
$ rpki-client -vvf rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
File: eB0SmZv3o5TzJwDiDfeT0pnue5s.mft (raw, json)
Hash identifier: bS9OM1XkoCPHi6jou8F3IHDUd3UtcTgNfOzJRCP+p98=
Subject key identifier: 68:51:E7:17:BD:7D:C2:4C:49:E7:2A:1D:B6:C3:33:29:90:DF:51:6B
Authority key identifier: 78:1D:12:99:9B:F7:A3:94:F3:27:00:E2:0D:F7:93:D2:99:EE:7B:9B
Certificate issuer: /CN=A917888C/serialNumber=781D12999BF7A394F32700E20DF793D299EE7B9B
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
Manifest number: 06
Signing time: Wed 19 Aug 2026 09:57:51 +0000
Manifest this update: Wed 19 Aug 2026 09:57:50 +0000
Manifest next update: Wed 26 Aug 2026 09:57:50 +0000
Files and hashes: 1: eB0SmZv3o5TzJwDiDfeT0pnue5s.crl (hash: w99LRqTHaGQXYIFyeJ6/8rjILUOHVNAXblrCStYcfXo=)
2: ED0AC7FC964111F18E87E5C86A11F970.roa (hash: AAYjKSflpmaeoHCKiG2/Vm/Fie3Vm1Aa98S67N1BkTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.crl
rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917888C, serialNumber=781D12999BF7A394F32700E20DF793D299EE7B9B
Validity
Not Before: Aug 19 09:57:50 2026 GMT
Not After : Aug 26 09:57:50 2026 GMT
Subject: CN=6a857e1f-aaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:3d:90:f7:64:7c:34:77:8f:d8:9d:17:99:
36:72:2b:c7:6c:47:d4:a3:42:94:84:64:86:14:3e:
58:ed:bd:f9:92:5e:ee:ed:da:3d:a7:ae:ae:ac:e5:
92:e7:24:ad:1b:9e:ff:5d:b0:de:09:42:89:78:f1:
00:eb:cf:d7:42:e0:6c:d9:ee:21:df:54:4d:18:ba:
a2:09:65:b2:19:d9:28:ca:c8:e0:6d:55:f2:04:57:
4c:05:2d:ea:ac:a4:83:cb:9d:1b:21:b7:82:bb:13:
57:4e:df:6d:5e:20:aa:e2:68:3f:0a:39:70:f5:81:
25:51:94:aa:08:9c:c8:52:39:60:28:03:20:42:14:
37:30:24:57:d5:08:f4:44:5b:ca:72:11:4e:01:20:
ad:a9:ed:f6:d2:ae:2a:66:6b:c0:51:96:14:79:5c:
2b:a0:14:56:76:7a:a8:cc:89:b2:c7:0a:a9:d1:dd:
d4:37:8d:09:a4:a5:fd:ca:08:96:41:ae:45:26:bb:
8e:a0:af:ce:dc:72:d8:8a:97:35:1e:61:a2:74:80:
d2:e5:1f:92:77:7b:c4:98:b4:da:fb:f3:71:63:83:
73:bc:d7:2f:b0:de:6b:d4:bd:61:e7:dc:82:8c:55:
8d:43:c0:55:06:ca:27:64:96:02:71:17:24:24:8d:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:E7:17:BD:7D:C2:4C:49:E7:2A:1D:B6:C3:33:29:90:DF:51:6B
X509v3 Authority Key Identifier:
keyid:78:1D:12:99:9B:F7:A3:94:F3:27:00:E2:0D:F7:93:D2:99:EE:7B:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eB0SmZv3o5TzJwDiDfeT0pnue5s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917888C/B5C85E12964111F19B0BA6916A11F970/eB0SmZv3o5TzJwDiDfeT0pnue5s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ac:05:d4:fc:2f:cb:be:a5:d3:30:af:93:40:dd:02:19:93:
75:07:0f:5d:de:cc:8b:ce:89:2c:9f:44:29:0f:ff:7d:99:69:
49:a1:e0:dc:c5:e6:62:e3:11:5d:a7:a6:06:f5:96:da:c5:37:
46:e7:16:76:35:a6:25:98:cf:d3:ac:3d:0b:e0:3a:12:32:25:
e8:0e:8e:64:76:d4:4e:0b:6c:46:ac:10:0c:e0:c0:3b:d8:a2:
38:10:08:44:b2:83:23:63:8a:4f:50:49:91:61:a0:17:24:f2:
f7:4f:a4:56:03:9b:0b:77:dc:4d:33:ac:7f:8b:e6:53:90:f8:
c9:f3:9f:73:67:cc:a1:15:03:f8:21:fb:da:5b:5a:63:37:97:
35:67:34:66:2d:4f:5f:b8:36:5f:d0:01:a4:de:2c:46:91:2a:
53:9a:f6:fd:12:e2:ab:bd:f7:f0:45:d3:87:09:7b:90:23:8a:
98:d5:da:11:4b:0b:70:78:ba:a6:0c:b6:41:8a:ef:b7:10:93:
df:bf:a4:cb:d1:73:c3:bb:a2:17:5b:eb:01:ce:d8:18:bb:45:
4e:16:46:81:95:5c:cd:90:ed:9b:33:c6:5f:38:1b:e3:44:de:
12:0b:2f:69:62:c5:5a:9f:8e:21:a7:3e:9e:50:86:96:88:cc:
09:ad:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:35 2026 by rpki-client