
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
File: EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json)
Hash identifier: +6GwV3OIIHNyR0S6lQoV/M2FbiZrcliDbQ3FoHEr1lk=
Subject key identifier: 5A:DB:E8:8E:8C:AF:A3:3C:45:47:4F:67:A6:44:A0:2B:24:2C:1B:8C
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Certificate issuer: /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial: 02C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
Manifest number: 02B8
Signing time: Mon 05 Oct 2026 01:45:26 +0000
Manifest this update: Mon 05 Oct 2026 01:45:26 +0000
Manifest next update: Mon 12 Oct 2026 01:45:26 +0000
Files and hashes: 1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: KJ9zZ7KkzLYOagMWEkxMPbbfB28Tcq/8nqbPfY98JLc=)
2: 487A18B804CA11F1B2B56954083D8C67.roa (hash: ycuyie7LwkxG6yrjgKRl5/hSDxED87sOezbxhhIb1w0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA3F, serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Validity
Not Before: Oct 5 01:45:26 2026 GMT
Not After : Oct 12 01:45:26 2026 GMT
Subject: CN=6ac30136-504c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:b0:a7:7b:10:3e:38:36:43:2b:1f:39:44:
ee:be:52:99:cb:98:72:73:47:d6:04:28:c4:ce:11:
55:ea:4a:db:eb:49:1c:da:cd:f5:7b:2b:36:7e:1f:
00:18:6d:04:50:75:86:50:ed:e7:a7:43:5d:71:15:
2a:42:21:d9:24:9b:15:10:95:92:34:c5:ad:fe:2a:
57:b5:86:5e:3b:23:48:38:48:58:d7:fe:01:59:e8:
d1:15:36:74:ae:34:1d:2f:b3:1c:73:6a:34:8c:8f:
f2:e5:6a:56:33:fc:b5:5a:e6:80:f1:fc:c1:63:b1:
52:e6:f1:c2:16:0c:d8:00:b4:b2:74:02:64:15:ad:
e3:ec:bb:1a:d3:8c:59:a9:4b:34:6d:f1:8b:51:ca:
39:21:e5:7e:d8:30:c4:13:94:52:f3:bc:3c:bc:bd:
ce:25:d3:02:24:4c:4f:36:37:05:33:e7:7d:8d:83:
78:ed:d6:f8:cc:ae:ef:d3:12:c6:eb:ea:3e:f5:1b:
5f:cb:c2:6d:e4:1a:64:c4:ab:ac:06:c5:b2:0e:f4:
91:09:df:91:47:db:7b:96:2f:81:68:38:e9:06:8e:
29:91:61:31:ca:3e:9f:fd:cf:97:57:51:c2:ec:29:
83:ce:3d:31:7e:7c:ae:1c:a8:da:ee:d9:0c:80:e1:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DB:E8:8E:8C:AF:A3:3C:45:47:4F:67:A6:44:A0:2B:24:2C:1B:8C
X509v3 Authority Key Identifier:
keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:dd:66:39:80:10:74:3b:cc:65:7a:ff:f5:8b:2b:4f:1e:d4:
0a:a4:c8:95:d6:73:4b:a9:90:4e:ff:28:10:f8:41:ed:03:5f:
09:25:76:92:bf:53:c6:4b:87:b4:b3:a4:ab:16:18:2c:6a:21:
28:ad:96:92:74:17:58:ab:cb:a8:86:70:03:c0:19:e4:55:60:
c3:20:ab:90:6b:da:98:e4:0a:4a:18:b2:f8:96:e5:fe:37:26:
2e:9a:a6:36:35:9f:21:f6:68:b2:7d:43:93:87:b3:c2:a7:8b:
7b:a1:5a:b4:95:3f:8d:b0:05:61:1d:7f:6a:89:93:9d:eb:b8:
83:48:68:15:74:63:d7:98:e6:8b:ee:aa:2d:4d:3c:cc:19:cb:
24:6d:6a:86:55:e4:03:4b:5a:a9:25:19:f3:ed:54:14:bc:b2:
4b:73:97:1e:af:ce:c3:81:6a:08:13:1c:df:f7:5e:7d:da:26:
e3:2f:53:44:69:20:63:aa:1f:19:7e:53:1c:b5:a7:74:bf:91:
84:64:36:3f:9e:cf:49:07:9f:51:95:77:02:d0:56:bf:0e:18:
b5:36:f7:d0:5c:e6:23:6c:0c:22:f3:6d:c1:fb:ed:79:21:f0:
29:d1:85:ce:a3:73:e0:f7:ee:10:aa:4e:0a:ae:39:28:70:ae:
2d:cb:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:56:43 2026 by rpki-client