
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File: EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier: lXshvlAjcozCPcV1QafttsQAsy1tkzfnfqxw2WxpjO4=
Subject key identifier: D6:99:D7:87:DB:07:7B:D0:BA:BE:90:41:FF:6E:33:DF:9B:49:7E:7E
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer: /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial: 03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number: 02
Signing time: Tue 02 Jun 2026 04:15:26 +0000
Manifest this update: Tue 02 Jun 2026 04:15:25 +0000
Manifest next update: Tue 09 Jun 2026 04:15:25 +0000
Files and hashes: 1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: qNPklklPYta+DJv9SnkK8S5egha+b6e1abAJdnQkX8A=)
2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 04:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Validity
Not Before: Jun 2 04:15:25 2026 GMT
Not After : Jun 9 04:15:25 2026 GMT
Subject: CN=6a1e58dd-b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:aa:3c:67:73:b5:5c:9d:2d:9c:15:49:4d:
da:53:00:df:2a:78:87:d8:26:9f:a0:33:17:bf:10:
f1:2c:ae:56:9f:d7:88:ee:cb:9d:5d:40:b5:f7:40:
0a:38:1a:99:23:5b:5f:13:53:41:e4:e6:fb:3d:f3:
fb:9b:90:ed:87:ba:d1:95:0e:23:52:5c:a4:5c:36:
df:1a:81:26:cd:0e:b1:4e:85:ce:4f:3b:7f:3f:01:
2d:f9:83:16:b3:ac:34:5e:53:a4:d1:c6:a8:30:63:
6e:5d:75:09:96:d7:06:31:5f:55:db:a0:70:b2:54:
f7:71:60:15:e8:17:3f:9a:e4:98:8f:69:c4:24:9e:
29:f5:71:ea:74:4b:ac:48:3e:ef:72:21:96:46:c9:
74:f6:1f:26:fa:d2:02:dd:5c:e7:fb:76:02:7a:97:
9c:0d:6d:93:fb:91:0d:98:98:24:fa:10:50:16:71:
a1:d0:0f:e7:18:1c:70:e6:3d:3f:c7:92:a6:c2:87:
06:d6:35:2e:f2:a4:72:8a:b4:98:a4:fb:45:1b:ab:
0c:3a:30:ed:0a:14:1a:d6:2d:8b:6f:5b:69:f4:2a:
01:82:7c:b3:ce:4d:48:af:20:2d:d2:7a:96:9b:b3:
28:cd:19:af:1b:bb:67:de:09:76:f5:62:3a:e1:47:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:D7:87:DB:07:7B:D0:BA:BE:90:41:FF:6E:33:DF:9B:49:7E:7E
X509v3 Authority Key Identifier:
keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:4a:df:9c:b3:bd:45:fd:64:7d:85:22:01:b8:59:48:39:
35:79:be:86:7d:bf:15:1e:58:e8:06:52:24:8f:fc:55:b0:44:
3e:5d:e3:8c:f1:36:34:6c:94:e1:d9:b0:1c:43:6b:a7:96:21:
0e:9b:de:ac:17:25:af:a8:4d:13:f0:52:21:c4:1f:a4:3e:c6:
81:6f:c4:45:54:87:d5:a2:2c:8d:71:d5:f4:7f:68:71:0a:e8:
5e:f7:13:5a:66:ac:80:fd:54:ce:42:16:ca:53:25:db:8a:19:
10:ea:df:99:a6:10:b1:42:7f:15:45:52:3c:3e:1e:da:24:67:
17:cd:9c:1a:19:9c:8d:15:7e:98:06:d7:f8:93:ac:d6:8f:5a:
d0:73:05:52:2a:f0:22:b1:46:3f:d1:27:15:61:fd:6c:bd:d0:
b7:f9:45:a6:10:72:34:0a:cf:fa:57:fd:42:22:26:e9:92:2b:
e2:69:33:68:7a:4d:8f:b4:1b:c8:68:65:80:1e:d5:5d:2f:d9:
d0:2f:78:0f:2a:c3:7e:fe:ed:48:23:f0:6d:5d:a5:9f:43:16:
f9:13:34:42:d9:f5:99:c4:0b:a9:2a:09:d1:ae:b2:8d:bc:9c:
8d:a7:fa:d1:b7:e7:5c:87:96:58:1b:6c:a8:3a:76:ad:56:0c:
6b:2c:00:1a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RkU2NDExMC8GA1UEBRMoMTA4QjcwQzU4NDZGOUQwNzU1QzVDNkRCOThERDI2Njg0
MEUwNUE2NTAeFw0yNjA2MDIwNDE1MjVaFw0yNjA2MDkwNDE1MjVaMBgxFjAUBgNV
BAMTDTZhMWU1OGRkLWI4MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8s6o8Z3O1XJ0tnBVJTdpTAN8qeIfYJp+gMxe/EPEsrlaf14juy51dQLX3QAo4
GpkjW18TU0Hk5vs98/ubkO2HutGVDiNSXKRcNt8agSbNDrFOhc5PO38/AS35gxaz
rDReU6TRxqgwY25ddQmW1wYxX1XboHCyVPdxYBXoFz+a5JiPacQknin1cep0S6xI
Pu9yIZZGyXT2Hyb60gLdXOf7dgJ6l5wNbZP7kQ2YmCT6EFAWcaHQD+cYHHDmPT/H
kqbChwbWNS7ypHKKtJik+0Ubqww6MO0KFBrWLYtvW2n0KgGCfLPOTUivIC3Sepab
syjNGa8bu2feCXb1YjrhR079AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1pnXh9sH
e9C6vpBB/24z35tJfn4wHwYDVR0jBBgwFoAUEItwxYRvnQdVxcbbmN0maEDgWmUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTY0LzBDRUFGNjgyNUUz
OTExRjFCMTA0OTlDRjAwN0FBQzIyL0VJdHd4WVJ2blFkVnhjYmJtTjBtYUVEZ1dt
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRUl0d3hZUnZuUWRWeGNiYm1OMG1hRURnV21VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG
RTY0LzBDRUFGNjgyNUUzOTExRjFCMTA0OTlDRjAwN0FBQzIyL0VJdHd4WVJ2blFk
VnhjYmJtTjBtYUVEZ1dtVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAQH0rfnLO9Rf1kfYUiAbhZSDk1eb6Gfb8VHljoBlIkj/xVsEQ+XeOM8TY0bJTh
2bAcQ2unliEOm96sFyWvqE0T8FIhxB+kPsaBb8RFVIfVoiyNcdX0f2hxCuhe9xNa
ZqyA/VTOQhbKUyXbihkQ6t+ZphCxQn8VRVI8Ph7aJGcXzZwaGZyNFX6YBtf4k6zW
j1rQcwVSKvAisUY/0ScVYf1svdC3+UWmEHI0Cs/6V/1CIibpkiviaTNoek2PtBvI
aGWAHtVdL9nQL3gPKsN+/u1II/BtXaWfQxb5EzRC2fWZxAupKgnRrrKNvJyNp/rR
t+dch5ZYG2yoOnatVgxrLAAa
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:42 2026 by rpki-client