
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json)
Hash identifier: yJr0mpb60i2oFWczMLyR/qefkjigRzByMjN3o0p02X0=
Subject key identifier: 7E:1E:09:7E:11:B3:08:53:42:9A:46:B6:5F:F1:0F:C3:FF:C1:23:F1
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial: 02E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
Manifest number: 02DF
Signing time: Wed 23 Sep 2026 00:53:52 +0000
Manifest this update: Wed 23 Sep 2026 00:53:52 +0000
Manifest next update: Wed 30 Sep 2026 00:53:52 +0000
Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: kJZw0X39dklRW1zwryl6G16byxiPjNL9UuhhblhKnLI=)
2: 9EFAFA76234311F18F511571AA833773.roa (hash: 4NzUw4b9D8ALfqcLviwrDkJ97hUefCQAutbVZdbx1i0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 743 (0x2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Validity
Not Before: Sep 23 00:53:52 2026 GMT
Not After : Sep 30 00:53:52 2026 GMT
Subject: CN=6ab32320-7118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:0d:bf:74:58:af:aa:41:46:d2:62:16:1c:
c5:2b:60:e1:af:f2:bf:28:55:50:3a:67:84:1e:92:
9f:5a:e1:2d:4b:39:6f:42:cd:a0:14:78:ba:d3:7f:
77:13:8a:17:18:74:2c:c3:d3:12:5a:16:52:32:b5:
d2:38:ce:98:45:74:a3:ec:31:fc:36:d3:e3:ef:af:
13:7e:59:52:41:ce:48:01:96:19:9c:12:df:e6:bd:
da:a8:77:d8:c5:12:a0:fd:3e:14:a0:c5:5f:80:34:
0b:64:be:34:f9:da:6c:ac:f0:7e:ba:a5:88:08:a8:
ce:59:8c:30:07:11:89:0c:1a:7e:a8:0f:c4:f8:76:
81:77:96:63:3e:fb:da:ee:0f:6d:16:b8:ef:ce:df:
93:57:3a:1b:57:e2:fb:79:7a:3e:fc:ac:1a:c3:e6:
1c:9c:cd:aa:79:7f:4d:63:44:b0:77:12:cb:93:0a:
8d:84:2d:f7:1d:a7:30:5f:c6:aa:1f:a3:94:e2:5f:
81:dc:89:e1:da:a9:3e:a2:f6:a7:aa:39:ef:9c:1a:
dd:f6:4d:39:55:62:59:b5:c7:cf:0b:7f:9c:a6:cb:
6a:fe:f6:49:cb:e0:7d:d8:b1:e0:98:86:9a:90:a0:
68:c2:ad:33:f7:fd:b2:99:9c:d2:46:b3:da:fb:a7:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:09:7E:11:B3:08:53:42:9A:46:B6:5F:F1:0F:C3:FF:C1:23:F1
X509v3 Authority Key Identifier:
keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:a7:6d:22:1b:9c:2a:db:47:24:26:65:be:f4:7d:16:3a:ab:
a3:42:e2:a2:40:84:fc:08:25:50:54:d5:5d:3a:98:0d:80:13:
08:4c:39:db:00:06:bf:0b:b0:14:aa:6d:b6:00:63:44:d7:b3:
00:f2:14:63:97:4b:e9:28:8c:0a:b0:23:a4:af:b6:2e:ce:dc:
94:7b:34:f9:72:cf:5e:63:53:4c:06:cd:58:87:c5:8d:87:98:
e8:e9:1d:99:8a:66:60:9c:ed:f6:df:a2:23:36:db:6c:d1:d7:
63:c2:ec:82:aa:a4:40:9f:32:eb:d9:61:6f:6b:a1:6c:bb:af:
c8:e3:b0:bc:8f:49:23:c3:cb:db:d2:dc:09:6b:e8:05:05:b7:
16:78:c1:63:f0:50:c1:79:6a:38:13:6b:40:e7:13:4b:6b:76:
63:02:ee:61:33:9b:39:cf:fd:b8:d5:06:5e:52:aa:3d:ec:15:
40:dd:f6:30:de:ea:b6:4d:fb:5e:dd:ee:2c:3f:35:11:ad:66:
a8:a7:4c:0a:17:bd:53:fe:16:ec:3c:1b:c2:4f:e0:31:db:ef:
1f:47:39:c8:27:04:ca:ba:7d:8b:fd:84:8f:7d:97:f3:cd:03:
67:d2:9f:8c:58:17:ba:cd:05:3a:e0:90:5d:dc:aa:28:e2:9d:
a0:66:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:31:20 2026 by rpki-client