
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier: RkSp0ixUzz3hYL34tmQtlfS78zAkSmsbvDJjFo1elCY=
Subject key identifier: CC:33:3D:62:92:CA:DF:B6:63:92:0E:6E:55:97:E5:CD:7D:F0:0C:24
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number: 085C
Signing time: Sun 02 Aug 2026 21:21:52 +0000
Manifest this update: Sun 02 Aug 2026 21:21:52 +0000
Manifest next update: Sun 09 Aug 2026 21:21:52 +0000
Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: hBShzovfUFwDiHMS5zCwK41vkbd1d+dBBOhqu7FjC38=)
2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: U6Px3+2UpSkVxzu/Qr8RX6ggWXcyYRot1wBwG96ExR8=)
3: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: /7IYWI/di3kJsTIoYEmQknNBsesmz2VOwgqLTQpmC0M=)
4: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: OEyVTkl1WhphFhFfhyBKXGd5r6CJfOuj4maOaVwdIhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Aug 2026 21:21:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Aug 2 21:21:52 2026 GMT
Not After : Aug 9 21:21:52 2026 GMT
Subject: CN=6a6fb4f0-786d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9b:10:46:49:4f:c8:ab:47:1c:6f:b1:fc:f7:
f5:37:57:d2:3b:26:15:2e:28:ca:aa:d3:43:8f:1b:
77:7a:49:99:5f:60:22:e3:cb:4e:3d:1e:b8:da:a6:
bc:b4:f3:5e:2b:fe:25:cc:30:7a:82:da:02:bf:6c:
57:68:f3:13:29:37:16:0f:73:cb:8e:22:6e:04:7d:
61:b6:98:95:53:a1:1b:b9:ab:d8:bf:15:d9:7f:79:
51:69:5e:e0:0e:fd:e1:9f:2b:08:a7:d9:e2:47:f2:
d7:b7:64:f9:24:30:72:50:88:f8:d6:0b:4a:82:91:
53:ab:f0:17:33:e3:fe:fd:97:eb:91:e5:ff:59:e2:
c0:49:9d:fe:43:28:45:0e:d1:b3:2f:4c:b0:a8:b6:
30:98:37:ec:ae:32:60:a9:1d:e1:7e:2f:b7:35:13:
50:08:8d:e6:62:d0:54:e3:1d:13:3a:03:08:95:3b:
f5:2b:58:c3:0b:58:1b:00:e3:db:8b:53:7f:a8:ab:
da:60:1b:f2:88:69:38:29:1a:52:bc:b7:4e:98:de:
8d:d7:62:c3:92:59:14:c9:f1:20:44:2c:f2:58:66:
3e:49:8e:ea:78:94:09:31:cf:1a:12:11:1c:c1:28:
6d:c8:1c:3b:44:6c:d2:09:fe:e3:c5:02:2d:02:de:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:3D:62:92:CA:DF:B6:63:92:0E:6E:55:97:E5:CD:7D:F0:0C:24
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ec:6a:e3:47:f0:ee:7b:39:b0:2b:79:07:81:c0:6d:a6:2d:d3:
cb:00:09:c0:d7:20:14:0a:50:da:0e:4a:59:16:f0:1f:f7:c0:
bf:a2:e5:fa:4f:60:bc:57:67:9c:4f:2d:cb:92:d3:8a:4a:8b:
40:f6:74:96:2a:67:8f:69:67:f5:38:0c:a7:d2:be:89:51:17:
8b:c3:e8:1b:84:ea:f4:58:c7:91:eb:76:a2:f4:47:4f:96:17:
1e:54:dc:d3:c5:78:ca:c6:4d:12:72:2b:51:12:ea:9e:f3:1a:
c9:33:ac:cf:6f:87:3b:95:ce:46:13:ba:a9:be:f5:ae:20:fc:
c5:19:de:84:39:7a:55:3c:8c:ba:69:9c:96:67:fd:fe:2e:4b:
66:ed:fa:c2:13:09:da:ea:26:05:20:3a:82:c3:46:b6:43:82:
ac:09:b1:42:99:f6:06:97:eb:ac:56:fe:36:1c:7a:d4:de:0a:
2d:f4:75:53:74:33:2f:35:63:db:e8:4d:a7:dc:df:c8:9a:7a:
dd:d3:d6:aa:cd:bf:c7:ab:67:1f:5c:0e:95:2c:31:d6:63:13:
d2:a7:ae:1a:09:3a:27:31:2e:82:91:7d:15:ee:a9:1a:13:e7:
3b:07:64:1b:8d:65:b4:40:9c:e6:e7:41:4b:5a:1d:54:3c:0b:
cd:aa:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:27:22 2026 by rpki-client