
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json)
Hash identifier: T91KDfrPdKa4OjMnEdqwnA21QJE0Pn/tR4nBh6B66/g=
Subject key identifier: C2:67:34:AE:4B:37:19:1C:08:BF:E6:83:38:2D:1E:9C:08:C0:F8:92
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial: 02C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
Manifest number: 02BF
Signing time: Thu 23 Jul 2026 02:24:04 +0000
Manifest this update: Thu 23 Jul 2026 02:24:04 +0000
Manifest next update: Thu 30 Jul 2026 02:24:04 +0000
Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: kyb510OGOS9D2r2u7Dmjtb3hVJab0Ibcf8wSdWVtrbw=)
2: 9EFAFA76234311F18F511571AA833773.roa (hash: 4NzUw4b9D8ALfqcLviwrDkJ97hUefCQAutbVZdbx1i0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Validity
Not Before: Jul 23 02:24:04 2026 GMT
Not After : Jul 30 02:24:04 2026 GMT
Subject: CN=6a617b44-68b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:d0:f3:f3:60:c8:06:73:9c:ff:4c:d2:5e:
19:54:86:1d:20:1f:96:0c:ce:df:85:aa:d0:30:80:
c7:34:a3:9b:fa:19:73:56:e8:fb:95:4b:d0:aa:99:
55:03:99:90:a1:db:97:e4:d7:e1:b2:23:2d:b2:cf:
e3:6e:d1:21:22:90:dc:3c:17:f2:ef:f8:e2:b4:46:
16:ea:96:e6:92:ac:ae:4d:73:25:32:9d:cf:dc:74:
90:74:06:f2:de:0b:04:ba:96:ec:01:09:cf:78:e1:
76:2e:61:b3:d1:27:77:b5:4d:82:f9:ad:cb:10:19:
6a:64:7a:ed:86:bd:d0:c5:b3:d3:43:ef:ad:3d:a1:
a4:80:b9:53:94:52:70:c9:db:79:08:0b:42:09:f0:
d8:8f:4f:f2:33:13:47:ee:c2:01:0f:0f:03:ee:cb:
4e:d1:a8:74:c9:8d:01:2e:dd:8e:01:8e:9d:d1:d6:
61:39:15:ed:ac:df:0f:4b:38:1a:3d:73:16:10:f5:
26:fc:51:9e:17:3c:41:f2:4f:d6:cb:7d:05:09:5f:
02:7d:c5:8d:3a:50:ec:28:53:99:94:bb:9f:8b:3e:
b1:84:f0:31:c9:2f:67:96:56:51:e4:52:04:15:ef:
30:69:72:64:30:b0:fb:7a:0d:3f:5e:75:de:49:d5:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:67:34:AE:4B:37:19:1C:08:BF:E6:83:38:2D:1E:9C:08:C0:F8:92
X509v3 Authority Key Identifier:
keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f6:6b:b8:b6:05:49:ae:ba:10:9f:ac:8f:e6:c2:91:76:4f:
5c:78:22:a4:bf:6e:c6:64:0c:f1:ba:9b:1d:34:a4:e9:21:36:
e8:cb:e8:ee:84:31:e3:fd:ab:79:59:0f:9f:cf:5a:97:8a:24:
c5:41:96:44:c0:37:bb:4b:0f:0d:1e:0c:52:fa:f2:1a:25:6c:
63:fe:90:62:41:bf:5f:bc:15:5b:c5:0d:b5:65:bc:63:27:4d:
c5:73:d7:bb:de:95:c6:45:1b:18:66:2b:de:18:8c:a4:97:09:
2c:c5:12:a0:c3:ab:d4:a0:f8:a9:8b:fd:7f:e9:52:57:bc:60:
96:e5:96:52:f3:1a:49:0f:cd:d9:a4:0a:ee:79:ec:66:bc:a5:
a3:54:54:dd:cf:4d:e1:64:2d:bb:c9:2f:07:32:a8:e7:5d:61:
00:4c:67:06:bc:ef:6f:8d:b8:e7:da:c4:de:2a:50:b8:fb:f0:
74:75:02:28:cc:71:3f:ba:fc:07:ff:f7:8d:0c:ee:c9:eb:c2:
6b:d7:01:6a:1c:82:1b:28:57:24:3f:86:de:af:cd:9a:50:8b:
bb:c6:1a:4a:af:3e:19:de:a5:cd:b3:73:d0:e8:0a:fa:01:5c:
36:12:7f:f5:a2:d0:14:3e:4f:f7:72:b6:9b:7f:78:77:56:96:
d6:51:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:58 2026 by rpki-client