
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File: EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier: xCWFTdeSm5WdYeBZefpZ6wQ453B53xTX3VlJR/E6AZ0=
Subject key identifier: 38:F6:71:BB:16:76:2F:17:27:9E:BE:24:76:8B:58:83:C0:9B:4F:38
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer: /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial: 31
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number: 30
Signing time: Thu 03 Sep 2026 08:53:35 +0000
Manifest this update: Thu 03 Sep 2026 08:53:35 +0000
Manifest next update: Thu 10 Sep 2026 08:53:35 +0000
Files and hashes: 1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: RsQKFluF4WPUL1T55hQlSiYlWLtN+wmigm6i91A5sJg=)
2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Validity
Not Before: Sep 3 08:53:35 2026 GMT
Not After : Sep 10 08:53:35 2026 GMT
Subject: CN=6a99358f-ba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:35:c7:16:88:0b:1e:3a:c9:48:47:8e:9d:
53:97:6d:db:a4:a8:bf:f2:fa:b0:e9:e1:bb:eb:8e:
77:38:ac:db:02:b8:a1:c1:4b:ef:9e:b0:97:5a:80:
05:2d:86:0a:76:aa:af:50:13:ee:66:83:f5:ae:c6:
8f:0e:60:84:af:59:c5:cb:c1:08:06:26:23:d3:d1:
04:31:53:7c:c0:1f:83:a9:7e:b4:99:a2:ce:47:5b:
b8:9a:bf:ad:73:ed:03:a6:50:0d:e0:ab:25:36:6d:
f9:cb:74:22:39:e8:b1:bd:34:c2:c4:6a:3f:57:9c:
94:7a:c3:94:9f:f5:46:8d:d5:d8:80:b5:92:c7:91:
27:32:fd:f5:e9:3e:65:1d:e1:6f:42:a2:89:12:ed:
56:d2:83:83:d4:7c:11:6d:6a:e7:fd:6c:66:f7:9c:
cd:dd:af:60:6d:24:05:a4:8c:8f:21:75:3d:89:36:
4d:97:c8:82:2f:79:ba:26:de:09:c0:6a:44:f3:d4:
87:9c:18:bb:93:f5:39:81:5d:b7:c0:25:04:f5:6b:
e5:be:99:78:31:55:8a:c1:67:4e:c1:e3:e6:93:ff:
35:84:67:52:ce:de:95:6b:76:75:73:fe:97:92:17:
91:df:4d:3a:de:11:71:de:8c:df:83:9b:66:9f:db:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:71:BB:16:76:2F:17:27:9E:BE:24:76:8B:58:83:C0:9B:4F:38
X509v3 Authority Key Identifier:
keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9e:db:e0:14:bd:c1:bb:81:14:2b:ab:2e:b8:59:e4:c3:96:
be:72:05:9f:14:1c:4c:fe:72:24:08:96:59:f8:ef:86:e0:05:
e7:cd:f9:63:75:ab:ac:b1:5d:7f:4d:27:0e:94:45:63:5d:b6:
f7:d8:58:5d:64:ad:f8:17:91:d3:76:68:62:44:08:a1:01:6c:
c0:5d:2e:a8:b8:ac:aa:90:14:ed:46:06:62:79:89:5b:af:8a:
f9:61:fd:b4:ec:ac:18:12:7b:6e:98:54:f4:69:31:2b:f0:9d:
b7:67:de:4f:d5:1c:1a:83:66:ab:ce:40:4c:3c:f2:fb:de:a4:
9a:7e:f3:6c:26:4d:25:9f:f9:3a:16:2b:e4:53:c5:e5:21:43:
f4:8a:34:82:7e:f4:a5:e5:0f:25:d9:f5:34:07:5d:0d:6c:07:
34:c6:11:0f:6b:55:b3:43:ec:7e:a7:e4:11:45:f9:dd:71:ab:
96:32:ab:b4:37:f5:aa:fa:85:39:c8:fe:c8:d4:5a:f6:6a:bd:
21:fd:e5:e5:0b:f2:7a:14:c3:0e:83:98:df:e4:23:59:7b:24:
6c:f6:70:a1:4b:49:79:c7:df:2f:31:fe:62:61:bb:50:77:c0:
92:bb:cd:c1:d0:e7:2a:b5:9b:76:46:5d:85:5d:0b:74:ed:b7:
a0:75:93:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:01:19 2026 by rpki-client