
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier: 5hxP8KR7prpKOOy825Szj5zRNPCiSDr/CpcvMF1/Lt0=
Subject key identifier: C3:81:5F:C8:C9:D8:68:E5:4C:08:89:B1:A3:3C:00:C8:40:EE:86:F7
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial: 0169
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number: 0155
Signing time: Fri 07 Aug 2026 04:54:23 +0000
Manifest this update: Fri 07 Aug 2026 04:54:22 +0000
Manifest next update: Fri 14 Aug 2026 04:54:22 +0000
Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: 9WIoFDqwctvVQND8Qv/bi6gyZ7k8RIEyBo7egU4k+ac=)
2: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CTkMutpvAk7yYXe3XyhfPht58lpcIVgdH5hdBMm7y34=)
3: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: zQjdwBYrCmNJ6NC3Jbu/wsnNVtPFgbdvd9Z7ELK9Okw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 14 Aug 2026 04:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Validity
Not Before: Aug 7 04:54:22 2026 GMT
Not After : Aug 14 04:54:22 2026 GMT
Subject: CN=6a7564fe-2619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:62:c3:76:f7:d1:10:eb:c7:97:b9:d1:97:
e4:1f:13:c2:98:80:a5:4f:7e:f3:01:74:00:0f:dc:
39:ec:7f:93:b2:21:bf:6c:33:39:bf:82:52:43:f4:
50:dd:9a:2e:8a:71:e3:87:17:c6:10:0d:17:73:41:
c8:f3:66:20:36:2c:d9:8f:82:fd:e0:4a:f5:dd:57:
90:fb:a1:4b:9b:a9:f7:cd:aa:14:8f:08:38:5f:ce:
1f:40:81:2a:6f:27:6e:ad:1b:de:30:97:c6:26:82:
51:b9:b7:d9:9d:28:4b:37:bc:f6:20:21:4f:52:dc:
b2:79:28:58:7e:4f:e6:11:05:48:4c:5e:f5:40:e0:
29:78:b0:c3:4e:21:90:04:73:47:b6:44:fb:6b:22:
38:53:61:0b:53:a5:31:cf:ee:74:db:14:56:f4:ff:
1c:6f:78:60:52:cd:57:6a:73:82:a8:34:9a:a5:ae:
fa:36:80:43:43:4d:00:20:23:9d:f4:9b:bc:80:41:
69:1d:78:dc:d8:2d:e0:a8:00:41:71:10:67:2f:7c:
fa:89:28:a1:93:cf:87:72:de:6e:f4:83:d1:5d:4c:
26:27:c7:c4:26:ff:3d:f0:e5:76:55:f0:57:f9:6d:
10:82:9c:bb:c8:58:88:54:87:40:8d:0a:62:13:0f:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:5F:C8:C9:D8:68:E5:4C:08:89:B1:A3:3C:00:C8:40:EE:86:F7
X509v3 Authority Key Identifier:
keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:0b:31:7e:6d:15:22:1b:e6:bd:94:ff:2b:4c:17:de:7c:05:
b0:bd:a3:8a:8e:0a:13:c8:27:fe:81:b5:14:62:8b:44:8a:77:
5b:31:03:2e:d3:20:4c:08:52:e2:a8:7b:08:7a:3a:26:cd:35:
78:1e:7a:0a:cd:89:fa:7d:48:4f:6a:e4:56:50:5a:1e:2f:94:
71:10:d7:a9:dc:da:9c:d5:db:4b:d1:1c:9c:36:d8:b6:57:13:
db:9a:0d:56:cd:64:3a:26:0c:e8:af:7a:68:c8:e3:d4:7e:3d:
00:08:ef:d1:83:b9:5d:90:97:1a:31:77:5b:1c:1b:9b:8c:46:
2e:f7:87:28:77:80:37:3a:7c:36:0e:07:c4:7c:da:58:98:14:
bd:a3:26:0d:89:02:28:cb:30:9b:fd:fa:42:78:4d:52:0d:66:
de:5e:73:7b:49:39:17:9e:b7:0f:dd:82:21:dc:eb:07:7c:f1:
2f:a2:f2:ee:83:aa:d2:12:3b:11:c2:6e:8b:70:8b:28:89:f8:
af:e6:09:92:04:9a:27:b7:4e:7c:0a:39:55:e2:bf:86:8f:bd:
eb:8a:db:9c:37:06:d0:6c:d2:a4:ef:6e:76:0d:dc:40:99:3b:
0c:94:8b:54:ac:35:6d:7c:d9:51:30:42:98:f7:f9:cc:9c:b9:
29:56:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 10:06:51 2026 by rpki-client