
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
File: eB0SmZv3o5TzJwDiDfeT0pnue5s.mft (raw, json)
Hash identifier: T//y2Y1tsdH5SS/Zhj5122IlCzNIPNM7xhX/xLaB6is=
Subject key identifier: 28:51:ED:E5:41:26:44:9F:C9:54:41:9B:94:E3:E0:83:11:AB:B0:55
Authority key identifier: 78:1D:12:99:9B:F7:A3:94:F3:27:00:E2:0D:F7:93:D2:99:EE:7B:9B
Certificate issuer: /CN=A917888C/serialNumber=781D12999BF7A394F32700E20DF793D299EE7B9B
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
Manifest number: 1D
Signing time: Sat 03 Oct 2026 09:40:48 +0000
Manifest this update: Sat 03 Oct 2026 09:40:48 +0000
Manifest next update: Sat 10 Oct 2026 09:40:48 +0000
Files and hashes: 1: eB0SmZv3o5TzJwDiDfeT0pnue5s.crl (hash: a2AjTLfbLhkE2qd7Oiivkty/gkxRRlmzHYLXUGq4gFk=)
2: ED0AC7FC964111F18E87E5C86A11F970.roa (hash: AAYjKSflpmaeoHCKiG2/Vm/Fie3Vm1Aa98S67N1BkTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.crl
rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917888C, serialNumber=781D12999BF7A394F32700E20DF793D299EE7B9B
Validity
Not Before: Oct 3 09:40:48 2026 GMT
Not After : Oct 10 09:40:48 2026 GMT
Subject: CN=6ac0cda0-a614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:74:a2:bb:2a:25:f4:0f:52:7b:e3:be:3d:
a5:17:66:56:7c:80:55:eb:f0:95:12:08:17:b0:11:
95:b2:b0:83:0e:c6:3b:66:a8:cb:c6:9b:4f:ee:d3:
9c:3f:21:69:42:10:34:64:dd:81:3d:97:3b:5f:b2:
d9:c6:ac:e9:42:10:d8:9a:ed:f8:db:f6:74:07:70:
60:03:f0:02:d8:18:1b:0e:d9:c0:65:18:bd:61:65:
33:75:41:d4:41:98:f4:36:b3:6a:c0:45:c4:f9:37:
e3:c5:f1:e5:c3:0a:23:17:18:1f:37:51:20:12:9c:
51:ca:70:55:f7:ac:fd:d6:64:42:47:33:f4:aa:18:
aa:ee:b2:92:a2:a0:6a:98:8d:e8:b5:86:c6:da:63:
0e:9c:56:3c:13:fa:91:03:a7:bb:c5:ec:3c:ce:9b:
4a:13:34:98:93:f1:ce:8f:29:2c:b1:3f:c9:e9:8a:
9e:e0:38:12:2f:0d:96:ca:f4:29:46:ab:74:e0:04:
70:2a:7a:6f:7b:78:08:43:e4:d3:d9:24:71:30:4a:
31:00:e2:09:82:3c:e8:06:57:df:c1:7d:72:a7:53:
88:16:c2:3b:b5:84:19:22:38:77:a6:bf:43:f8:59:
81:a6:1e:39:a7:8b:0d:63:7f:9d:23:e1:a9:4e:0e:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:ED:E5:41:26:44:9F:C9:54:41:9B:94:E3:E0:83:11:AB:B0:55
X509v3 Authority Key Identifier:
keyid:78:1D:12:99:9B:F7:A3:94:F3:27:00:E2:0D:F7:93:D2:99:EE:7B:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a3:0b:6d:e4:e4:ee:1f:cf:d1:ed:87:fb:54:d3:9c:ff:60:
2d:7b:9e:59:66:c5:f5:68:24:aa:8c:79:c7:23:c4:f0:5b:37:
7e:d9:69:e0:7a:6d:97:a9:81:88:e3:c5:46:ce:8c:20:67:c9:
08:91:9d:2f:0b:7e:ee:69:f8:7e:1a:d6:01:98:2a:23:ec:c1:
96:91:92:9c:4e:b3:25:be:fd:4a:8b:d1:02:80:7b:ca:78:b5:
0a:28:fe:69:8e:c1:c9:63:9c:db:a1:66:76:a5:a1:24:b1:57:
80:a2:da:1e:df:17:b2:99:2d:fe:cd:a6:12:6e:cb:57:46:41:
a6:01:d9:a4:65:a1:c8:89:a1:95:9e:7d:04:6f:0f:2d:f4:86:
d9:82:17:54:dd:e2:7c:de:b1:c2:25:3f:27:3d:ea:61:c8:5f:
1f:83:28:88:ba:76:d4:96:36:40:bb:18:56:a4:e5:f0:50:48:
17:83:14:e7:90:cd:42:95:82:49:d8:af:a8:e3:60:e4:49:c1:
db:57:48:ea:23:47:8b:91:14:c7:71:1d:7f:7f:88:63:fc:2c:
cc:6b:fa:af:31:77:ae:b3:52:ce:23:0a:6d:32:51:f3:56:e7:
50:55:1d:dc:4b:50:2a:42:09:48:b9:56:81:ab:9f:8b:9d:b4:
f8:03:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:11 2026 by rpki-client