
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
File: fdt5B7eWYwk_a_OC2oySdjuuHyo.mft (raw, json)
Hash identifier: y3IxrH+rgCyWCPMBJOwRZK17Px1H7xzwT8ZxzCqBzIc=
Subject key identifier: 8A:90:38:D2:D0:3C:9B:9A:02:82:5D:31:FB:CF:B7:6A:21:7A:3E:14
Authority key identifier: 7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A
Certificate issuer: /CN=A913EECE/serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
Manifest number: 3B
Signing time: Tue 25 Aug 2026 08:29:42 +0000
Manifest this update: Tue 25 Aug 2026 08:29:41 +0000
Manifest next update: Tue 01 Sep 2026 08:29:41 +0000
Files and hashes: 1: fdt5B7eWYwk_a_OC2oySdjuuHyo.crl (hash: h0L5XFFlO24sDHQmgIWUsZ95A/q2AwnUddctXVS4jog=)
2: EF8B56A0838A11F19573539171A30FBC.roa (hash: hNudVENLr6N/IfkZvDwKoVpTI9spzdJ1NFaX8Ir4zJE=)
3: 670F51BA49E611F1A9E07428B5833773.roa (hash: i0rrVfRZcMuLASMWtvqI+waoaniI+Rv5lolA1yOyLxg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl
rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 08:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EECE, serialNumber=7DDB7907B79663093F6BF382DA8C92763BAE1F2A
Validity
Not Before: Aug 25 08:29:41 2026 GMT
Not After : Sep 1 08:29:41 2026 GMT
Subject: CN=6a8d5276-0c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:ab:44:a0:d8:38:0d:a3:79:bc:97:96:98:
3b:a0:b2:90:07:68:2e:c7:73:1d:1c:cd:df:1c:f5:
51:3f:11:44:d5:24:22:78:81:e8:5d:a5:c6:56:be:
4f:7e:76:70:d2:fc:e2:e6:02:21:17:8e:44:ac:b7:
81:22:33:88:fd:39:3a:78:d7:d8:20:44:b5:a9:c0:
71:7d:ed:4f:7f:ba:17:65:5c:40:cb:6f:bd:98:f5:
c6:b3:bb:54:f4:78:ba:38:80:0b:45:71:ab:21:15:
78:28:75:f9:5a:74:1b:8f:6f:07:7b:ae:5f:07:98:
38:83:8c:ad:36:aa:ca:5e:32:96:7f:9e:63:5d:dd:
3e:34:6e:60:46:1d:04:b3:ec:d8:42:7e:03:2d:1f:
56:d4:67:61:b5:87:04:2a:e9:8c:09:5e:21:64:b0:
ca:b6:99:c9:f0:77:00:a8:fb:24:f1:47:fc:77:fb:
51:75:7a:f4:b1:0d:b5:ca:f7:22:8f:50:4f:73:9c:
51:4e:8a:03:7c:de:42:e7:fd:75:55:da:84:68:f7:
92:63:fb:09:98:e4:10:86:77:45:5b:ce:61:00:26:
9d:0c:9e:06:dc:d9:af:03:ca:8f:77:dc:6d:09:4c:
5b:cd:56:6f:b0:fe:7a:ac:77:08:e9:15:a9:07:13:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:90:38:D2:D0:3C:9B:9A:02:82:5D:31:FB:CF:B7:6A:21:7A:3E:14
X509v3 Authority Key Identifier:
keyid:7D:DB:79:07:B7:96:63:09:3F:6B:F3:82:DA:8C:92:76:3B:AE:1F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdt5B7eWYwk_a_OC2oySdjuuHyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EECE/574BB49849E211F19145C78FB0833773/fdt5B7eWYwk_a_OC2oySdjuuHyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1f:72:d0:3f:0d:b0:58:d2:b8:1c:8f:8d:c1:4c:28:97:29:
7a:ac:da:ef:f6:d3:af:29:81:9f:76:f2:90:00:01:ce:ab:86:
a7:d8:23:34:36:6b:59:a6:bf:f1:13:1a:da:d5:a0:35:bc:96:
26:0f:d6:81:d3:ef:3e:72:73:53:88:9b:09:50:73:f8:a2:94:
ef:2e:b4:7f:cb:a7:3a:fb:84:ba:c2:06:f4:34:78:2b:62:33:
06:e1:68:f4:97:37:b2:d9:a5:1c:ee:6f:12:3f:58:e1:06:06:
cc:0e:cb:0a:7d:cc:ff:57:c1:b0:d2:32:8b:c7:ea:fd:d3:59:
02:ed:a5:d0:ef:3e:ea:1f:0f:1d:f7:07:84:ec:a2:96:5e:2b:
71:1e:34:02:22:ed:4c:59:f3:38:9c:2a:1b:3e:9d:db:41:86:
3f:a0:07:d3:db:67:bd:cb:ed:f8:51:af:78:03:3c:8a:34:8a:
ba:7f:2e:84:6a:20:d0:3d:de:3b:12:9a:a5:b3:99:51:0f:98:
00:92:8c:ce:3c:01:0e:5a:bb:4d:23:b5:ff:c7:47:f9:59:0d:
2b:5c:6b:68:06:d9:c3:7a:b9:f4:47:b2:d3:14:f8:f2:10:64:
73:a9:57:e9:53:11:34:14:9f:76:79:e2:a4:52:25:74:d4:31:
43:4f:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:18:42 2026 by rpki-client