
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
File: eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft (raw, json)
Hash identifier: 3WokKtaca+iR8CJdLjv75Gqo4Kik5C6fwvKYx5bWIgU=
Subject key identifier: 9E:88:E5:65:AA:8B:8B:66:7F:4B:E5:73:B4:5E:5D:FF:A3:A8:35:A9
Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
Certificate issuer: /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
Manifest number: 0146
Signing time: Fri 25 Sep 2026 05:44:30 +0000
Manifest this update: Fri 25 Sep 2026 05:44:29 +0000
Manifest next update: Fri 02 Oct 2026 05:44:29 +0000
Files and hashes: 1: eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl (hash: eLqERrhCgcO/sU7TOBUnIzwsVduwdQVj5m717HG4SGc=)
2: A029B10C61A111F18B2BF3B18647A888.roa (hash: I8yVH3kD5p468zyUMbjfdkWzUG7+icC3rIDvhc0yFOw=)
3: D02660DECE9A11F08236E30AC4F9AE02.roa (hash: 4oeL9kp7uO8jiJ2X9jP4F7V0e5HrC9qTjIqA6GLNsOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Validity
Not Before: Sep 25 05:44:29 2026 GMT
Not After : Oct 2 05:44:29 2026 GMT
Subject: CN=6ab60a3e-80ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:a7:66:f9:d3:fa:64:66:82:7b:40:64:95:
c2:48:70:1e:45:7a:e9:2e:c3:d0:9b:df:1d:96:4d:
06:03:ca:ed:ee:24:d8:32:48:ea:9d:76:86:34:7b:
ff:a2:76:8b:e9:75:ed:02:13:ae:97:13:3f:46:61:
43:d0:a8:70:e3:b7:42:65:65:fd:26:0f:97:32:73:
d8:9b:de:de:35:a2:20:f4:71:c4:5b:fa:eb:7c:b6:
fb:84:82:1b:da:e4:94:12:09:ec:d4:85:91:fc:fb:
a7:9f:91:f4:f6:43:2c:56:7c:b3:bf:6b:d6:45:40:
ed:db:0d:cf:53:d6:4d:21:99:3f:7e:ff:68:fa:09:
9c:52:f5:63:a4:bc:67:c9:8c:53:15:28:f1:b4:bf:
78:9d:4c:b2:a0:a6:d3:1a:59:0c:03:15:f5:4e:e6:
a7:02:7c:80:c6:a5:d4:35:2d:11:c2:b1:8c:0d:23:
06:6a:f3:44:5a:0a:47:ed:b1:50:e5:71:30:34:dd:
e1:dc:5b:3e:e3:06:03:52:03:35:d0:f5:f3:b6:70:
94:f6:6b:52:fd:3e:c0:40:a6:fb:1d:14:be:a8:74:
eb:c8:66:5d:4b:b8:89:e7:ac:a7:99:a3:ec:bb:7c:
f9:07:9d:c2:ea:0d:be:a0:d2:66:a6:64:e2:76:24:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:88:E5:65:AA:8B:8B:66:7F:4B:E5:73:B4:5E:5D:FF:A3:A8:35:A9
X509v3 Authority Key Identifier:
keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ad:92:ef:3d:5e:87:c2:ae:07:f5:d7:c9:bc:a7:e1:32:73:
c2:24:78:14:cc:a3:43:75:bf:bc:18:e7:1a:31:9e:f4:60:18:
7a:87:19:09:df:95:01:2b:54:d4:2a:78:16:13:3c:9b:b8:9a:
13:a2:63:f8:36:9c:ae:5c:61:32:34:f0:58:94:80:75:1b:db:
64:e6:3e:37:62:57:2a:eb:2e:aa:7e:57:13:1b:20:41:db:f1:
a8:1b:f7:ac:e1:0b:22:f2:fc:73:d2:27:31:0e:e2:25:5e:99:
14:14:82:31:1f:aa:11:8a:d1:f2:78:e4:8f:be:68:c7:27:a9:
ee:16:c9:0e:53:76:82:12:af:96:06:d1:d0:03:ff:e1:66:24:
6d:0a:fb:23:dd:07:61:73:5b:aa:3b:da:1e:3d:6e:ca:d4:a6:
ee:b4:3f:b4:b4:07:ff:07:1f:8d:db:fa:01:ce:36:6e:30:69:
a2:27:85:34:76:24:b6:cb:20:98:99:cb:58:ea:cc:61:6e:60:
a3:d0:f4:77:eb:c2:4b:67:0b:35:b9:a4:5e:0e:6e:bc:96:2d:
7d:18:77:4a:a2:c3:1c:65:51:cd:75:a4:0a:93:a4:ba:a3:e4:
cd:ac:26:0c:47:6c:90:d1:41:43:e2:79:05:4f:a4:18:e6:4f:
50:fe:0f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:30:39 2026 by rpki-client