
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier: zI53lAV/zRRA+KmD9ZiJ67t9zKDy+jPQH20BWTJpPr0=
Subject key identifier: D0:3B:7F:B4:73:00:6A:77:E1:A7:98:5E:5A:35:2D:84:6B:36:6E:EC
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial: 0507
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number: 0500
Signing time: Wed 20 May 2026 23:45:43 +0000
Manifest this update: Wed 20 May 2026 23:45:43 +0000
Manifest next update: Wed 27 May 2026 23:45:43 +0000
Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: 9gE9tWGrXc5qi6P/+vqBGZjEzHiApnq8ZNyIpAvea10=)
2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: cud5ZYppqVgYBIjkpiC3yJU+yvRz4SnHLnsmET8Y4GA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287 (0x507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Validity
Not Before: May 20 23:45:43 2026 GMT
Not After : May 27 23:45:43 2026 GMT
Subject: CN=6a0e47a7-6de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:eb:3e:0e:ae:a8:89:bf:11:87:a9:97:2c:
69:8d:78:40:c8:52:b5:41:a9:83:37:65:78:f4:92:
68:b2:3a:81:f4:d5:9c:d0:4e:0e:d8:a7:de:36:a6:
11:bb:4c:bd:ec:6b:98:d6:20:94:18:03:46:05:d4:
5f:e2:64:e0:16:c7:9f:f7:d9:c9:ff:33:ff:4a:32:
53:9f:e5:58:24:ab:5a:0a:72:56:58:8d:50:76:6d:
94:e4:0c:73:30:b4:7b:9c:29:a9:43:77:01:48:8f:
be:bd:e4:70:34:98:34:6f:ec:36:40:8a:5a:6b:f5:
fc:c2:93:91:5a:92:4a:02:0e:e2:95:94:9d:93:22:
75:5c:1f:ab:61:b7:03:5e:cd:79:35:f8:37:0d:19:
24:c7:e0:b9:39:d1:49:a1:a1:6f:15:46:76:c0:66:
09:18:a1:5a:2d:48:e2:35:a4:78:5c:5c:93:b4:81:
4f:e5:d6:09:c2:26:f9:00:22:d4:8a:6e:c2:a9:74:
0b:a2:6e:94:08:72:83:19:c4:02:98:2e:8e:63:8b:
fe:aa:0e:eb:cd:31:3e:dd:77:ca:b5:d4:4d:36:20:
fe:3a:97:3c:c6:d2:f5:1e:b8:92:36:98:73:75:a2:
b1:a5:11:2c:c8:7c:42:2b:55:e1:28:c9:30:29:aa:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3B:7F:B4:73:00:6A:77:E1:A7:98:5E:5A:35:2D:84:6B:36:6E:EC
X509v3 Authority Key Identifier:
keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:25:a4:b3:ce:29:63:07:b8:0a:0b:f1:af:75:b0:a8:c2:b5:
14:5a:17:7a:e0:ed:70:35:63:6f:c8:99:24:33:0f:11:c0:ce:
52:33:98:f5:7a:46:18:c6:ea:bb:e1:08:1d:91:31:62:a2:f5:
98:eb:5c:d7:20:29:2a:2e:d7:fd:40:2a:e9:e6:6c:4c:c3:8b:
f4:2c:4d:9d:1b:50:45:cc:78:88:f4:57:0f:f9:cb:c6:5c:be:
e6:ee:28:df:41:4e:d2:6d:06:7f:77:8a:90:3a:8f:50:72:3b:
2b:2c:75:eb:f2:4c:a2:ec:75:9a:69:1b:a1:5b:70:9b:10:b7:
04:76:64:17:41:f1:74:25:88:62:1e:03:dd:7b:11:86:59:ae:
fe:d2:dd:78:12:c5:76:77:3a:3a:17:fe:7c:ea:3e:38:02:da:
9b:91:7f:e2:6c:ea:b2:c0:b1:7e:60:62:b1:02:98:bf:f4:88:
d5:8d:e0:1e:6a:60:02:3b:a3:f2:58:02:7b:ff:0d:08:8c:43:
2e:84:60:2f:cf:ea:78:15:30:df:bf:71:64:93:b1:4b:8b:7c:
21:15:e0:32:ed:20:0d:81:07:fa:e1:ca:c0:45:0d:eb:ee:c1:
68:f2:b4:1e:11:0f:e9:bc:a1:90:4a:b5:61:f4:90:87:97:13:
ab:a0:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:15 2026 by rpki-client