
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File: EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier: 2ld0GNywM/2uYlvWMwZRGxtCDCt36IIQ9kpUVKAp4uc=
Subject key identifier: 16:56:8B:E5:D3:16:3B:78:B6:A3:21:E5:43:51:3C:B2:EA:DC:D9:35
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial: 054F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number: 0540
Signing time: Thu 23 Jul 2026 00:17:15 +0000
Manifest this update: Thu 23 Jul 2026 00:17:15 +0000
Manifest next update: Thu 30 Jul 2026 00:17:15 +0000
Files and hashes: 1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: h7eglB40LiAG8RBGqKd0JYcDXG67qzhepYDXE2ZqKUI=)
2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: 5pzE/DEK+uZ2gUdloRUaMZ5/Ny9r+z2BlO/k/Ebfld8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Validity
Not Before: Jul 23 00:17:15 2026 GMT
Not After : Jul 30 00:17:15 2026 GMT
Subject: CN=6a615d8b-b7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:e7:f4:c7:a0:49:0c:33:29:ae:e8:f0:2f:
10:8b:0a:04:31:8b:a3:29:a1:f0:57:3d:d9:89:aa:
9c:0f:f1:db:6f:02:b8:5a:bb:d2:43:7d:ec:4c:26:
c2:27:00:11:2e:84:bf:4e:a0:d8:0a:ca:76:1c:9a:
3d:57:db:70:3e:2c:16:5d:12:8d:fa:1b:78:e7:f9:
9b:54:17:e1:9a:91:49:b4:08:c4:e1:3c:83:13:86:
fc:82:54:f6:5a:05:aa:ed:c4:91:8d:cd:25:77:a3:
60:e0:b2:b3:bc:fc:b2:f1:78:28:ef:50:43:91:af:
c8:bd:c2:b8:1e:1a:fc:2f:1e:5e:7a:e9:bf:60:c2:
34:89:2b:59:e3:46:9d:63:33:1f:d5:b6:04:cc:d5:
e8:85:86:ca:09:f9:b4:e2:4f:fd:02:73:67:66:21:
c9:59:4e:23:c8:27:cb:fb:f5:ce:20:35:c4:80:5d:
dd:8c:4f:1f:8e:29:dc:93:4a:c1:c0:8b:df:d7:5c:
29:b2:fb:63:90:a6:46:15:d5:1a:15:98:a2:b3:7f:
77:04:8b:6f:d6:b9:eb:5f:ce:20:82:41:34:03:c3:
05:bc:be:07:06:8d:2b:23:22:fb:51:1a:42:f7:62:
56:43:15:3e:e2:7d:f2:3d:e2:5f:7b:06:90:93:44:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:56:8B:E5:D3:16:3B:78:B6:A3:21:E5:43:51:3C:B2:EA:DC:D9:35
X509v3 Authority Key Identifier:
keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e1:c6:a9:ff:28:81:6c:4d:4e:27:ad:37:5d:4e:24:75:29:
ff:da:62:01:ac:fa:b7:2e:ba:ca:bd:43:73:d7:65:d6:12:a0:
c9:10:03:23:38:3f:fe:5a:1a:74:c9:f1:28:60:77:a6:28:4a:
f7:58:e9:b0:4f:4c:8a:d9:32:04:11:20:6a:e9:38:f3:81:41:
fd:82:ad:2f:41:15:bf:69:43:07:1d:2d:b3:99:99:59:73:83:
5c:ce:5f:d2:a5:5f:8d:ca:95:17:16:78:f9:cc:b0:20:30:45:
2b:8d:58:5c:80:1c:27:a8:e1:69:e2:a1:3a:2b:64:8c:cd:b5:
80:f8:0c:a7:51:3d:1e:f9:bc:ca:9c:c1:f4:90:03:54:3d:06:
f6:b1:00:3c:86:04:d1:ec:c1:7c:b5:3e:43:00:cb:09:73:74:
e9:e7:1f:74:9d:78:6d:7f:8f:d6:66:57:0b:67:e8:3c:d2:12:
0c:34:ed:5b:0a:e7:e9:d5:3e:22:23:11:d6:7a:c4:52:07:0a:
db:9b:2c:e5:ba:0d:9e:0a:8d:3c:77:75:f9:bf:e3:24:07:6b:
49:d2:e3:e6:d3:8f:3d:00:c0:5c:5f:9e:dc:cd:61:c5:4f:90:
95:1f:14:7e:a4:6c:26:e5:0c:c5:1b:5a:5c:d8:b3:43:9a:ed:
38:7e:3b:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4MTcxMTAvBgNVBAUTKDEyOTRDNDhCQzY5NkFGRTgyMEJEMTU4MkYzNDM2N0JB
REFCMDI0MzIwHhcNMjYwNzIzMDAxNzE1WhcNMjYwNzMwMDAxNzE1WjAYMRYwFAYD
VQQDEw02YTYxNWQ4Yi1iN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0nbn9MegSQwzKa7o8C8QiwoEMYujKaHwVz3ZiaqcD/HbbwK4WrvSQ33sTCbC
JwARLoS/TqDYCsp2HJo9V9twPiwWXRKN+ht45/mbVBfhmpFJtAjE4TyDE4b8glT2
WgWq7cSRjc0ld6Ng4LKzvPyy8Xgo71BDka/IvcK4Hhr8Lx5eeum/YMI0iStZ40ad
YzMf1bYEzNXohYbKCfm04k/9AnNnZiHJWU4jyCfL+/XOIDXEgF3djE8fjinck0rB
wIvf11wpsvtjkKZGFdUaFZiis393BItv1rnrX84ggkE0A8MFvL4HBo0rIyL7URpC
92JWQxU+4n3yPeJfewaQk0SV8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZWi+XT
Fjt4tqMh5UNRPLLq3Nk1MB8GA1UdIwQYMBaAFBKUxIvGlq/oIL0VgvNDZ7rasCQy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgxNy8wNjgzRUI3MDRE
QUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3ItZ2d2UldDODBObnV0cXdK
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VwVEVpOGFXci1nZ3ZSV0M4ME5udXRxd0pESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzgxNy8wNjgzRUI3MDREQUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3It
Z2d2UldDODBObnV0cXdKREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxeHGqf8ogWxNTietN11OJHUp/9piAaz6ty66yr1Dc9dl1hKgyRADIzg//loa
dMnxKGB3pihK91jpsE9MitkyBBEgauk484FB/YKtL0EVv2lDBx0ts5mZWXODXM5f
0qVfjcqVFxZ4+cywIDBFK41YXIAcJ6jhaeKhOitkjM21gPgMp1E9Hvm8ypzB9JAD
VD0G9rEAPIYE0ezBfLU+QwDLCXN06ecfdJ14bX+P1mZXC2foPNISDDTtWwrn6dU+
IiMR1nrEUgcK25ss5boNngqNPHd1+b/jJAdrSdLj5tOPPQDAXF+e3M1hxU+QlR8U
fqRsJuUMxRtaXNizQ5rtOH47MA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:33 2026 by rpki-client