
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
File: fdt5B7eWYwk_a_OC2oySdjuuHyo.mft (raw, json)
Hash identifier: YF2sobm/i6d4ZsMYpq7rm2t46mbCGGccMkzclwt5sy8=
Subject key identifier: E2:46:E6:6A:C8:FB:74:A8:9B:DA:D7:21:5F:BA:C5:41:31:C2:DE:40
Authority key identifier: 7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A
Certificate issuer: /CN=A913EECE/serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
Manifest number: 53
Signing time: Sun 11 Oct 2026 08:55:06 +0000
Manifest this update: Sun 11 Oct 2026 08:55:06 +0000
Manifest next update: Sun 18 Oct 2026 08:55:06 +0000
Files and hashes: 1: fdt5B7eWYwk_a_OC2oySdjuuHyo.crl (hash: xYYycF7r4IXX5AHlLKmjzPkrMv2muPcATFbyLtWucY0=)
2: EF8B56A0838A11F19573539171A30FBC.roa (hash: hNudVENLr6N/IfkZvDwKoVpTI9spzdJ1NFaX8Ir4zJE=)
3: 670F51BA49E611F1A9E07428B5833773.roa (hash: i0rrVfRZcMuLASMWtvqI+waoaniI+Rv5lolA1yOyLxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl
rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EECE, serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
Validity
Not Before: Oct 11 08:55:06 2026 GMT
Not After : Oct 18 08:55:06 2026 GMT
Subject: CN=6acb4eea-a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:51:06:26:63:ad:90:0a:74:22:05:70:60:
d0:85:f8:47:82:09:6f:86:86:ad:a2:ee:39:71:30:
66:49:88:6e:79:03:fa:74:7e:42:e8:de:e6:ca:3d:
fe:d6:73:b3:03:5e:49:50:e1:03:39:42:d4:dc:7e:
bf:ad:fb:7f:bc:b1:01:c3:4b:de:72:f1:3a:b1:37:
48:4a:6c:77:f3:a8:3d:29:22:90:23:87:18:90:f5:
b2:56:5e:75:3f:38:76:31:9b:f7:4a:8c:dd:8c:2f:
80:ff:f1:6a:e9:c0:60:1e:0b:9b:4d:19:b9:53:92:
77:34:38:36:68:b1:40:33:fc:08:c1:b7:41:ce:c9:
9c:4c:6f:73:4b:ff:48:c0:73:ff:df:b0:15:ca:46:
fd:2f:30:f4:d0:31:35:90:e2:e4:01:49:ff:6c:ab:
7d:a6:3a:80:46:a1:14:56:54:8b:13:2f:2d:39:06:
a2:22:a7:57:06:65:2f:fd:36:31:af:33:4d:fe:67:
10:21:fe:54:fc:cc:b7:e7:53:13:5c:31:15:66:08:
b1:b6:7f:30:8a:39:2d:8e:67:04:13:b3:a5:aa:3b:
50:32:d1:b8:28:df:42:41:d9:40:99:9e:7e:64:b1:
25:4f:36:1b:e7:97:38:1d:79:a5:f8:20:e3:3f:ab:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:46:E6:6A:C8:FB:74:A8:9B:DA:D7:21:5F:BA:C5:41:31:C2:DE:40
X509v3 Authority Key Identifier:
keyid:7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:72:ab:5c:7d:fd:71:54:61:e3:e7:17:4a:08:9b:2e:a8:b1:
ec:69:8f:7b:ce:b5:3d:da:b7:eb:b2:79:6a:ec:d8:6e:31:2b:
83:40:77:e8:86:7b:44:2a:d7:e6:f3:dd:45:22:d2:11:bf:c6:
b1:e7:a8:d6:ec:8e:69:74:df:dc:d1:92:7c:1f:d2:10:e2:42:
23:67:a4:02:5b:58:d2:14:1a:5a:33:b3:16:26:34:de:55:5a:
23:5f:aa:15:23:14:c9:fd:65:5e:e2:03:9d:f1:dc:2c:52:99:
78:15:d3:cd:3f:82:9a:82:9e:aa:c1:99:f8:84:4c:09:89:c4:
33:a1:98:41:fb:f9:4d:f7:cc:4e:01:6c:b0:01:58:25:bb:b6:
5e:6b:53:f5:cb:83:dc:5c:ad:2d:1e:59:39:e5:f0:16:90:e6:
73:09:83:2a:8c:89:8e:ee:29:f4:3f:28:32:76:c9:a5:d9:cd:
bf:6b:04:2f:a4:37:d3:46:31:fc:2a:31:3c:a5:cf:c1:a1:22:
cd:02:c1:62:24:35:95:12:80:11:30:2f:c9:73:86:c5:f5:a8:
ab:0a:4d:35:de:cd:a2:0e:8c:56:9e:07:58:7d:2f:68:72:a7:
19:d5:e7:52:6c:f2:aa:5f:cb:95:b5:33:7a:4d:cf:95:f1:f2:
5c:88:2c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:27:22 2026 by rpki-client