
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
File: EY5vss8Va51aJq7AUfscX37-AeM.mft (raw, json)
Hash identifier: ljRpoaqWP6p7/6GfeFgYnBXB56iHhmLUGsWN3HvBDUI=
Subject key identifier: 92:79:EA:E5:58:FB:93:8C:33:75:6E:0D:FA:83:98:CA:41:83:CE:8F
Authority key identifier: 11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
Certificate issuer: /CN=A914DA3F/serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
Manifest number: 0255
Signing time: Tue 31 Mar 2026 01:58:32 +0000
Manifest this update: Tue 31 Mar 2026 01:58:31 +0000
Manifest next update: Tue 07 Apr 2026 01:58:31 +0000
Files and hashes: 1: EY5vss8Va51aJq7AUfscX37-AeM.crl (hash: sHGptFsBcbqkVWfIAAzJS1alQ9zOIHPSvS2qBpkoqBs=)
2: 487A18B804CA11F1B2B56954083D8C67.roa (hash: CP/1q39lkf6EzvFHkmc9JZuWN7n5nW9YBfhQJiQM7oA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA3F, serialNumber=118E6FB2CF156B9D5A26AEC051FB1C5F7EFE01E3
Validity
Not Before: Mar 31 01:58:31 2026 GMT
Not After : Apr 7 01:58:31 2026 GMT
Subject: CN=69cb2a48-d8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:80:98:8c:e7:3d:f5:77:ef:1c:85:ec:6c:5c:
86:61:ab:89:46:58:45:fe:21:58:9b:a2:a1:cb:7f:
aa:02:f6:26:00:da:37:80:74:f4:a7:b2:76:eb:0d:
1a:c3:c0:4d:5e:88:32:72:6a:6b:60:3c:60:e4:9b:
02:9f:12:7f:26:a7:9e:11:86:82:e7:b2:47:48:2f:
65:af:ff:e0:84:0c:d1:48:f6:8c:c8:d9:9b:52:3c:
c3:9a:fe:d1:14:04:53:a7:ae:da:58:50:c1:e6:d8:
24:63:16:d2:04:6b:b7:09:06:d9:8f:b8:aa:46:1e:
27:44:02:5e:32:26:59:49:cb:71:b3:37:c4:85:a4:
8f:4f:c1:d6:ce:08:44:56:5f:6b:15:a1:c9:e9:e2:
30:68:7c:9a:65:61:cf:da:2b:92:5b:a1:d3:a4:fb:
a1:02:f7:21:53:13:3a:74:cb:81:a7:20:dd:df:ca:
2f:46:d5:c0:27:6c:8e:fd:7c:a7:fc:89:0f:ff:4c:
ed:be:6e:42:0a:ac:c8:19:65:d9:39:16:39:3a:52:
b0:37:aa:4a:76:c2:38:59:ab:36:a9:f6:f4:e6:82:
36:f7:ba:6d:3c:b0:7e:e7:71:4b:91:10:49:ff:2f:
52:19:37:0f:61:59:ef:ee:e5:0f:d6:7d:da:ea:d3:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:79:EA:E5:58:FB:93:8C:33:75:6E:0D:FA:83:98:CA:41:83:CE:8F
X509v3 Authority Key Identifier:
keyid:11:8E:6F:B2:CF:15:6B:9D:5A:26:AE:C0:51:FB:1C:5F:7E:FE:01:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY5vss8Va51aJq7AUfscX37-AeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA3F/469B176AA6CA11ED8D109978C4F9AE02/EY5vss8Va51aJq7AUfscX37-AeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:3e:4b:83:14:a4:48:66:c5:68:5e:3b:15:13:4f:fa:95:9e:
f8:2c:33:6e:5e:da:6c:c4:50:72:f1:ed:5f:d8:3b:07:e0:e9:
9a:09:8f:3e:5c:1c:f4:cd:8f:f7:31:75:3c:40:e7:c5:f3:44:
b2:2b:78:63:fc:c7:aa:73:8c:c6:e6:d9:d6:cd:e1:90:12:cd:
5f:c4:21:d2:d6:1e:07:34:09:7b:67:8f:f4:a8:7a:55:a7:e3:
8f:d7:48:36:af:2f:14:1c:29:b4:b3:ce:77:43:b4:89:ca:5e:
a9:4e:a8:88:8b:11:74:f5:fa:f9:f2:7a:3e:e2:56:ad:e5:f7:
9a:4b:af:58:94:12:66:30:bd:87:50:0f:fc:67:59:1f:9e:50:
a6:1d:17:7d:9c:c2:51:42:0c:34:e0:52:4a:cb:de:1a:84:7f:
44:57:f5:35:50:4d:de:88:8f:73:dd:52:44:36:d5:0b:5a:32:
f1:3d:a1:1a:1d:18:93:5e:af:44:52:9e:10:f9:a9:d4:27:27:
f7:bb:ce:13:43:98:fb:2e:89:83:b2:2c:f4:3b:60:3f:01:a0:
fc:14:61:18:a5:99:46:6c:9b:54:23:f2:66:3b:17:75:d0:ea:
27:95:76:b4:d0:68:b9:63:b3:ac:0b:2f:0e:3f:e7:fc:8f:9d:
64:1d:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 07:02:34 2026 by rpki-client