
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier: hP523Lu29l9MVKr5GUZf9nmTZRuC798XliHOUcXl23g=
Subject key identifier: 12:5C:85:A2:CE:87:43:22:34:CF:8B:4F:DD:D3:AC:63:FB:D6:8C:85
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 0844
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number: 0814
Signing time: Wed 18 Mar 2026 20:49:37 +0000
Manifest this update: Wed 18 Mar 2026 20:49:37 +0000
Manifest next update: Wed 25 Mar 2026 20:49:37 +0000
Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: eCKMmy90hxylgU5bwW3sRiETXQ8L3tD/8s/5TbJIv4c=)
2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: 6xwmJlbl5R7pahb4ie5zQu29OXgagY1TGzpA5chMv/s=)
3: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: lZyF/R0McwFHmab4BMeqcfU4ondgRb50VNMndNfEtsE=)
4: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: wZxfcnKBY6ws0g5Xj8YXKxzQCzDk14hq7Z5XlyYaNyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Mar 2026 20:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2116 (0x844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Mar 18 20:49:37 2026 GMT
Not After : Mar 25 20:49:37 2026 GMT
Subject: CN=69bb0fe1-7749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:46:4a:d0:08:69:23:d5:fd:b2:fd:38:c3:
4e:6a:4e:52:68:51:86:12:5a:c6:f2:5a:cc:ff:01:
62:ff:be:24:80:49:42:68:b0:71:d4:f3:40:90:c4:
35:1b:3f:09:02:46:21:d5:7e:b9:4d:b4:18:41:83:
0b:fb:3f:10:60:c0:b5:e0:03:ca:bf:40:e6:3c:ac:
b6:06:6c:05:d4:88:92:24:cd:af:80:67:c1:d0:df:
a8:7a:f8:d0:ca:ac:ee:5a:9a:32:48:27:e8:98:79:
5b:4a:3d:89:9d:c5:5f:df:ce:bf:06:d7:3f:ce:ab:
36:b9:7b:e7:a6:8c:2a:81:ed:11:05:74:3b:69:a0:
1c:d7:ae:53:c4:ac:7a:c1:95:f2:5d:b7:ca:1e:63:
42:d0:f6:fd:00:cd:2f:93:8d:25:12:5e:a1:f3:1f:
eb:50:2d:ca:4e:84:94:17:15:f3:14:ed:15:5a:ff:
50:8c:3e:b8:24:f3:e5:77:30:68:14:81:c9:76:7a:
56:6b:56:4e:bf:34:66:85:57:4d:b1:58:d3:d9:ed:
c4:b8:06:e4:e9:0f:61:5f:08:0a:27:34:4a:5c:b6:
36:74:99:1a:4f:e3:85:46:fa:8f:81:c3:49:45:b0:
70:bc:18:e5:5a:fd:8a:01:6e:4c:44:5c:cf:ff:99:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5C:85:A2:CE:87:43:22:34:CF:8B:4F:DD:D3:AC:63:FB:D6:8C:85
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f2:bf:ce:cc:80:9e:bd:46:fc:86:64:e2:09:00:2a:d5:ae:
5b:3a:f8:bc:01:dc:b0:55:1e:fe:82:d6:84:1c:2d:69:35:fc:
63:a0:d7:6b:5e:c0:21:a1:d3:a5:dc:d1:36:c6:8c:8f:66:52:
f3:dc:c9:b5:cd:a0:86:48:d4:2d:d0:70:df:1f:61:2c:bf:6d:
02:80:3a:d3:01:bb:59:db:5e:ce:50:3b:ef:da:ce:cb:4d:76:
95:43:93:34:ff:a8:19:36:98:34:7a:0f:64:a9:1e:e3:28:e0:
2f:d3:78:ae:87:72:3d:33:5e:f7:72:92:40:14:73:99:05:ea:
5a:4a:ca:e5:33:ea:0a:c0:e9:59:d4:5b:ce:6d:97:a6:0e:ae:
ed:e7:5e:45:3d:0d:46:56:63:56:85:09:76:e1:71:0e:a9:f5:
e8:36:37:fe:c3:c2:ee:0a:21:d5:44:0e:6a:62:82:aa:53:27:
c6:d8:68:71:d4:3b:9c:b8:ff:87:57:7b:fb:1e:ce:0b:83:73:
92:b5:aa:ac:0e:8d:4a:4b:be:9f:a3:ff:28:e5:2c:6d:2b:90:
b6:82:a4:43:c0:3c:33:18:19:41:b6:6b:c5:03:47:42:00:e9:
6a:b5:b8:50:f0:19:50:4c:31:1d:97:85:4c:60:c0:6e:a2:de:
87:65:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 14:23:01 2026 by rpki-client