
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
File: etynHr4-GRMw4DyU0rT0_4mIRcU.mft (raw, json)
Hash identifier: LIz6ecAphM5kX5VuZCxMAU11PiJoSysGDPFyuzUEh2I=
Subject key identifier: 93:DB:6A:CE:DD:6D:CB:6C:EF:44:1B:21:DC:74:40:3B:9E:71:99:3F
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Certificate issuer: /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial: 086B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
Manifest number: 0853
Signing time: Thu 12 Mar 2026 20:26:01 +0000
Manifest this update: Thu 12 Mar 2026 20:26:00 +0000
Manifest next update: Thu 19 Mar 2026 20:26:00 +0000
Files and hashes: 1: etynHr4-GRMw4DyU0rT0_4mIRcU.crl (hash: MocoLgTGgx6CGkRt3XgmVD8UKu+TtAllgR0cdPA8UBg=)
2: 1296A2EEFA1B11EA94AA6082C4F9AE02.roa (hash: Bsn0ZHK1VOb//E1bnYWa8gJiN3NG+POP4XJgG0W3MpA=)
3: 86CDBD00FEB711EABA9B645CC4F9AE02.roa (hash: LMiGZrGdRef/gr8dnZSqVPcPkO5GIlA0gw9HVMBepsA=)
4: B7DF4CB0143711ECA137850DC4F9AE02.roa (hash: gs/VsOiCfQg70V+/s3SLyTkS+1XUJY7RhDq1hFkklMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 20:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F912, serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Validity
Not Before: Mar 12 20:26:00 2026 GMT
Not After : Mar 19 20:26:00 2026 GMT
Subject: CN=69b32159-0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:b0:50:a4:89:a1:8f:20:16:29:a4:62:76:
83:3e:df:af:fa:61:5a:2b:87:1d:8e:81:4f:77:32:
6d:59:5b:9e:a8:ac:7e:21:61:43:0d:e2:62:bd:4b:
ac:42:32:7d:7f:36:56:30:33:6f:b7:83:86:9f:f9:
9c:1e:83:31:8f:7c:b7:7e:9d:4c:9a:27:96:b7:fb:
b7:a0:26:c5:45:d5:bc:10:b4:33:97:7d:7e:a1:78:
92:5c:88:26:0a:3b:6a:48:c0:d8:4a:cf:9b:ff:58:
b3:ed:a1:4f:c5:de:0a:c4:9d:5f:22:33:d7:2f:78:
21:3c:05:79:49:7c:ef:22:2a:73:36:5f:fb:49:07:
22:09:41:a8:96:46:f0:70:46:e3:67:cf:fb:e8:82:
74:e8:b2:17:ba:6a:1f:d0:0d:fb:73:14:c9:b5:a7:
0b:05:53:fd:54:a0:b1:57:b5:67:ce:e3:c3:51:66:
6c:79:66:bf:ea:ef:db:68:22:3c:b4:35:ab:fc:78:
3f:1a:e0:35:8e:e5:1c:88:d1:62:59:62:2f:cf:f5:
f1:13:82:44:eb:ca:3a:4b:58:16:e9:cf:e3:d9:21:
01:e8:dd:0f:0d:90:f5:57:5f:6c:a7:c9:9c:8a:3e:
8f:36:3a:61:6e:c3:b8:c8:55:92:47:28:82:03:f1:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DB:6A:CE:DD:6D:CB:6C:EF:44:1B:21:DC:74:40:3B:9E:71:99:3F
X509v3 Authority Key Identifier:
keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:4f:17:d4:8d:b2:7a:40:49:01:47:b0:c2:83:7b:8c:96:
67:6d:0b:1f:3b:fd:71:98:57:be:7a:2f:2b:a5:b3:f6:cf:77:
e5:de:c7:66:90:e4:88:99:81:ef:b4:0b:77:3c:65:d6:1c:70:
d6:e1:26:57:fc:85:bc:a8:d3:7f:4e:fe:1a:6c:05:2c:e6:da:
c8:96:54:33:98:19:22:a0:0a:80:a1:67:b3:43:23:46:7a:9e:
f4:77:18:20:e4:a5:23:ea:c6:3c:fa:89:4d:cf:59:ff:11:60:
1c:bc:69:5d:a7:81:3f:db:2f:b4:c1:8d:49:83:36:c2:1e:31:
4b:9d:81:fd:a8:f4:97:e5:6e:7b:72:be:e2:a5:ef:22:6e:c2:
53:a7:ca:6b:51:9c:1b:7e:f5:25:85:a8:1f:14:f1:6f:1a:26:
e2:4b:80:0d:f4:df:40:5e:25:87:8d:40:27:aa:7f:af:2e:d4:
87:67:a0:66:71:80:dd:58:96:b1:74:d3:01:22:8a:03:3a:e8:
1a:d5:22:46:a1:57:50:3a:88:6b:55:74:d5:85:a6:51:0d:1b:
59:10:90:75:c1:34:90:71:be:4b:0c:a0:ed:90:51:cb:93:b8:
c1:78:13:86:cb:52:48:6f:31:a0:9b:56:57:1e:4f:77:c1:2f:
69:b6:79:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY5MTIxMTAvBgNVBAUTKDdBRENBNzFFQkUzRTE5MTMzMEUwM0M5NEQyQjRGNEZG
ODk4ODQ1QzUwHhcNMjYwMzEyMjAyNjAwWhcNMjYwMzE5MjAyNjAwWjAYMRYwFAYD
VQQDEw02OWIzMjE1OS0wMTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6I6wUKSJoY8gFimkYnaDPt+v+mFaK4cdjoFPdzJtWVueqKx+IWFDDeJivUus
QjJ9fzZWMDNvt4OGn/mcHoMxj3y3fp1MmieWt/u3oCbFRdW8ELQzl31+oXiSXIgm
CjtqSMDYSs+b/1iz7aFPxd4KxJ1fIjPXL3ghPAV5SXzvIipzNl/7SQciCUGolkbw
cEbjZ8/76IJ06LIXumof0A37cxTJtacLBVP9VKCxV7VnzuPDUWZseWa/6u/baCI8
tDWr/Hg/GuA1juUciNFiWWIvz/XxE4JE68o6S1gW6c/j2SEB6N0PDZD1V19sp8mc
ij6PNjphbsO4yFWSRyiCA/HbOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPbas7d
bcts70QbIdx0QDuecZk/MB8GA1UdIwQYMBaAFHrcpx6+PhkTMOA8lNK09P+JiEXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjkxMi8zRDhGMDY0NkZB
MTkxMUVBQjE3MDQ1ODBDNEY5QUUwMi9ldHluSHI0LUdSTXc0RHlVMHJUMF80bUlS
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V0eW5IcjQtR1JNdzREeVUwclQwXzRtSVJjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjkxMi8zRDhGMDY0NkZBMTkxMUVBQjE3MDQ1ODBDNEY5QUUwMi9ldHluSHI0LUdS
TXc0RHlVMHJUMF80bUlSY1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALhxPF9SNsnpASQFHsMKDe4yWZ20LHzv9cZhXvnovK6Wz9s935d7HZpDkiJmB
77QLdzxl1hxw1uEmV/yFvKjTf07+GmwFLObayJZUM5gZIqAKgKFns0MjRnqe9HcY
IOSlI+rGPPqJTc9Z/xFgHLxpXaeBP9svtMGNSYM2wh4xS52B/aj0l+Vue3K+4qXv
Im7CU6fKa1GcG371JYWoHxTxbxom4kuADfTfQF4lh41AJ6p/ry7Uh2egZnGA3ViW
sXTTASKKAzroGtUiRqFXUDqIa1V01YWmUQ0bWRCQdcE0kHG+Swyg7ZBRy5O4wXgT
hstSSG8xoJtWVx5Pd8EvabZ5SA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:58 2026 by rpki-client