
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier: ce2bm/qaYesj3TxU2fKWHjsL88E9nNpvbddvaxhf6FY=
Subject key identifier: 75:22:18:96:CB:6F:29:37:48:E5:0E:76:3D:EA:D7:42:57:12:22:50
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial: 08CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number: 08AD
Signing time: Sat 04 Apr 2026 20:17:32 +0000
Manifest this update: Sat 04 Apr 2026 20:17:31 +0000
Manifest next update: Sat 11 Apr 2026 20:17:31 +0000
Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: Bc6/GSelDWwq678Zv8p8PgxMMNpYdERw/LngbSdKo/o=)
2: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: FzAXOXMg8ypDm7weH1JrGkQxJTnIfLB9Zd0EsKEe/7c=)
3: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: oW2JhsPjI+GKnJ32ROir3XwQDxUOtlZsdWGXqlOBZI0=)
4: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: UM57hSN5aLzJ1miAi0WEBED5Yq0amggNMnfYd46Qpgk=)
5: C664689AE0F511EABB96D531C4F9AE02.roa (hash: IuNSCN6yrNlc/0wSwd/g4xZGin/ZqKczpvImaghk0B4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2252 (0x8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Validity
Not Before: Apr 4 20:17:31 2026 GMT
Not After : Apr 11 20:17:31 2026 GMT
Subject: CN=69d171dc-dcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:07:d8:c1:75:e1:54:66:a6:56:eb:2a:3e:
68:09:db:86:df:b1:f0:31:e1:47:4a:33:30:5d:c1:
cd:a0:31:b7:58:3c:20:2a:2c:54:cd:9d:e6:0e:9b:
60:eb:97:03:29:e5:4d:6c:dc:30:19:e5:94:53:a1:
d7:bf:69:ee:c8:d2:38:20:45:39:65:a8:8a:e2:d8:
10:9d:96:ae:78:f4:23:f6:df:1e:25:36:6e:58:20:
23:21:99:d3:45:ac:02:a1:8e:b5:f3:28:83:16:cb:
b6:fe:81:a6:be:2f:07:e3:03:ba:37:24:4f:c7:f3:
a4:8a:97:47:45:cc:ee:2b:96:88:44:c3:f7:9d:f3:
b7:1f:51:87:b6:2d:e0:1e:9e:46:b6:0c:cf:84:98:
b1:8a:47:0d:d1:74:dd:7c:2c:88:81:9e:e5:e0:5a:
cd:39:03:43:a0:7a:c5:ef:3d:d5:34:6a:d7:c2:dd:
4d:84:c6:bd:de:09:28:1b:0d:ff:aa:1e:79:62:e8:
24:b2:89:76:fb:8b:11:60:b6:87:3c:51:bf:2d:b4:
82:1b:64:76:34:3a:0e:56:b6:b9:27:62:cc:ba:93:
29:9a:d3:2c:aa:9c:fc:43:2e:77:3e:cc:53:0d:99:
01:07:df:cf:80:f0:6b:54:d4:5b:57:6f:36:78:6e:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:18:96:CB:6F:29:37:48:E5:0E:76:3D:EA:D7:42:57:12:22:50
X509v3 Authority Key Identifier:
keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:35:a0:73:1c:03:44:f0:8c:33:de:42:94:cd:ea:71:d5:9b:
12:d1:bf:e7:e6:dc:49:0a:9e:f4:06:d2:da:b6:cc:4b:aa:f4:
3f:08:e1:77:a1:64:07:86:64:9d:97:c7:64:7a:36:62:b8:a5:
a4:d0:83:6b:d2:22:46:de:62:6f:c7:6e:11:17:7f:47:27:5e:
8f:b9:6f:79:5c:cf:b1:f4:26:cc:b5:24:74:e8:66:34:d6:c2:
44:98:a1:a3:10:f8:42:72:b6:7c:9e:55:af:05:fe:c2:95:da:
bd:34:0c:f9:51:e4:65:fc:24:61:bf:97:2f:b7:85:83:d5:ce:
d0:b1:33:d3:e4:a5:00:b7:5b:17:67:87:bd:ac:b9:9a:b0:8c:
2b:88:3a:d7:4c:f3:cd:c5:71:9c:ed:42:22:15:0e:7a:84:8f:
d5:db:f9:cf:1d:38:7d:3f:5b:75:42:21:c6:6f:d1:01:ea:c8:
ec:24:98:25:5d:25:39:5c:2e:7f:65:28:4c:51:bd:81:ee:7d:
77:08:7e:d6:e1:b6:3c:17:7e:21:9c:7a:b0:ba:d3:8f:fd:1d:
3b:0d:f7:10:97:c8:d5:42:35:de:bd:54:fa:a4:4a:32:0b:b3:
76:17:7c:a6:f7:46:6c:df:b3:a4:97:f6:ab:43:fe:5f:58:32:
7a:c8:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:11:15 2026 by rpki-client