
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json)
Hash identifier: wMO7jlz9vFEPnrRXdnEeJjIb1eGNScgffAltIpIpzDA=
Subject key identifier: B5:4D:9D:A5:26:1C:12:C2:E7:77:61:F5:26:75:D3:C2:C7:6B:5C:BE
Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Certificate serial: 0497
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
Manifest number: 047E
Signing time: Thu 21 May 2026 00:10:33 +0000
Manifest this update: Thu 21 May 2026 00:10:32 +0000
Manifest next update: Thu 28 May 2026 00:10:32 +0000
Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: kuZ7CyVNo/5ymk7tO+2goatGsdltkXJW0Alp4m1q8KY=)
2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Validity
Not Before: May 21 00:10:32 2026 GMT
Not After : May 28 00:10:32 2026 GMT
Subject: CN=6a0e4d78-1dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:2b:d1:bb:c4:0d:ad:67:de:9e:a7:c3:72:
aa:ec:a9:78:2e:d0:ea:35:67:0d:9e:85:09:94:ef:
5f:38:e3:a9:83:b9:70:ad:cd:9f:bf:1a:9c:48:1f:
98:49:31:e0:1e:5d:d0:84:ff:c3:42:b6:b9:98:aa:
19:21:a8:b7:2a:16:c3:16:13:b4:1a:ad:f6:8a:65:
c0:9d:5f:3c:53:4b:a1:6a:14:13:e0:bf:07:04:db:
e5:06:15:57:71:d6:31:0a:1a:e0:1c:2c:a5:e2:3a:
eb:a4:3b:e6:9a:25:ff:85:a5:86:e9:b9:b2:d5:4e:
c7:20:ca:ec:0c:6b:65:61:44:11:bf:69:24:27:2f:
0f:64:8f:62:72:ee:43:2c:3b:4a:91:d3:b9:78:c9:
7e:f3:9d:66:0f:05:17:82:88:21:6d:df:bd:08:b4:
1a:24:c8:a7:8e:04:74:d0:86:7b:97:17:df:27:24:
d8:06:ef:40:2b:54:f2:fb:55:d5:1a:5c:2a:40:cb:
2d:5a:76:78:2c:4c:e9:43:02:d9:a0:b7:73:3f:73:
31:44:1c:c3:db:19:4c:9e:55:4a:0e:49:aa:3e:bd:
f8:b7:06:53:66:a5:8f:14:1f:bb:a0:45:cb:dd:d4:
a2:03:44:91:f9:ea:1b:9c:bf:3b:fb:d4:32:c3:96:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:9D:A5:26:1C:12:C2:E7:77:61:F5:26:75:D3:C2:C7:6B:5C:BE
X509v3 Authority Key Identifier:
keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b6:58:78:4c:9b:20:17:26:f1:3f:2c:da:5e:c0:50:40:01:
e1:b4:1b:f7:5b:9f:ed:2d:13:11:2e:9c:12:8c:f4:2d:41:67:
0f:17:a5:75:86:a0:a8:9d:df:2e:38:3a:5e:ed:77:5f:f3:1b:
61:15:71:23:fa:67:11:77:15:2e:4e:ab:13:0d:de:26:7b:51:
73:72:64:1e:9a:c7:17:c4:02:8f:82:e3:ac:68:35:af:de:ac:
2a:7c:54:ac:52:8b:bf:60:38:9a:e4:4f:f7:17:9a:b0:84:27:
dd:4c:c3:15:3d:17:b3:3f:e3:b2:73:e9:e9:f0:cb:1d:bb:15:
80:a2:bc:d0:dc:00:3e:25:83:e1:fd:38:02:4a:64:73:c6:63:
28:c4:2c:1c:84:27:81:0c:fd:c0:87:06:ba:22:0a:56:f4:dd:
33:34:f1:3a:41:45:a5:e7:a0:cd:10:24:b2:2c:3c:e7:f0:48:
75:55:96:0f:fe:76:ce:03:8f:fa:c9:49:3f:28:84:94:1c:3f:
26:7f:77:33:70:a6:06:d1:b7:5b:de:34:f0:80:e3:39:a4:55:
c7:65:84:65:5e:b8:97:68:24:01:73:b7:c0:d1:94:0f:16:03:
2f:09:d4:70:f2:08:0c:b3:27:c5:41:b9:2b:ec:66:32:f5:53:
0b:4b:bf:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD
NDY3NEVCQUEwHhcNMjYwNTIxMDAxMDMyWhcNMjYwNTI4MDAxMDMyWjAYMRYwFAYD
VQQDEw02YTBlNGQ3OC0xZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0YQr0bvEDa1n3p6nw3Kq7Kl4LtDqNWcNnoUJlO9fOOOpg7lwrc2fvxqcSB+Y
STHgHl3QhP/DQra5mKoZIai3KhbDFhO0Gq32imXAnV88U0uhahQT4L8HBNvlBhVX
cdYxChrgHCyl4jrrpDvmmiX/haWG6bmy1U7HIMrsDGtlYUQRv2kkJy8PZI9icu5D
LDtKkdO5eMl+851mDwUXgoghbd+9CLQaJMinjgR00IZ7lxffJyTYBu9AK1Ty+1XV
GlwqQMstWnZ4LEzpQwLZoLdzP3MxRBzD2xlMnlVKDkmqPr34twZTZqWPFB+7oEXL
3dSiA0SR+eobnL87+9Qyw5Y8uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVNnaUm
HBLC53dh9SZ108LHa1y+MB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG
MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn
aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAorZYeEybIBcm8T8s2l7AUEAB4bQb91uf7S0TES6cEoz0LUFnDxeldYagqJ3f
Ljg6Xu13X/MbYRVxI/pnEXcVLk6rEw3eJntRc3JkHprHF8QCj4LjrGg1r96sKnxU
rFKLv2A4muRP9xeasIQn3UzDFT0Xsz/jsnPp6fDLHbsVgKK80NwAPiWD4f04Akpk
c8ZjKMQsHIQngQz9wIcGuiIKVvTdMzTxOkFFpeegzRAksiw85/BIdVWWD/52zgOP
+slJPyiElBw/Jn93M3CmBtG3W9408IDjOaRVx2WEZV64l2gkAXO3wNGUDxYDLwnU
cPIIDLMnxUG5K+xmMvVTC0u/Lg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:18:00 2026 by rpki-client