
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier: Zgo6VSa81YXwyJmfkEX937Z8BXkUgp0zaVrZ2QzzBr0=
Subject key identifier: 38:E0:2C:4D:C4:A7:AB:AF:B8:09:1D:F2:0E:5C:A7:EF:8F:93:DC:FC
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number: 014D
Signing time: Thu 23 Jul 2026 06:55:10 +0000
Manifest this update: Thu 23 Jul 2026 06:55:09 +0000
Manifest next update: Thu 30 Jul 2026 06:55:09 +0000
Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: 7evXta/FSZGasLjQATKIlN/z7GrJeJcx3dnLHzgQg2s=)
2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: zQjdwBYrCmNJ6NC3Jbu/wsnNVtPFgbdvd9Z7ELK9Okw=)
3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CTkMutpvAk7yYXe3XyhfPht58lpcIVgdH5hdBMm7y34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:55:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Validity
Not Before: Jul 23 06:55:09 2026 GMT
Not After : Jul 30 06:55:09 2026 GMT
Subject: CN=6a61bace-4a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:7f:cf:42:c2:09:e7:23:53:c0:b2:e1:08:
80:50:91:ec:f2:4e:34:47:8b:7a:47:0a:cd:b2:47:
85:54:fd:75:1a:b4:8f:87:e7:2a:e6:0c:d5:fe:27:
9b:5c:63:e9:07:aa:dc:15:ad:29:9a:1d:b7:d1:6a:
1e:86:b6:d6:c2:29:09:1a:75:d4:75:2d:cf:5b:76:
72:ae:1e:2d:a9:dd:26:74:67:e5:8b:19:1f:c8:e3:
a7:fe:d9:96:2a:ac:e0:4f:59:fb:04:50:e5:80:fa:
91:3b:07:bc:ad:82:04:99:cf:26:9a:bf:e2:e4:c8:
38:d1:98:ae:f7:13:54:be:69:0e:35:90:a3:1e:e3:
ed:ff:55:73:57:e4:68:2e:5a:43:f0:6a:2a:bf:04:
3f:12:ed:a3:2d:fa:14:e6:23:51:d6:76:13:e9:8b:
de:24:16:b8:92:f7:1c:32:d2:e5:7e:92:a2:9b:f3:
4f:4c:d8:22:b0:22:8d:12:39:0c:99:ee:a2:01:a7:
7c:5b:1c:f1:ab:2a:b7:6a:e1:f2:8e:2f:e3:33:4e:
70:e9:fe:58:a7:e6:fb:dc:87:a8:97:97:5d:d8:ed:
ce:a5:e4:20:f9:76:f7:db:6a:b2:02:a0:22:a2:60:
5c:04:3e:f0:85:87:cf:7a:70:ac:ac:6d:77:d7:79:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:2C:4D:C4:A7:AB:AF:B8:09:1D:F2:0E:5C:A7:EF:8F:93:DC:FC
X509v3 Authority Key Identifier:
keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:dd:6d:7b:f7:06:f9:bc:68:13:58:55:ff:62:da:31:c4:ab:
38:f9:68:aa:b1:ad:7e:ce:23:12:e3:a1:eb:88:15:4e:d0:2c:
d0:6f:55:5c:fc:6a:04:d4:18:4e:da:fa:08:04:b9:c9:5e:b1:
22:d5:07:a6:aa:be:5a:d2:a8:25:65:d3:b2:2c:4e:c2:6d:c0:
1b:04:c0:0f:cf:f1:86:65:2d:35:fa:70:e4:b4:bd:25:44:b4:
18:22:9b:60:85:d0:73:92:aa:14:3c:66:bb:5c:0f:50:34:85:
0d:9c:2c:ec:6a:4e:92:a2:73:31:16:0f:8f:64:54:0b:a5:2b:
25:53:42:9a:b7:f6:0b:fd:0a:c7:6e:8d:95:2b:45:3a:4d:86:
89:32:c5:4a:69:ed:49:dd:ce:af:3b:8f:83:2f:8d:ae:20:4b:
f6:a7:62:5f:54:7d:72:e4:aa:82:e3:ad:7b:eb:c5:8d:ac:43:
d9:96:a4:9e:9d:13:36:56:92:ba:15:e2:04:ba:fe:7b:65:ca:
bc:c8:e7:50:20:22:0b:0b:02:1b:66:98:91:36:69:ed:86:95:
15:e3:e1:8c:30:86:61:5b:02:2b:ab:99:ce:ec:7f:20:fb:d9:
45:7b:d7:b8:f5:17:19:24:73:e5:60:67:f7:e9:8b:cd:09:e7:
8b:16:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:25 2026 by rpki-client