
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier: mrt9UiD+eJ+zMKwqcErHJ1Qt7i/uFdciValnSUoox4Y=
Subject key identifier: FD:EE:25:12:C5:79:0B:54:D4:62:B2:F5:DC:95:2E:5C:EB:59:D2:D7
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial: 08C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number: 08A7
Signing time: Tue 24 Mar 2026 20:16:41 +0000
Manifest this update: Tue 24 Mar 2026 20:16:41 +0000
Manifest next update: Tue 31 Mar 2026 20:16:41 +0000
Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: P2pJQLIhAUlP71rWFTNrB0zfJxwwQvSC/rkMXAT87Yo=)
2: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: oW2JhsPjI+GKnJ32ROir3XwQDxUOtlZsdWGXqlOBZI0=)
3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: IuNSCN6yrNlc/0wSwd/g4xZGin/ZqKczpvImaghk0B4=)
4: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: FzAXOXMg8ypDm7weH1JrGkQxJTnIfLB9Zd0EsKEe/7c=)
5: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: UM57hSN5aLzJ1miAi0WEBED5Yq0amggNMnfYd46Qpgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2246 (0x8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Validity
Not Before: Mar 24 20:16:41 2026 GMT
Not After : Mar 31 20:16:41 2026 GMT
Subject: CN=69c2f129-7cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:c6:bf:86:9f:71:83:ae:e4:d8:a0:15:b0:
b4:f8:00:37:b2:45:79:4f:9a:b1:00:61:11:e4:74:
d7:0e:5d:bd:5e:d8:da:d4:5e:d4:87:63:f8:88:88:
c4:0d:f9:f5:7f:86:a5:81:24:1f:e6:12:0b:a8:af:
e4:aa:1e:4a:06:0e:a9:41:8c:84:ce:c9:dd:77:76:
f8:65:8e:16:82:2b:df:3d:45:35:64:72:1f:e4:d2:
5d:6d:c4:e4:96:de:fa:27:02:51:e3:21:e3:4e:30:
84:71:2b:f9:f5:31:69:06:4b:73:c1:4b:ca:e5:94:
ce:da:c3:b2:e1:e2:5a:41:19:ba:fd:38:fd:ee:cd:
da:20:f6:51:32:a1:3b:9a:d9:2b:cf:a3:a9:66:3f:
03:c5:09:cc:f0:25:ed:aa:52:85:bc:39:9e:bc:6b:
4d:54:db:b1:fe:b9:b4:28:73:65:a8:40:dc:50:dc:
c1:4b:b0:60:3c:94:b5:eb:86:c4:d2:c5:68:c2:fc:
44:ce:d7:58:4c:2e:04:14:43:3a:32:8f:2c:a5:9a:
e0:9c:d1:b9:4b:99:28:02:bb:7e:d3:a2:02:54:ba:
2b:b8:b9:a9:dd:b0:39:93:ba:fd:0a:1d:f7:52:66:
d8:ca:db:57:11:02:4b:ca:53:56:52:70:b0:d6:37:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:25:12:C5:79:0B:54:D4:62:B2:F5:DC:95:2E:5C:EB:59:D2:D7
X509v3 Authority Key Identifier:
keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cd:36:43:f9:fc:af:d4:f8:58:ec:6b:48:74:f7:7b:34:b6:
89:2b:75:73:da:37:17:4d:1d:02:1d:40:81:17:60:e6:47:d1:
34:63:39:d4:8b:fc:5e:2b:9c:02:77:be:b4:89:3e:8a:7d:5a:
27:f5:9c:d8:30:22:f3:dd:7c:99:bc:20:9b:01:05:ef:dc:a8:
18:be:13:39:dd:ff:87:2e:35:52:8d:41:64:fa:a9:6c:cb:49:
4b:a7:b3:59:c9:5e:bb:88:e6:a7:28:6b:c7:b8:cc:ed:ff:da:
82:fd:60:db:0f:bc:4a:45:e1:9d:2a:a2:7c:f2:09:8f:c2:ff:
44:81:da:3b:f8:12:0b:86:7a:b6:ed:ae:dc:4c:c7:6b:f6:11:
01:9c:ac:c6:b2:fc:ae:39:af:12:ac:7d:51:0f:74:c4:e8:81:
b7:9d:ac:9b:e9:8e:13:23:13:3d:9a:0a:ef:95:00:e5:20:38:
f6:bb:e9:de:ff:ab:84:94:59:d7:fb:1a:e2:ff:c7:15:f5:b7:
37:8c:b4:8a:43:0a:da:5a:c5:e0:42:ed:b3:f5:12:96:94:48:
52:83:ce:9a:d6:a8:ea:d2:b6:a7:06:ac:30:ab:91:ac:9f:b9:
28:e6:99:4d:40:ef:07:4f:4e:41:6e:bf:65:45:2f:e3:00:fe:
19:e4:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:41 2026 by rpki-client