17:6b:75:
7d:c5:7f:4a:9d:21:0f:82:cb:17:43:54:18:ef:a5:
ac:b7:5b:08:95:4c:82:38:67:90:8b:64:3a:5b:90:
eb:56:37:7c:fb:a0:cf:a7:41:fe:a8:c1:86:fc:92:
48:d0:5b:75:f7:da:46:7a:4d:53:df:52:01:85:af:
1e:75:4e:b2:12:e9:6e:40:6d:4b:c8:8d:07:3b:94:
53:49:84:fb:6b:96:ce:8d:b3:fc:7b:22:76:18:97:
2c:d0:aa:cc:c9:4e:3a:ae:fd:6a:78:4a:fd:1a:3e:
65:9b:33:d7:e7:19:43:2e:65:29:b5:be:d8:0d:75:
18:94:2f:43:7f:48:99:55:01:f0:ae:bb:5c:48:d7:
f9:90:8f:ce:61:b6:29:e4:6f:61:39:bd:4f:80:f6:
09:cb:56:44:b4:a5:f1:9e:01:5d:b6:4b:c5:4d:0e:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:43:91:CC:9F:5E:82:4C:D3:E5:01:00:9E:AE:23:FD:B7:57:DD:93
X509v3 Authority Key Identifier:
keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:01:0c:d9:11:ba:e2:cc:8e:85:40:37:60:9d:60:f3:ba:2a:
5e:6a:f7:ab:71:ab:76:b5:f6:36:2f:0a:ab:8d:8e:10:48:11:
e2:69:fc:91:59:1f:a0:18:32:ca:82:e2:3d:6c:17:fb:91:6c:
c5:6b:0a:6c:f3:c6:79:3b:78:32:d2:ec:4e:0a:3e:0d:cd:d5:
07:6b:96:11:a8:b9:6f:19:18:88:aa:cb:1c:ea:97:3b:64:2a:
d0:fb:ca:b9:3d:4f:d4:da:66:47:61:ae:27:6e:fa:a0:c7:2b:
15:3e:b1:5f:b4:48:8e:b4:d2:7e:6e:20:e0:18:ae:8f:24:26:
4b:15:9b:91:d7:e1:b0:d7:ae:98:88:2c:34:d7:5a:3d:11:9d:
5c:58:b4:55:a0:8a:5c:72:ae:6a:3f:7f:7e:5d:7a:a5:6b:cf:
c4:ca:59:52:31:56:b7:b7:29:89:7e:9a:3b:49:50:66:c9:ba:
3c:54:7e:0b:92:8a:2c:03:fc:b3:65:02:36:89:38:5d:0d:f8:
4d:27:21:61:2c:99:80:27:b6:44:7b:49:1d:76:66:cb:f8:fe:
73:80:d9:8d:28:58:c3:4b:8e:c0:e9:a7:ea:fa:57:e5:30:39:
19:f3:dd:7d:15:2d:f8:b7:d7:c5:76:40:ab:75:a4:1e:13:50:
39:63:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 22:53:49 2026 by rpki-client