
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.mft
File: EWbdVcFafHjcx9-JZmDZHgxN8-I.mft (raw, json)
Hash identifier: e1j9f6zwaPqwbki555nif7/sI4cviXiFn8X4Nwn+LCg=
Subject key identifier: 89:38:E1:41:7F:DB:F5:24:1B:5A:59:2A:67:CD:59:6B:F5:F8:83:63
Authority key identifier: 11:66:DD:55:C1:5A:7C:78:DC:C7:DF:89:66:60:D9:1E:0C:4D:F3:E2
Certificate issuer: /CN=A914878C/serialNumber=1166DD55C15A7C78DCC7DF896660D91E0C4DF3E2
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EWbdVcFafHjcx9-JZmDZHgxN8-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.mft
Manifest number: 03
Signing time: Sun 15 Nov 2026 09:25:02 +0000
Manifest this update: Sun 15 Nov 2026 09:25:01 +0000
Manifest next update: Sun 22 Nov 2026 09:25:01 +0000
Files and hashes: 1: EWbdVcFafHjcx9-JZmDZHgxN8-I.crl (hash: 6hrPpnSWixR0HBArd9Nk6bD7AZFn4qdmS4MfcK/y05k=)
2: 46732000DFFD11F1BBF900CE0766CEF9.roa (hash: rkb6XnMbzysQAmmX6k9eimodgmks9QaHu3Tuexd+dvA=)
3: 44BC7CFCDFFD11F1BBF900CE0766CEF9.roa (hash: k70XyeqswATAMnN87ySobcUL5kkxzJdxB1EGthqrjGA=)
4: 455ACC0EDFFD11F1BBF900CE0766CEF9.roa (hash: l/Ko7EmUgvHI6t7abJb70wQMrdfkNvZwbEW8beUsJYE=)
5: 46F093E6DFFD11F1BBF900CE0766CEF9.roa (hash: j6q+7Cp1J6VgPPEgLSq59I2FMpQhlJNoKhGwKIyOmBk=)
6: 45EAE082DFFD11F1BBF900CE0766CEF9.roa (hash: feUC68tKEdk3pXIHeXU3iulBrfmkZmsFCbcA5Qtr10g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.crl
rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EWbdVcFafHjcx9-JZmDZHgxN8-I.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 08:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914878C, serialNumber=1166DD55C15A7C78DCC7DF896660D91E0C4DF3E2
Validity
Not Before: Nov 15 09:25:01 2026 GMT
Not After : Nov 22 09:25:01 2026 GMT
Subject: CN=6af97a6e-0e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:23:32:ee:58:58:9d:b9:73:cc:09:0f:02:
b5:81:22:31:9f:a9:39:3c:5a:e9:3d:63:ae:a1:95:
1d:28:e5:e7:9c:d1:00:d4:49:8f:61:91:84:08:9f:
d4:90:ce:ee:10:2a:97:ec:ec:6e:62:12:7b:13:5d:
d5:c4:2f:39:16:76:61:a3:b9:4d:78:ec:01:49:66:
ae:6d:14:6a:5a:54:1a:e9:0b:32:ac:f9:8e:1a:4e:
04:15:5d:3b:97:0a:0f:c3:04:16:34:83:f2:7a:df:
5c:23:1a:39:77:b8:e2:cb:8d:b8:7f:4c:10:24:4a:
3e:0c:2a:9e:f3:ba:32:6a:d9:d8:9f:1c:7f:8e:b4:
ac:17:e9:e7:24:d2:3d:4e:6b:68:18:89:35:80:2b:
82:52:ea:a6:db:65:42:50:fc:b6:2d:5d:5e:35:f9:
e9:f4:95:b5:17:65:d0:ee:16:45:f4:0f:1a:8a:ee:
30:6c:cd:21:a0:91:50:d9:11:49:15:27:5e:fb:ac:
82:30:b7:41:47:37:dc:14:b2:ee:19:9a:4c:a4:23:
91:c5:67:e7:ea:74:3c:92:81:e5:c4:22:bc:87:b2:
96:ce:7d:20:2d:12:cf:0b:83:df:11:7c:01:d2:26:
20:bd:dc:f8:ac:3d:64:64:e3:da:36:0b:e6:71:98:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:E1:41:7F:DB:F5:24:1B:5A:59:2A:67:CD:59:6B:F5:F8:83:63
X509v3 Authority Key Identifier:
keyid:11:66:DD:55:C1:5A:7C:78:DC:C7:DF:89:66:60:D9:1E:0C:4D:F3:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EWbdVcFafHjcx9-JZmDZHgxN8-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914878C/A93F054CDFFC11F1953416B20766CEF9/EWbdVcFafHjcx9-JZmDZHgxN8-I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d8:12:87:df:80:2a:5d:0f:f3:6a:ad:9d:72:54:fe:65:34:
d5:08:55:b5:e2:8c:83:77:82:03:ef:ef:c2:f4:d7:f5:ef:49:
43:a6:fc:f1:3c:ee:4f:03:4c:24:05:a0:6b:b4:90:98:ab:a3:
a3:0e:11:bb:39:1c:29:d8:0c:90:84:e4:9b:c1:2c:97:ac:5d:
6a:b6:40:3f:b8:55:f9:45:d2:b5:08:2b:e0:80:b0:16:4f:05:
01:89:c1:7f:38:f4:94:85:7b:49:11:e3:ca:58:a3:af:81:c2:
f3:be:32:8b:54:8a:2d:d0:c5:d1:35:06:5f:60:57:1e:ea:41:
6b:4e:80:64:7a:d0:83:b1:3e:f3:f7:67:2e:9c:40:77:5c:07:
8b:7b:f2:84:c4:02:6d:61:9e:4d:df:f1:11:b6:57:f4:93:3c:
b7:ed:06:70:ee:6e:97:19:e2:62:f1:a4:0e:38:75:88:aa:c9:
94:9d:a9:f2:7f:e0:fd:15:00:2f:f8:a3:e8:8b:2e:b8:29:d7:
ad:dd:15:1b:f6:67:fe:6a:52:aa:bb:a8:34:3a:be:8f:32:89:
4d:0a:69:17:0e:75:54:d7:18:0c:df:fb:04:d1:34:f2:b8:e3:
1e:14:7d:ea:a2:f0:aa:fd:ce:d5:18:53:2b:56:9c:85:a2:c2:
47:7e:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:54 2026 by rpki-client