
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier: fWJt7iz3ObJjp7MPlX8+Efi3HqTzS+Zj2C6cPZG+Gsg=
Subject key identifier: D2:B5:B6:70:BB:5A:C8:75:F3:05:FF:34:A5:05:36:E4:3C:57:B9:EB
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number: 0870
Signing time: Sat 31 Oct 2026 23:06:38 +0000
Manifest this update: Sat 31 Oct 2026 23:06:38 +0000
Manifest next update: Sat 07 Nov 2026 23:06:38 +0000
Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: 6bILdyJpRGH2n85wWWErhYilFyNBMBjm+TXa0QWK83o=)
2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: 5GjTNJmRyuym9Vk2w+VFTLpCECbH6Iwjcf4wp0xQSoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 23:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Validity
Not Before: Oct 31 23:06:38 2026 GMT
Not After : Nov 7 23:06:38 2026 GMT
Subject: CN=6ae6747e-1c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:d4:81:05:77:1d:33:6c:ad:37:9d:2c:b0:
d8:1f:f6:83:48:0d:2c:5c:99:2e:13:08:67:db:41:
33:a4:b3:1e:e1:40:be:64:81:8b:16:80:4e:b4:d3:
a4:a1:45:c0:33:ba:4a:b8:ab:50:05:2c:10:ba:00:
8f:b9:f4:aa:a4:48:07:a1:02:99:45:54:f7:47:17:
8a:c5:70:a0:36:7e:4e:df:b2:60:54:64:36:2a:4f:
cb:23:d8:57:41:4e:98:21:5f:5f:d0:5d:9d:1c:8c:
5e:77:7b:39:9e:61:18:ac:bf:1f:e9:32:48:3b:c0:
e8:1f:cc:2e:b1:6c:2b:53:fa:89:da:f2:6d:ee:7e:
91:4a:da:62:ba:1d:07:e5:ae:9c:72:2b:5c:06:c1:
c7:6e:0c:97:5f:af:ea:e2:22:a3:dd:2d:61:05:8a:
87:a5:e0:42:22:e9:cb:b4:f7:4b:20:f3:20:b0:95:
40:ec:a8:15:39:e7:be:31:dd:77:f8:63:22:bf:d7:
8d:1a:49:10:f1:8b:a8:f2:2f:48:94:90:0c:26:a8:
3f:68:ae:6e:34:d8:ce:e3:08:d0:87:0e:99:e3:c1:
27:b3:91:59:2b:11:f3:31:b4:13:12:a9:99:ec:8c:
45:f5:b6:7e:77:9e:92:ff:ae:b0:56:ec:5b:02:4a:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:B6:70:BB:5A:C8:75:F3:05:FF:34:A5:05:36:E4:3C:57:B9:EB
X509v3 Authority Key Identifier:
keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:9d:4c:fe:34:d1:24:8e:b3:81:ad:17:64:91:17:d1:c9:72:
dc:75:34:f4:27:5c:23:3f:db:31:93:a2:03:db:2c:28:98:f6:
7d:f7:b0:5c:38:c8:68:59:b3:91:b2:6c:20:6c:fc:3c:2b:60:
a2:8d:33:ad:d4:b5:36:02:f0:d3:24:5d:b9:fc:12:35:32:d0:
e6:67:ee:9f:23:48:d9:79:34:0f:61:1d:67:07:c3:88:38:ab:
9e:4d:b5:97:77:33:f3:b5:fc:ef:73:07:ad:f2:1e:73:2f:99:
b8:77:80:ac:3f:44:6f:75:26:9f:40:c1:b3:02:b1:45:4e:b8:
c0:40:ad:db:9f:70:9e:ce:9d:11:8a:12:c5:5f:27:43:62:46:
75:ad:a8:34:81:b6:61:14:a2:b7:64:fd:5d:da:3e:98:dc:53:
f9:73:a0:2b:50:2a:4c:06:26:c7:61:de:2e:10:51:bc:9e:76:
3d:7c:54:ad:c1:8b:11:da:6a:3d:af:96:78:5c:20:cb:cf:88:
81:81:2d:7b:de:19:e3:1e:ed:1b:27:fb:54:42:2d:89:48:75:
c5:71:a4:a0:9f:2a:3e:ae:81:43:ae:ba:da:14:cf:5d:03:e9:
d4:68:49:f4:de:b9:03:3a:f7:f6:69:9c:c3:72:45:90:0a:47:
bd:2a:c5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:33:03 2026 by rpki-client