
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier: x6Aa6wFql7MZIOq0z5l96cFgc3r0sxTHBnNTAdEPDmc=
Subject key identifier: 29:EC:D3:00:5B:42:F7:C5:35:97:F7:08:92:A1:1A:CC:96:19:5F:9F
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number: 083C
Signing time: Thu 10 Sep 2026 22:34:21 +0000
Manifest this update: Thu 10 Sep 2026 22:34:20 +0000
Manifest next update: Thu 17 Sep 2026 22:34:20 +0000
Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: nZxWiKT44lvq7DXP7aKALxpjnncLU8gvvcIsjsctmJQ=)
2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: 5GjTNJmRyuym9Vk2w+VFTLpCECbH6Iwjcf4wp0xQSoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 22:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Validity
Not Before: Sep 10 22:34:20 2026 GMT
Not After : Sep 17 22:34:20 2026 GMT
Subject: CN=6aa3306c-3240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:e1:c1:f2:5c:e6:95:84:01:6f:a9:12:54:
62:60:b2:f2:ea:6f:06:11:49:97:c0:ba:89:7f:f7:
3a:55:4a:8f:d0:07:03:6c:02:a4:f9:74:51:3e:d4:
5b:62:8e:95:45:e6:57:fe:04:e7:ca:d1:43:8a:b4:
17:f7:c7:df:6f:22:7a:7c:bf:4f:10:a8:94:84:74:
10:0a:21:2f:45:c1:8f:0f:be:ce:30:bb:91:d2:1d:
91:8b:b6:af:09:35:ad:5c:c8:36:47:75:de:a9:03:
3a:f0:c3:84:3c:b0:b3:a3:12:c2:f1:cd:2c:68:55:
df:25:33:fa:b5:b3:13:e2:a2:e6:4b:ed:26:d6:c8:
e3:67:f4:45:2d:49:c9:16:4a:5f:bd:1c:b5:ed:00:
3a:50:13:28:e0:7c:a7:6b:4a:fb:54:ad:1e:5c:31:
61:36:48:15:a6:59:07:c8:cf:25:43:fd:e8:8b:91:
3e:35:f2:3c:68:c5:b9:e0:92:80:b2:cf:af:a9:49:
7a:80:9c:4f:52:5b:6b:c1:cf:e2:dd:ab:39:2a:01:
5e:a6:08:7e:2e:16:9c:66:a7:9f:37:3d:58:f7:02:
d0:71:ce:92:f4:5f:a0:07:fc:0d:c8:b6:de:ee:64:
c4:34:a0:52:b2:cd:4b:65:68:13:68:ba:15:b9:3f:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:D3:00:5B:42:F7:C5:35:97:F7:08:92:A1:1A:CC:96:19:5F:9F
X509v3 Authority Key Identifier:
keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:4d:0c:4c:f6:fc:1b:36:24:42:84:d5:75:1e:d0:c8:c5:
fd:76:54:70:e6:6d:4a:2c:61:21:6b:23:cd:b3:35:9a:dc:2c:
2a:83:cb:54:f6:c7:f1:1b:f8:67:ef:6e:32:a0:83:45:ac:49:
cc:39:51:ca:aa:84:b7:11:c7:17:e7:20:c4:13:e1:e0:d1:af:
02:c7:a0:a8:8c:b5:e9:a9:dc:98:55:14:c9:c7:1e:52:7a:1f:
63:36:4c:e0:69:57:6f:c7:7f:8b:15:29:45:90:7d:ab:4f:fd:
ea:c1:2b:6c:47:51:0f:87:31:fa:e4:0b:91:72:b2:f3:7d:bc:
cd:fa:2b:9d:bb:3d:27:2d:0c:f8:af:44:05:2a:30:06:20:5e:
a4:fd:82:de:f0:a7:88:17:23:69:c7:20:b4:7f:3a:45:f8:39:
94:53:18:e4:b8:8e:10:41:99:1c:54:37:76:1a:6b:64:a3:a2:
e7:ad:77:bc:b1:f2:d7:ff:fb:89:90:ac:0b:1a:13:39:5b:1b:
04:0f:34:ef:ee:2b:3b:25:00:af:70:a2:fa:3d:21:24:8d:4d:
19:4b:2f:b9:ce:35:20:f1:7d:57:44:73:21:2a:d9:78:2c:aa:
5b:e5:95:f4:f5:cb:28:81:bd:38:43:26:1d:49:48:8d:ee:ed:
af:59:6f:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz
M0UwMkMwMTkwHhcNMjYwOTEwMjIzNDIwWhcNMjYwOTE3MjIzNDIwWjAYMRYwFAYD
VQQDEw02YWEzMzA2Yy0zMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZnhwfJc5pWEAW+pElRiYLLy6m8GEUmXwLqJf/c6VUqP0AcDbAKk+XRRPtRb
Yo6VReZX/gTnytFDirQX98ffbyJ6fL9PEKiUhHQQCiEvRcGPD77OMLuR0h2Ri7av
CTWtXMg2R3XeqQM68MOEPLCzoxLC8c0saFXfJTP6tbMT4qLmS+0m1sjjZ/RFLUnJ
FkpfvRy17QA6UBMo4Hyna0r7VK0eXDFhNkgVplkHyM8lQ/3oi5E+NfI8aMW54JKA
ss+vqUl6gJxPUltrwc/i3as5KgFepgh+LhacZqefNz1Y9wLQcc6S9F+gB/wNyLbe
7mTENKBSss1LZWgTaLoVuT+9EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCns0wBb
QvfFNZf3CJKhGsyWGV+fMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF
MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu
cWZJYlRFLWd5R1l6NEN3QmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdI5NDEz2/Bs2JEKE1XUe0MjF/XZUcOZtSixhIWsjzbM1mtwsKoPLVPbH8Rv4
Z+9uMqCDRaxJzDlRyqqEtxHHF+cgxBPh4NGvAsegqIy16ancmFUUycceUnofYzZM
4GlXb8d/ixUpRZB9q0/96sErbEdRD4cx+uQLkXKy8328zfornbs9Jy0M+K9EBSow
BiBepP2C3vCniBcjaccgtH86Rfg5lFMY5LiOEEGZHFQ3dhprZKOi5613vLHy1//7
iZCsCxoTOVsbBA807+4rOyUAr3Ci+j0hJI1NGUsvuc41IPF9V0RzISrZeCyqW+WV
9PXLKIG9OEMmHUlIje7tr1lvDA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 16:27:10 2026 by rpki-client