
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File: EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier: FE4XQMk2RguzCQWFqMUa+9Lz+F2HOeldjwoDQ7gBbug=
Subject key identifier: 01:0F:0F:0C:86:95:52:A8:5F:B4:C1:CA:92:68:4D:42:13:5E:D4:E0
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial: 056F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number: 0560
Signing time: Tue 22 Sep 2026 23:03:17 +0000
Manifest this update: Tue 22 Sep 2026 23:03:17 +0000
Manifest next update: Tue 29 Sep 2026 23:03:17 +0000
Files and hashes: 1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: fp8Jl8AqiUyo5JjEbFv5Z7WiINyzXJTsLUu4/XX+deU=)
2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: 5pzE/DEK+uZ2gUdloRUaMZ5/Ny9r+z2BlO/k/Ebfld8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1391 (0x56f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Validity
Not Before: Sep 22 23:03:17 2026 GMT
Not After : Sep 29 23:03:17 2026 GMT
Subject: CN=6ab30935-d591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:a9:b8:c1:fe:81:dc:ad:4d:ef:a1:52:bb:
5f:0c:4f:f3:0d:00:b6:ee:64:d8:87:31:33:c6:86:
bb:0c:61:58:1e:a5:24:50:8b:84:bb:04:af:01:0d:
35:52:be:ff:7f:d8:d2:bf:1f:4f:7a:96:c1:e2:d9:
77:45:0c:b1:0c:2a:da:75:1f:7e:5e:3e:23:2c:ca:
d7:b1:7a:00:54:85:50:e7:b6:64:24:1a:e1:76:ad:
34:64:88:e5:b2:91:3c:4c:fc:16:23:29:be:f4:3b:
d6:5b:db:10:14:ac:fa:56:d6:c9:67:ac:07:9e:64:
f9:14:b9:b7:5f:a4:f4:ab:06:e2:c6:d9:94:3c:1e:
ab:0f:b5:bf:bc:67:5e:ae:65:9a:c0:f9:4f:0a:33:
49:f3:e5:d3:3c:0c:24:4e:50:11:98:9e:6b:94:6d:
8c:39:52:00:98:e2:d0:0b:8a:a4:29:49:18:28:80:
95:0a:51:2e:05:b6:17:99:77:5f:66:f5:8d:72:43:
32:59:c2:78:3f:f0:ec:0d:0b:18:2b:9c:cc:23:f7:
43:e7:92:e3:a3:d4:3e:c1:97:01:b4:80:cb:47:4d:
d9:40:28:4c:a5:c8:47:6c:ed:0b:63:72:60:7c:a1:
54:33:c2:ce:ce:e7:4b:57:79:c3:b4:6b:1b:38:67:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0F:0F:0C:86:95:52:A8:5F:B4:C1:CA:92:68:4D:42:13:5E:D4:E0
X509v3 Authority Key Identifier:
keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e2:61:c0:77:05:99:ee:53:fe:6d:ca:3a:44:97:6a:55:b4:
87:24:ad:b6:71:0c:99:2d:e9:09:b1:28:86:b6:39:08:5e:3f:
13:8e:04:9d:8c:99:8a:de:44:65:9e:45:24:38:79:da:08:93:
cf:0e:bb:64:b4:d6:de:77:e2:51:5a:b0:1b:5f:b0:bd:c5:66:
b1:29:da:5b:87:68:80:e0:b6:6d:0a:13:91:ca:d2:92:80:3b:
ca:5c:68:a2:14:e8:36:70:b5:25:33:45:38:6c:d4:15:71:a9:
be:97:6a:e6:88:06:58:44:77:a5:89:87:ba:57:c2:c5:6b:37:
87:05:1a:9b:67:d3:1a:1d:ae:db:29:0a:06:15:25:5a:24:de:
f4:cc:ba:bf:c4:40:a1:a4:37:67:f1:d7:c4:fe:29:b4:30:e5:
6f:cd:d2:9c:e9:9e:d8:2a:f2:22:d7:55:d4:9c:87:38:76:d9:
00:e1:b2:7e:59:62:3d:b9:ba:9e:28:cb:8a:91:8e:5f:91:af:
aa:f6:ed:13:fe:4a:83:90:7f:bc:36:2d:a7:eb:ed:2e:8f:f9:
da:15:99:e5:f4:cf:9f:09:73:83:e5:ce:40:f9:f3:d6:1e:9c:
18:03:98:c2:bc:70:8f:67:49:c5:c1:ed:5d:7b:b9:47:45:59:
b0:66:ed:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:03 2026 by rpki-client