
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File: EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier: ckIJ3JPGuBW1+PQlC90K3wmDLLOoDaGO1PGsjA4sy7Q=
Subject key identifier: E1:F8:8D:55:A0:0B:16:2B:EC:81:CC:37:23:D5:7F:23:1F:F1:00:33
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer: /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number: 17
Signing time: Fri 17 Jul 2026 10:19:20 +0000
Manifest this update: Fri 17 Jul 2026 10:19:20 +0000
Manifest next update: Fri 24 Jul 2026 10:19:20 +0000
Files and hashes: 1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: l/+Ou12P5emvVBuq51ecPbYwusYvTfO17gPTDy+OC2o=)
2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Validity
Not Before: Jul 17 10:19:20 2026 GMT
Not After : Jul 24 10:19:20 2026 GMT
Subject: CN=6a5a01a8-1e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ac:ad:ea:dd:16:4c:c3:31:87:c3:e8:80:fa:
3b:70:d9:4d:4c:84:e4:5c:6b:1c:98:b7:76:47:15:
0e:c2:37:e9:c1:b7:88:8d:5b:d1:1c:02:05:39:9e:
39:4e:c3:bb:24:50:be:69:2c:46:2f:49:87:ce:a4:
55:41:95:6d:c3:7a:ec:21:9d:2e:f6:0b:70:87:e3:
1c:14:50:f4:74:ed:6a:3c:3c:6b:44:a1:0a:65:34:
b7:64:be:37:23:61:53:30:79:a4:b1:78:63:ac:1f:
ba:5f:53:e2:86:22:88:5e:3d:16:fe:da:5e:0f:6f:
f4:df:f6:5c:6c:84:d0:5f:50:1a:62:a2:83:7a:81:
4f:dd:9c:7f:78:0a:3a:a9:e6:a2:03:93:82:4a:4a:
f8:7f:7d:af:a1:8f:65:8d:4f:2d:c5:92:ab:19:5a:
88:dc:bb:60:da:fd:9b:f4:4e:2b:d7:a3:65:d9:53:
45:46:4d:bc:4b:39:68:45:38:92:1d:50:0a:0e:2d:
f8:27:03:cf:63:b7:a2:52:6c:c1:37:7c:80:e5:5a:
61:09:23:34:81:c3:cc:4c:14:e0:5e:7f:c7:d9:73:
92:af:bc:5c:eb:07:89:8b:f5:b0:e1:cc:b8:ea:83:
2c:a9:f6:d7:95:97:a5:01:e4:f6:97:7b:f2:5a:f6:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F8:8D:55:A0:0B:16:2B:EC:81:CC:37:23:D5:7F:23:1F:F1:00:33
X509v3 Authority Key Identifier:
keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:39:c7:d4:33:87:cf:a1:05:6d:00:39:45:c2:6b:9c:dd:0d:
2f:fb:23:c0:71:5d:2a:5d:06:f3:47:7b:bb:56:b1:38:91:07:
ed:e5:22:65:32:f2:c6:ce:12:15:cb:3f:96:d1:3b:18:b6:77:
46:a4:ca:a3:fd:76:77:e9:d8:26:50:da:8d:9c:46:24:26:7a:
c5:9b:28:ba:81:1d:97:92:fa:01:8d:e7:05:de:5d:a4:49:2a:
ab:6c:7b:00:f1:6d:8d:30:04:e1:5b:6a:b3:f3:be:58:02:ca:
f1:b1:f5:5c:91:fe:21:e7:7e:25:7b:86:ec:01:f3:56:fb:3e:
b1:29:b7:b0:19:b3:79:cd:32:04:b0:f6:f8:41:eb:af:2a:4c:
5b:f9:63:90:f1:a2:0d:8e:7d:79:13:03:c7:86:22:77:a2:90:
97:f8:26:e9:27:1a:5f:ad:e9:dd:07:69:46:35:b8:ae:3c:ac:
c1:86:e6:60:38:04:db:91:1d:d4:d5:94:a5:1a:af:fc:73:86:
fa:74:b1:88:bb:d3:7f:33:42:94:b4:bc:81:df:4c:08:75:11:
69:0a:2d:82:74:76:72:26:3b:b7:c8:a0:a8:d9:63:31:e2:d5:
f7:21:98:31:d6:89:66:bb:9a:0c:3a:c2:e2:60:0d:3b:55:fe:
15:34:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:37 2026 by rpki-client