
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier: l+dYXY+4YjfV/ArJUmATUbXba1j5zBgGe7H97BMuj3o=
Subject key identifier: 15:F5:4E:7E:A4:FE:2A:9D:1A:7C:53:67:0F:52:25:B1:99:2F:FE:09
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1DE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number: 1DD7
Signing time: Wed 22 Jul 2026 16:11:11 +0000
Manifest this update: Wed 22 Jul 2026 16:11:10 +0000
Manifest next update: Wed 29 Jul 2026 16:11:10 +0000
Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: t0zZPVBlrImSB2Zemft/LJK2EPjfrzvJt103t/fwEkI=)
2: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: EH6q56ISDCHDpLM+gTINYlfYJSkWlD4ZZojPS20s3Yw=)
3: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: pnBR0xS0dQQ2SDLLqNdwnP0A7v24fxl8+oyuwqvoLV8=)
4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: f1TZSDO6dOE9en1CMS/wAFiLo9UGCV0vwp3Y9mMVLew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7657 (0x1de9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Jul 22 16:11:10 2026 GMT
Not After : Jul 29 16:11:10 2026 GMT
Subject: CN=6a60eb9f-87f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:c7:1a:2d:0e:4a:8d:11:69:cd:02:b6:61:
cf:9e:d5:f5:c0:c6:37:32:74:82:3a:90:ba:a9:27:
92:0e:95:ea:a8:44:5c:2f:bb:e9:a6:65:1d:7d:be:
cd:6f:c6:56:1d:67:48:0a:fa:49:8a:cd:f5:12:75:
69:c2:ed:70:7a:52:18:49:8c:8d:f4:f1:9f:4d:61:
84:4d:3e:81:e4:8e:6d:99:79:eb:ad:50:70:36:f7:
52:35:67:e0:66:66:37:64:e8:56:fd:68:6f:3d:03:
67:99:5e:d1:cd:07:b7:5b:50:8c:10:11:68:a7:87:
a7:8b:88:da:41:09:48:5a:4a:77:25:c1:64:06:88:
95:91:60:96:b0:c1:74:5a:0b:d5:1f:d8:98:86:81:
92:b1:65:02:bb:62:c2:6f:03:45:fb:e6:e4:1c:a6:
1f:79:bf:30:71:c5:91:30:af:23:28:4c:f0:06:57:
40:74:c3:14:e1:51:98:4d:6a:cd:a0:42:79:f6:60:
f6:2f:3c:79:f7:01:93:18:73:ec:3b:be:14:f0:34:
8c:91:77:1a:4b:1b:ed:7a:04:ce:6d:74:98:2a:55:
c6:72:df:28:5c:b8:8a:86:e5:06:39:b7:3a:b4:2e:
67:3e:d4:f6:e3:dc:f5:c3:e3:e8:eb:34:d0:4e:63:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:4E:7E:A4:FE:2A:9D:1A:7C:53:67:0F:52:25:B1:99:2F:FE:09
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:72:7d:4f:1c:02:41:08:ca:71:49:14:11:d5:0c:93:c3:44:
5e:12:77:9a:d4:ef:cc:98:80:f1:80:29:8a:8f:c6:ca:36:1b:
b9:1b:93:d9:c3:d4:32:0a:51:fa:1c:18:ac:ee:3e:74:fd:3f:
f4:71:af:1c:69:26:b0:ca:d5:84:d8:fb:90:2d:a4:b7:ce:cc:
c3:0e:79:7d:c6:4e:d2:63:43:d7:13:4b:8c:85:51:df:70:55:
b0:21:69:f6:c6:28:44:15:26:46:c6:23:a5:02:40:d1:d4:57:
68:2d:d6:38:5a:ed:1a:2c:62:43:bf:2b:8c:d2:2c:a2:a1:41:
1a:79:97:a1:4a:80:59:1f:38:98:73:f0:2d:5e:08:a1:26:1a:
15:f3:6d:a7:50:90:91:0f:9f:07:64:d4:89:a5:78:ae:4f:5f:
c7:c3:12:1a:38:d0:9d:23:f6:41:8e:6f:37:5e:11:c5:7d:57:
03:c1:3c:54:55:e9:5f:0f:a9:ce:db:1e:70:d7:b3:f0:0f:23:
f8:05:4b:7e:52:3a:7c:77:35:94:60:77:14:81:61:3c:3e:7a:
55:c3:bf:c5:14:4f:61:cb:3a:1a:75:26:c9:3e:c4:36:2a:f0:
74:3b:d7:54:1f:d5:00:9d:2e:7c:a6:c4:08:d9:9b:4f:1b:b5:
f7:6c:51:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:58:50 2026 by rpki-client