
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier: l8AqPGdK0UfqAhndneLaat8vS+M9EDgC951LC9CRmy0=
Subject key identifier: B9:2A:FF:04:F6:2B:19:EC:9B:80:DB:C6:5B:62:AC:C8:B6:1D:F7:5C
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number: 010F
Signing time: Wed 25 Mar 2026 05:14:31 +0000
Manifest this update: Wed 25 Mar 2026 05:14:30 +0000
Manifest next update: Wed 01 Apr 2026 05:14:30 +0000
Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: bHdF3VpFkv+tlzCvUDXc1ASMmnWxr4MHfrpJAdoluvg=)
2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: +BzmtEHFPYhJd7eBI+fhK9pFudklIV0KEa7Qtl+OyT0=)
3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: eH0IL4ttz3YsPdM6Yy4322cKAtAuMUPayUG/Znc6O7g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Validity
Not Before: Mar 25 05:14:30 2026 GMT
Not After : Apr 1 05:14:30 2026 GMT
Subject: CN=69c36f36-5e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:a3:1c:95:62:cd:3f:e3:20:10:90:cc:2d:
52:48:da:0a:6f:6a:92:08:12:a0:ab:86:55:ab:1f:
ab:b4:3b:fc:fe:59:1a:06:23:ca:7a:64:30:3a:5e:
92:f6:8f:4a:fb:3a:ca:5c:01:f6:d5:d3:48:ec:4d:
83:74:01:b6:f8:06:b0:48:fd:8b:87:56:0f:cb:9f:
58:05:6d:6a:9a:24:92:71:e0:da:6f:18:99:44:4d:
16:48:c0:fa:6a:d0:fb:cb:ba:ab:35:fb:6a:63:15:
30:76:17:87:df:11:df:3c:85:1b:71:c5:e5:75:82:
65:c1:c8:c4:05:c2:91:3a:ce:3a:ab:ea:00:5f:5e:
b4:2a:01:ab:5a:02:60:5e:0e:31:ea:8c:f7:fb:30:
db:9b:88:01:30:2c:35:fa:55:a7:3c:3b:d9:20:0a:
0f:9c:81:8e:87:e8:f4:34:1b:a8:64:ca:28:11:92:
d9:11:dc:cf:8a:e0:c6:75:11:1c:51:b9:08:cb:82:
d7:df:10:13:92:fd:ec:d5:9a:19:0c:2f:73:05:04:
75:91:01:3d:26:76:80:f1:cc:ba:73:e5:f7:c7:47:
25:ec:dc:bd:7d:9a:26:7f:18:54:dc:14:96:a7:9a:
07:7a:ba:54:5a:86:db:3c:8e:83:7e:1f:70:3f:1a:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:FF:04:F6:2B:19:EC:9B:80:DB:C6:5B:62:AC:C8:B6:1D:F7:5C
X509v3 Authority Key Identifier:
keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:46:20:e2:cc:14:5f:5c:f3:ff:1f:a5:5d:c8:3a:17:3c:0a:
71:d2:af:cb:46:ca:ea:34:2e:87:39:54:11:0a:b5:88:ed:07:
9f:c3:39:ec:7f:fc:ce:3b:6f:1f:c0:ac:9e:c9:58:96:10:81:
15:12:74:9d:d1:20:73:46:12:44:73:49:c6:ff:4d:b2:f1:a1:
31:4f:31:1e:ac:cf:ac:7e:26:df:8a:23:3b:47:23:d4:5c:af:
41:e1:98:19:6e:c6:9e:2c:42:d7:e3:5b:f7:25:a7:54:21:81:
7f:17:f3:d5:93:a1:ed:8c:c1:ee:42:61:b2:c1:2c:f7:91:14:
8d:c4:86:bc:08:72:08:28:3f:a7:cc:b6:f6:f3:22:27:23:90:
51:49:d6:a1:5a:40:88:10:11:e6:d4:e0:47:56:b2:27:4d:68:
de:6d:4e:64:96:5d:28:4f:7b:32:ab:d5:46:34:c0:a5:3b:a2:
e7:30:82:9c:62:70:ef:19:01:eb:d7:9d:ed:f0:7a:8f:bf:dd:
66:20:cd:71:7e:bd:a1:f6:a8:6c:a7:9a:5c:f1:9c:96:9a:ab:
91:a1:6a:02:98:08:c0:55:05:0a:0a:aa:47:8a:20:70:8e:89:
5d:af:2e:30:bc:a1:e3:de:9e:4e:32:26:05:12:98:5b:db:c4:
75:bd:51:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTQxMTAvBgNVBAUTKDc5MjBGOENBODRFQzkxM0M2OUE5OEQ1NDM3MTIwOUI0
MzRDMzMxOTEwHhcNMjYwMzI1MDUxNDMwWhcNMjYwNDAxMDUxNDMwWjAYMRYwFAYD
VQQDEw02OWMzNmYzNi01ZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAznWjHJVizT/jIBCQzC1SSNoKb2qSCBKgq4ZVqx+rtDv8/lkaBiPKemQwOl6S
9o9K+zrKXAH21dNI7E2DdAG2+AawSP2Lh1YPy59YBW1qmiSSceDabxiZRE0WSMD6
atD7y7qrNftqYxUwdheH3xHfPIUbccXldYJlwcjEBcKROs46q+oAX160KgGrWgJg
Xg4x6oz3+zDbm4gBMCw1+lWnPDvZIAoPnIGOh+j0NBuoZMooEZLZEdzPiuDGdREc
UbkIy4LX3xATkv3s1ZoZDC9zBQR1kQE9JnaA8cy6c+X3x0cl7Ny9fZomfxhU3BSW
p5oHerpUWobbPI6Dfh9wPxpY9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkq/wT2
Kxnsm4DbxltirMi2HfdcMB8GA1UdIwQYMBaAFHkg+MqE7JE8aamNVDcSCbQ0wzGR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1NC83OUY4OTk4Mjkz
NTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tUeHBxWTFVTnhJSnREVERN
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1aRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1NC83OUY4OTk4MjkzNTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tU
eHBxWTFVTnhJSnREVERNWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVEYg4swUX1zz/x+lXcg6FzwKcdKvy0bK6jQuhzlUEQq1iO0Hn8M57H/8zjtv
H8CsnslYlhCBFRJ0ndEgc0YSRHNJxv9NsvGhMU8xHqzPrH4m34ojO0cj1FyvQeGY
GW7GnixC1+Nb9yWnVCGBfxfz1ZOh7YzB7kJhssEs95EUjcSGvAhyCCg/p8y29vMi
JyOQUUnWoVpAiBAR5tTgR1ayJ01o3m1OZJZdKE97MqvVRjTApTui5zCCnGJw7xkB
69ed7fB6j7/dZiDNcX69ofaobKeaXPGclpqrkaFqApgIwFUFCgqqR4ogcI6JXa8u
MLyh496eTjImBRKYW9vEdb1R8A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:13 2026 by rpki-client