
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier: FiQJ/0BVOuUIp+HGNvqu+EYa4l7hwOtGjbp7c0HWvr0=
Subject key identifier: B9:EB:F6:F6:1A:F2:C1:40:72:0E:AB:C0:1C:E2:F5:0A:2F:B0:13:52
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number: 0183
Signing time: Sun 05 Apr 2026 04:03:22 +0000
Manifest this update: Sun 05 Apr 2026 04:03:21 +0000
Manifest next update: Sun 12 Apr 2026 04:03:21 +0000
Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: lFJ71BRAETUFEJC/fLTaSP/0/nDGQObM1uWqyCyJkA8=)
2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Validity
Not Before: Apr 5 04:03:21 2026 GMT
Not After : Apr 12 04:03:21 2026 GMT
Subject: CN=69d1df09-ff30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:ff:b9:f4:df:f2:cb:20:9f:85:16:04:67:
d1:b5:f7:01:58:49:73:9c:41:14:1b:ee:4b:bc:e6:
ee:fa:72:0a:05:6c:89:c4:69:90:e7:a3:09:d2:3d:
d3:99:9e:f3:88:00:86:00:a8:bf:1c:8f:1f:d0:62:
db:52:18:46:4b:e5:59:83:5d:52:6b:b5:c2:98:c0:
bf:a2:3f:84:4e:6c:98:15:2f:77:43:d2:23:94:b8:
78:b2:8a:a4:e5:49:69:86:58:66:a7:d4:b2:3f:c1:
fc:0a:7a:88:4a:63:27:af:2b:4a:f5:74:12:4d:9f:
8b:83:d6:34:e4:f5:17:cd:f9:4b:3f:69:6d:3b:de:
db:6d:33:1d:a7:ee:1b:e2:28:70:d5:e8:dd:16:51:
12:d5:d3:fb:a9:82:be:35:02:1c:de:7c:8b:2c:b5:
c2:38:3b:b9:78:c7:6a:70:9d:ce:55:15:70:86:2c:
42:24:bf:33:b7:6b:c9:f0:65:53:23:00:b6:06:5a:
8a:9e:12:2c:2f:61:99:9b:b9:1d:5d:f4:d2:6e:70:
bd:75:71:2c:03:5b:75:9e:08:ce:43:13:99:b3:bf:
33:f1:6a:2e:e3:8c:df:fd:51:44:19:14:49:bc:35:
9f:4a:e2:b2:40:2e:ba:6d:10:10:1b:03:16:8c:58:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:F6:F6:1A:F2:C1:40:72:0E:AB:C0:1C:E2:F5:0A:2F:B0:13:52
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:71:23:d6:7f:76:1f:d3:c3:24:fd:ee:10:b4:fb:d5:f9:f6:
16:13:50:11:8f:28:0c:21:7a:1d:ab:fb:20:9c:a7:2d:3b:6d:
0c:53:c5:08:4b:dc:2a:26:5e:c0:5a:65:48:55:67:de:74:87:
dc:22:f8:62:5c:8f:ba:bf:21:26:f4:75:b6:12:e0:51:80:2d:
b3:8f:89:6b:15:0a:78:83:8f:51:f2:f1:e0:2f:8a:28:b9:db:
b6:12:df:1b:6c:52:bc:b2:70:28:94:ef:62:1b:11:75:2d:60:
dc:7d:61:79:69:31:c5:c2:5f:23:25:ba:f9:fe:49:90:30:29:
cc:8a:53:b5:ad:74:0b:5e:76:bf:51:92:ac:57:d5:f0:d1:1b:
61:d5:cf:e0:8d:c2:00:85:0a:5a:b5:d1:31:41:10:a7:15:77:
05:83:d3:fa:be:6e:8b:4e:e9:d7:87:23:ec:9e:4e:3a:e3:4e:
7b:f3:81:3b:1c:29:40:65:ee:98:a2:b5:f8:29:96:54:23:25:
3f:7e:56:04:d3:40:fe:60:3e:a9:72:38:7d:5f:92:37:d3:e6:
e3:47:d4:de:2f:43:d2:3e:ea:08:99:05:17:4f:38:9c:4d:a8:
82:6e:3d:1b:00:15:16:86:0a:92:5d:d9:5e:1b:19:83:5a:3c:
7a:ce:56:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD
MjBBRTUzODYwHhcNMjYwNDA1MDQwMzIxWhcNMjYwNDEyMDQwMzIxWjAYMRYwFAYD
VQQDEw02OWQxZGYwOS1mZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxav/ufTf8ssgn4UWBGfRtfcBWElznEEUG+5LvObu+nIKBWyJxGmQ56MJ0j3T
mZ7ziACGAKi/HI8f0GLbUhhGS+VZg11Sa7XCmMC/oj+ETmyYFS93Q9IjlLh4soqk
5Ulphlhmp9SyP8H8CnqISmMnrytK9XQSTZ+Lg9Y05PUXzflLP2ltO97bbTMdp+4b
4ihw1ejdFlES1dP7qYK+NQIc3nyLLLXCODu5eMdqcJ3OVRVwhixCJL8zt2vJ8GVT
IwC2BlqKnhIsL2GZm7kdXfTSbnC9dXEsA1t1ngjOQxOZs78z8Wou44zf/VFEGRRJ
vDWfSuKyQC66bRAQGwMWjFi02QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnr9vYa
8sFAcg6rwBzi9QovsBNSMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4
RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN
U1R5S19INkcxbW5DQ3VVNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKHEj1n92H9PDJP3uELT71fn2FhNQEY8oDCF6Hav7IJynLTttDFPFCEvcKiZe
wFplSFVn3nSH3CL4YlyPur8hJvR1thLgUYAts4+JaxUKeIOPUfLx4C+KKLnbthLf
G2xSvLJwKJTvYhsRdS1g3H1heWkxxcJfIyW6+f5JkDApzIpTta10C152v1GSrFfV
8NEbYdXP4I3CAIUKWrXRMUEQpxV3BYPT+r5ui07p14cj7J5OOuNOe/OBOxwpQGXu
mKK1+CmWVCMlP35WBNNA/mA+qXI4fV+SN9Pm40fU3i9D0j7qCJkFF084nE2ogm49
GwAVFoYKkl3ZXhsZg1o8es5WJw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:35 2026 by rpki-client