
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json)
Hash identifier: YN2DDGRHADipcK+8aFaH052/xI7iDJCD3VDuyw+t0lk=
Subject key identifier: 61:DF:45:29:16:28:AB:C0:FA:D4:08:FB:90:39:44:FE:D3:47:5B:F1
Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Certificate serial: 0404
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
Manifest number: 03EC
Signing time: Sat 05 Sep 2026 00:15:21 +0000
Manifest this update: Sat 05 Sep 2026 00:15:21 +0000
Manifest next update: Sat 12 Sep 2026 00:15:21 +0000
Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: AS9GcV3UziV7qPlgQ+HJJJyIgIskN/g0ybgydhwOnmg=)
2: A3E18E3A332C11F1ADFD867CBA833773.roa (hash: YzFoZP53v16C8QuDkMHv9degBGIpKE+H6u3v8MdHmO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F
Validity
Not Before: Sep 5 00:15:21 2026 GMT
Not After : Sep 12 00:15:21 2026 GMT
Subject: CN=6a9b5f19-84ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:02:72:d2:ad:1f:d0:af:e0:c1:f9:3b:29:
ae:0b:75:a2:15:a2:59:bf:3b:a7:6e:da:ed:20:6f:
3b:d0:ff:41:e1:5e:77:c8:ce:26:a2:04:6a:ac:00:
6a:9c:fd:69:9c:39:ff:87:7c:39:02:07:db:f3:52:
28:c9:fa:21:b3:18:cd:62:19:6d:39:8c:6c:cc:1a:
b8:19:d4:79:29:98:2c:3d:50:ba:7d:74:3c:93:c4:
06:03:1c:ab:a3:75:67:fe:15:79:1e:02:b5:23:b5:
11:fd:c1:45:93:74:b9:a1:3c:5b:93:df:27:bb:dc:
e1:fe:0e:b1:e4:ea:a0:03:30:77:d2:47:6c:29:eb:
4b:ea:83:c8:65:2e:5a:c3:c5:31:0f:f8:b6:89:6b:
1f:47:34:8d:f5:d3:3e:76:d6:19:0c:2a:e1:84:cb:
c5:f5:6d:10:80:16:0b:a8:cc:72:fe:1f:08:ff:d8:
f9:82:c6:c9:9a:d2:e1:38:3c:80:77:e3:19:ed:1f:
97:96:1f:d7:93:ed:18:82:49:cf:2f:40:80:8e:39:
47:77:15:12:00:91:12:af:7f:dd:e6:73:4c:65:f3:
90:3c:8b:65:67:26:ba:46:8e:d9:a4:d6:62:37:39:
35:59:dc:65:b1:60:ac:64:4b:10:6e:2a:cd:ea:3c:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DF:45:29:16:28:AB:C0:FA:D4:08:FB:90:39:44:FE:D3:47:5B:F1
X509v3 Authority Key Identifier:
keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3b:cb:01:bf:66:6c:77:42:44:dd:7a:5b:79:89:a8:fa:ab:
17:6c:b1:d8:a6:19:a0:6d:0c:b5:03:ac:d0:ad:0f:05:ac:53:
aa:07:ec:c6:b7:79:54:86:8a:02:9d:bd:f1:38:6e:6e:fd:6f:
2c:8e:86:9e:ad:ea:72:61:a6:54:30:f8:00:69:68:b4:0d:44:
8a:29:65:35:5a:12:13:52:32:d1:4a:46:18:c6:58:55:28:30:
ac:4f:dc:e3:71:36:95:9f:87:f1:a2:cc:ed:e6:75:de:16:96:
f4:68:b1:e7:85:92:78:ec:e0:b1:9c:04:79:ac:ff:64:5e:56:
53:29:0a:2e:2a:01:3b:e1:04:1a:a8:36:1d:b6:7e:0e:2d:39:
ba:8c:8c:1b:92:41:46:6e:7c:98:cf:03:9b:a1:61:44:43:fb:
81:ca:4e:de:5b:81:70:59:3c:5b:ca:84:bf:53:70:6b:7d:da:
8c:f0:a0:a7:35:9a:d3:bc:8c:e4:40:0b:89:7f:ac:c8:46:f2:
4e:24:9a:53:36:fa:51:78:60:40:b4:68:b6:86:85:3b:20:56:
36:99:5d:a5:85:d8:18:c9:89:6f:ee:d8:02:c1:7f:71:b7:8a:
f2:5b:b3:89:80:7a:24:de:18:7f:b0:58:50:87:27:f1:7d:28:
97:da:8d:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF
NEQyREIyMkYwHhcNMjYwOTA1MDAxNTIxWhcNMjYwOTEyMDAxNTIxWjAYMRYwFAYD
VQQDEw02YTliNWYxOS04NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx78CctKtH9Cv4MH5OymuC3WiFaJZvzunbtrtIG870P9B4V53yM4mogRqrABq
nP1pnDn/h3w5Agfb81IoyfohsxjNYhltOYxszBq4GdR5KZgsPVC6fXQ8k8QGAxyr
o3Vn/hV5HgK1I7UR/cFFk3S5oTxbk98nu9zh/g6x5OqgAzB30kdsKetL6oPIZS5a
w8UxD/i2iWsfRzSN9dM+dtYZDCrhhMvF9W0QgBYLqMxy/h8I/9j5gsbJmtLhODyA
d+MZ7R+Xlh/Xk+0YgknPL0CAjjlHdxUSAJESr3/d5nNMZfOQPItlZya6Ro7ZpNZi
Nzk1WdxlsWCsZEsQbirN6jxm/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHfRSkW
KKvA+tQI+5A5RP7TR1vxMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1
ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTJDQy9BRjY3NjVGQ0U1ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3
MFdxMVpvM2RNeEhrMHRzaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHzvLAb9mbHdCRN16W3mJqPqrF2yx2KYZoG0MtQOs0K0PBaxTqgfsxrd5VIaK
Ap298Thubv1vLI6Gnq3qcmGmVDD4AGlotA1EiillNVoSE1Iy0UpGGMZYVSgwrE/c
43E2lZ+H8aLM7eZ13haW9Gix54WSeOzgsZwEeaz/ZF5WUykKLioBO+EEGqg2HbZ+
Di05uoyMG5JBRm58mM8Dm6FhREP7gcpO3luBcFk8W8qEv1Nwa33ajPCgpzWa07yM
5EALiX+syEbyTiSaUzb6UXhgQLRotoaFOyBWNpldpYXYGMmJb+7YAsF/cbeK8luz
iYB6JN4Yf7BYUIcn8X0ol9qNkg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:34:53 2026 by rpki-client