
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
File: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json)
Hash identifier: kRnbmpX57zeA/I47PuiTDmMSBTcylheeLUCeHGutIK8=
Subject key identifier: 18:EB:D2:18:92:9E:C5:40:6C:C4:0B:34:2E:8E:02:01:F4:03:3D:48
Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Certificate serial: 350F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
Manifest number: 3504
Signing time: Tue 12 May 2026 15:19:21 +0000
Manifest this update: Tue 12 May 2026 15:19:20 +0000
Manifest next update: Tue 19 May 2026 15:19:20 +0000
Files and hashes: 1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: ppSPH/LhbvKIaHJicQHM0Hj1bldZuI7K1SRl8NJOUN8=)
2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: HLINmslRoe9L2W5d9zauGKp9+SgXzgVdgA5BJAfvBJA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13583 (0x350f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Validity
Not Before: May 12 15:19:20 2026 GMT
Not After : May 19 15:19:20 2026 GMT
Subject: CN=6a0344f9-49d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:c1:89:d2:5c:27:b9:ba:83:9a:8c:5d:02:
cc:11:f3:13:7c:2f:08:8b:0d:6b:b7:de:62:ca:a2:
55:05:7b:07:31:1e:2f:ce:91:80:31:9b:81:b6:5e:
1e:3d:dc:4e:f5:84:cd:e8:46:48:6a:ca:85:8b:11:
ea:e9:50:8e:d9:d0:fc:6d:9f:ea:dd:37:37:9a:c8:
2b:b8:5c:f1:aa:7f:8e:57:12:ef:15:11:7c:b0:8e:
50:db:6b:dd:35:ad:8b:f6:50:d6:c0:9a:1f:75:d6:
6c:6b:f3:16:2f:9f:15:ef:68:33:d6:9c:e7:af:5f:
4f:e4:43:09:dc:29:c9:ba:ad:69:4a:98:a8:54:c5:
95:54:cd:db:34:cc:7f:1b:b1:17:b9:6b:3a:c2:fa:
39:14:d3:4a:72:f8:b4:41:6e:1c:80:70:f7:46:09:
ff:9a:71:4b:b1:e1:d3:9c:a1:a1:d9:06:f4:bd:e3:
40:d0:5d:8f:2e:a2:49:56:2a:2e:ac:f1:d2:ad:42:
4f:ed:6f:12:e9:a7:af:63:29:a2:7b:4a:30:0f:0b:
c6:12:57:9b:af:26:33:9f:c6:e6:c4:1c:e0:1f:53:
76:51:02:7a:09:3b:cc:7d:71:b6:28:7f:58:09:4b:
36:f4:78:6a:1f:7e:c4:e6:4c:44:70:03:1e:da:1f:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EB:D2:18:92:9E:C5:40:6C:C4:0B:34:2E:8E:02:01:F4:03:3D:48
X509v3 Authority Key Identifier:
keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d4:e0:1a:a8:dc:33:b8:05:9a:d2:e5:ff:98:cb:7c:18:4f:
d4:d2:fe:f8:f0:c7:13:00:56:bc:40:c8:31:79:94:41:70:ed:
39:eb:2f:9f:f0:b2:f2:a4:f8:59:38:48:0a:d0:eb:e0:e8:a8:
6e:32:f6:31:9a:67:a4:40:de:7b:67:8a:b7:45:a6:60:e9:bf:
07:07:3a:76:d0:2a:2a:78:f0:22:6b:bd:10:da:85:29:f0:23:
61:d5:8b:ea:ad:e0:07:da:e9:ee:79:ea:53:3e:f9:fd:64:1b:
4c:39:14:ee:c6:73:06:45:65:f2:5e:79:1c:a9:74:00:97:90:
dc:a0:1a:1d:b2:1f:a1:e0:33:a2:d5:f6:32:d6:42:9b:3c:76:
6c:27:e4:5a:54:1f:87:d9:7a:9a:3f:71:d6:4f:12:27:d2:61:
e5:24:bf:2e:e7:dc:45:f4:4b:b2:6c:9e:eb:22:f6:d0:d5:e7:
f3:e4:62:4a:24:9e:b1:b3:d4:d1:75:4a:cd:70:13:81:fb:55:
64:7c:1a:71:8c:89:4e:ae:db:13:9a:94:ee:4e:c5:a0:18:40:
f1:5c:ec:a7:fa:0f:38:f0:38:16:d4:cd:82:3a:39:fe:90:4a:
f9:56:f4:0a:55:51:72:93:2f:a8:15:65:ed:d2:fe:6b:82:74:
80:ec:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:50 2026 by rpki-client