
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier: /2hMTlZXmVxnx/qTAQBVCuNy7Mxc63gSe/FETGE0bng=
Subject key identifier: 4E:83:FF:36:86:57:D0:B8:59:8A:3A:CF:EA:08:4C:85:12:B0:71:CC
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 085C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number: 082C
Signing time: Mon 04 May 2026 21:09:49 +0000
Manifest this update: Mon 04 May 2026 21:09:48 +0000
Manifest next update: Mon 11 May 2026 21:09:48 +0000
Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: wdul/JGSeu9TGqscShXF3l9V8MLn9S3q+o6zr0gu/Cs=)
2: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: lZyF/R0McwFHmab4BMeqcfU4ondgRb50VNMndNfEtsE=)
3: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: 6xwmJlbl5R7pahb4ie5zQu29OXgagY1TGzpA5chMv/s=)
4: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: wZxfcnKBY6ws0g5Xj8YXKxzQCzDk14hq7Z5XlyYaNyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: May 4 21:09:48 2026 GMT
Not After : May 11 21:09:48 2026 GMT
Subject: CN=69f90b1c-98cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:31:de:17:f1:2f:29:9d:fe:44:45:b2:47:
b9:a2:66:08:66:ac:63:c0:92:fb:65:da:9d:46:55:
d6:53:5a:b9:77:2c:49:65:4e:f7:69:5a:75:6f:9f:
21:ba:2d:02:ed:fd:a8:6a:bc:29:23:e3:df:f2:67:
fe:a5:87:f3:0b:8f:14:f4:c9:7c:da:5a:a6:c2:c5:
30:4f:be:ce:62:3f:68:76:d0:04:b1:26:b4:b5:de:
c3:22:d7:e3:0a:a6:ef:d7:b5:8a:6b:2d:47:3a:ea:
8d:ec:ca:0b:23:9f:71:3c:cb:11:0b:e4:af:5e:cd:
d5:d7:a6:6b:00:21:9a:15:be:d5:53:71:6c:f7:fb:
ee:a3:66:6a:1e:50:25:2f:8f:f2:c2:58:23:fb:4d:
1c:7d:7e:93:ee:6c:97:a7:c9:9c:08:06:a8:13:da:
26:c4:29:dd:c5:49:82:50:c2:76:17:dc:43:25:37:
75:a6:ad:dd:dd:4f:37:37:85:57:83:3e:b7:df:e4:
17:f6:e8:77:e5:84:e8:b4:c8:8b:8c:bc:2f:87:e4:
78:ef:e6:6e:59:7b:d1:5e:89:ce:49:3f:8f:e7:cd:
01:a2:88:b7:a1:c9:ce:d5:c1:03:39:9c:30:57:f7:
23:77:09:b2:ba:0a:8b:3a:5e:37:87:e5:c7:6f:cb:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:83:FF:36:86:57:D0:B8:59:8A:3A:CF:EA:08:4C:85:12:B0:71:CC
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:44:c1:01:07:c2:c9:bb:45:91:60:08:6e:c8:86:98:62:81:
ef:03:de:73:a0:10:c2:69:0f:5d:74:32:93:7d:24:c6:41:5e:
e4:9e:18:68:12:56:31:71:f6:c6:b1:d2:50:aa:f5:08:ac:8a:
e7:85:f0:cb:83:cd:1f:6b:2f:a7:ef:17:72:68:fd:45:7a:79:
79:76:2e:81:ea:8b:b3:e3:0b:41:7e:34:18:e7:a3:77:b1:02:
83:4a:50:19:3f:a4:78:3d:28:ec:c9:b1:bf:b7:c1:07:f5:b8:
29:6d:4d:5c:d7:42:60:92:b0:32:b9:d6:4d:f0:f4:f7:4b:0a:
e0:31:54:0f:83:8c:08:5e:d5:cb:f6:30:9b:1e:24:0a:ca:00:
1e:39:da:27:d4:8e:59:d8:2e:48:6b:a4:b4:3c:38:0d:40:c9:
f2:76:c6:08:4f:30:24:97:b7:c0:77:50:82:03:19:57:56:64:
0c:8a:54:52:3a:1a:b9:88:6d:da:5d:39:6b:3f:94:d3:e2:92:
8e:ae:05:58:45:c7:c2:d3:fc:fe:b6:4d:94:34:9f:0c:d9:ba:
fd:76:96:68:58:c9:28:ff:46:a5:8f:cc:85:24:42:00:ce:38:
08:7b:a3:a9:e5:ab:c7:8e:95:7b:4b:ac:2b:e7:6d:76:a4:76:
ec:85:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:27:55 2026 by rpki-client