
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json)
Hash identifier: G8qkKcZoXB0vc/h/BSpAw10XCUwwOa6Irc9IrX9c208=
Subject key identifier: 0A:AA:DD:A1:FC:17:67:47:72:0E:F2:47:76:67:A6:C9:94:30:9B:93
Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Certificate serial: 041D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
Manifest number: 0405
Signing time: Sun 25 Oct 2026 00:24:33 +0000
Manifest this update: Sun 25 Oct 2026 00:24:33 +0000
Manifest next update: Sun 01 Nov 2026 00:24:33 +0000
Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: A7tBVzjhaWCLs3qdyP+W5NkajSN5l8zxP6zHrebPtnQ=)
2: A3E18E3A332C11F1ADFD867CBA833773.roa (hash: YzFoZP53v16C8QuDkMHv9degBGIpKE+H6u3v8MdHmO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Validity
Not Before: Oct 25 00:24:33 2026 GMT
Not After : Nov 1 00:24:33 2026 GMT
Subject: CN=6add4c41-1a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:f9:36:49:80:a4:6b:e6:7b:1a:64:93:4c:
bb:5d:00:f9:4e:55:db:9c:87:48:14:44:37:9a:5a:
36:90:66:94:03:3d:90:81:62:67:e4:58:d6:02:61:
86:96:b9:57:0e:bb:62:28:e4:73:3f:e5:f1:88:72:
19:22:86:91:73:9f:7d:c3:ce:39:93:02:ed:7b:9a:
43:c5:fc:bd:ed:44:42:30:02:09:59:34:61:cf:0f:
96:50:1c:3a:5f:3e:fb:8b:99:fa:7b:7a:d6:f5:7d:
af:bd:28:9e:37:65:b8:64:38:19:7e:8b:a2:59:e4:
18:54:dd:c2:6e:5f:bb:9c:ab:25:4a:7f:ac:ab:0c:
71:60:d6:f2:99:ab:07:fc:82:49:8f:fe:aa:03:4f:
45:95:bf:ce:cd:b3:ca:45:7a:39:4c:87:6a:43:13:
e4:b0:9c:12:0a:51:f3:2e:7d:11:36:25:51:f5:5a:
7a:da:69:30:c3:46:85:88:1d:a3:e7:4a:ca:ab:27:
fd:c0:36:a3:cc:ca:b0:91:62:6b:8d:2e:8c:29:53:
25:06:e2:6e:9b:37:f1:d1:2d:90:98:8f:70:74:3c:
7d:40:32:20:b3:31:69:dc:fc:48:79:83:f9:5d:33:
39:23:35:4a:4b:7a:74:da:e3:ea:93:21:fe:23:f6:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:DD:A1:FC:17:67:47:72:0E:F2:47:76:67:A6:C9:94:30:9B:93
X509v3 Authority Key Identifier:
keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:2d:ac:24:29:7d:27:14:94:0b:42:8e:e2:d8:b6:be:2c:7f:
21:0d:db:ed:74:54:3f:fd:67:3d:54:92:9c:48:33:9d:54:47:
c7:a0:a7:07:f3:17:e7:e3:1c:3a:a4:c2:4f:de:d8:d8:a1:e9:
a9:ff:83:3f:8c:94:a0:2c:7c:33:6e:76:28:a8:39:dc:b9:e6:
7c:eb:18:32:c1:6d:e5:f7:81:fc:c5:f2:a3:65:f3:c4:47:2e:
8d:d6:a9:02:b0:63:2b:d8:0e:2e:20:f6:48:0c:68:c8:20:62:
c7:2f:a4:4e:74:67:d5:62:5c:9a:44:c4:a7:eb:35:40:03:3a:
b8:cd:a3:37:8e:3a:4f:91:1e:23:02:80:dd:23:83:ac:eb:14:
1e:9d:25:0d:71:fc:a7:12:4c:4b:41:22:cc:2f:b9:7d:2f:07:
ec:63:ed:e0:cf:47:81:84:8e:03:2f:b8:1e:14:37:5b:bf:2e:
54:a0:b6:d6:1e:6d:d2:42:2c:e0:19:76:fc:20:57:1e:0f:3f:
b1:52:63:2d:6d:0d:88:46:96:c5:05:e2:ea:40:3e:d3:4e:93:
05:37:70:23:ff:fa:77:75:bf:98:17:76:5c:a3:54:1f:a2:6b:
ef:dc:a7:66:4c:d9:58:c3:41:a7:7c:d0:02:b4:30:65:39:23:
77:bc:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:44:50 2026 by rpki-client