
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier: 5lrVvh1ujwiqA2TrZjL4Ltz7VNjh1rU8h5dNnrquPVs=
Subject key identifier: ED:C3:8B:A0:4D:6A:EF:86:11:6B:B0:9C:0F:5C:D5:E3:BF:85:11:FB
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number: 01CF
Signing time: Thu 03 Sep 2026 03:55:27 +0000
Manifest this update: Thu 03 Sep 2026 03:55:27 +0000
Manifest next update: Thu 10 Sep 2026 03:55:27 +0000
Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: iPCCmmPm4UVtzeMAsq3r4kc/oJRoCHGX2NpsvHZDjDo=)
2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Validity
Not Before: Sep 3 03:55:27 2026 GMT
Not After : Sep 10 03:55:27 2026 GMT
Subject: CN=6a98efaf-f5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:15:e8:d0:1a:6a:12:f7:2e:dc:8b:01:ba:
35:8a:b3:60:a0:3d:43:4f:92:a0:74:cb:9a:7d:04:
f8:23:01:19:c3:09:80:07:88:a6:c5:5b:92:3f:e5:
49:f5:c0:ff:ec:bf:e3:4c:ae:4d:90:19:c6:4b:ba:
cb:7a:50:a0:3a:98:dd:a5:5c:8c:ed:d9:61:54:81:
b5:ff:cd:d3:da:a9:7d:a3:ce:e0:12:41:a7:eb:d1:
7d:05:aa:46:3e:4a:7c:b4:e2:3a:49:cd:b4:36:a4:
ba:56:0b:ef:dc:6d:be:8a:4b:6e:d4:f0:f1:bc:e4:
cc:a0:8d:14:af:3e:ef:d4:19:d6:9f:ce:b7:20:a6:
e3:bd:73:af:00:63:22:e2:a0:be:28:6e:94:2f:f9:
0e:66:ac:63:67:3e:ad:d6:9d:bc:f2:12:a8:b5:03:
27:85:2f:79:74:11:33:b3:6b:85:77:30:de:7d:d6:
ce:7e:3d:f2:be:cb:c5:29:3b:b3:ba:42:cb:f6:3d:
91:e0:8f:35:b9:b9:30:49:dc:25:af:50:f1:25:76:
0e:f5:bd:b2:65:a0:70:f4:b8:c4:2f:c0:ed:c7:31:
d9:18:5e:19:90:d7:cf:a5:93:81:c8:92:19:f8:34:
6f:55:7b:3a:36:eb:c5:a1:b7:c9:1b:92:83:d9:e3:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:8B:A0:4D:6A:EF:86:11:6B:B0:9C:0F:5C:D5:E3:BF:85:11:FB
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:05:f8:ec:b3:ed:82:8b:a7:90:b4:db:35:89:21:1f:15:50:
e7:31:67:12:01:75:77:35:b8:2a:11:f3:0c:67:94:3a:e5:14:
19:13:24:1c:af:1b:03:87:97:dc:eb:f1:51:bc:d8:d8:21:4c:
e5:9e:40:e4:9e:46:47:8d:80:8a:a1:5f:7a:dc:4d:ef:04:6b:
5e:9f:42:c4:47:cc:1c:6e:4c:d4:a1:ac:38:12:74:35:ca:e2:
3e:43:14:78:8c:df:e2:7e:70:eb:6d:bf:b9:c2:c9:e3:12:c5:
10:80:e6:b1:0b:21:9d:bf:49:a3:6c:6d:d2:f7:88:81:a4:4b:
1d:9a:25:5e:ab:1c:49:dc:5e:bc:2a:eb:e4:0a:09:41:ef:26:
d0:7e:d2:88:d9:a3:b9:1f:37:03:55:40:98:ee:68:e9:27:5a:
83:c5:80:2d:f0:e7:21:a4:15:a3:21:f2:bf:87:7d:b0:5a:5d:
df:8d:40:07:b2:a7:80:a2:d6:19:fc:fc:77:3a:b9:2f:bc:92:
fe:85:27:e7:e0:b1:5e:42:6a:4a:42:13:09:6a:1a:fb:e3:42:
ed:88:bf:2d:29:d7:9f:21:a0:1d:4d:4e:38:48:c5:09:92:31:
3a:ce:dc:a4:de:b5:7b:24:17:c6:36:74:a3:4d:a6:03:11:4f:
1a:9f:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:58:52 2026 by rpki-client