
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier: eYgWJz8COB9J7HSI+Jh36YW/VrcwcuY6fe7zfaEZY9E=
Subject key identifier: C8:86:E4:5D:AE:A4:E6:80:AA:33:D5:70:19:C7:9D:D9:E7:26:FF:47
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 0889
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number: 0856
Signing time: Wed 22 Jul 2026 21:33:40 +0000
Manifest this update: Wed 22 Jul 2026 21:33:39 +0000
Manifest next update: Wed 29 Jul 2026 21:33:39 +0000
Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: ofkR1AToz+njtlHbhH26dDx/ef0VKZRAZxjEFW/RNRE=)
2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: U6Px3+2UpSkVxzu/Qr8RX6ggWXcyYRot1wBwG96ExR8=)
3: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: OEyVTkl1WhphFhFfhyBKXGd5r6CJfOuj4maOaVwdIhk=)
4: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: /7IYWI/di3kJsTIoYEmQknNBsesmz2VOwgqLTQpmC0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Jul 22 21:33:39 2026 GMT
Not After : Jul 29 21:33:39 2026 GMT
Subject: CN=6a613734-2f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:05:71:54:a9:ad:00:a6:8c:02:70:82:1a:86:
0f:e1:68:af:34:b0:6e:6c:47:04:95:37:bc:a4:6c:
bb:f3:ce:b2:16:05:95:b3:79:ac:e7:b3:24:20:59:
e7:62:9a:09:a2:37:34:21:8a:fc:ec:8b:66:93:85:
4a:7a:90:f4:0f:18:e0:fc:ec:75:70:5f:76:a1:1e:
90:1b:cf:26:47:d1:a6:2e:31:4f:61:ae:9d:0a:8e:
b6:79:e4:9a:7c:23:9d:be:74:09:19:ec:ba:fa:11:
b2:30:81:49:1e:77:7b:ed:51:f3:26:b8:20:12:2f:
2b:be:e1:4f:0f:27:f7:de:59:21:fd:db:52:06:fc:
36:46:ea:74:3b:8a:ac:c6:88:61:38:1b:e8:80:d5:
1e:ee:e0:b1:6b:b9:8c:9e:9a:3c:61:f2:08:86:0f:
38:4a:1d:71:97:09:02:f2:90:64:25:a6:6e:0a:59:
af:8c:ad:16:2e:4c:d0:9f:be:e0:53:57:0e:00:47:
8e:3e:28:45:dc:45:da:86:33:68:5a:86:85:ba:8a:
ee:7d:d2:44:f0:97:08:0a:3c:5d:03:99:ff:d0:b2:
39:1c:87:83:de:fd:b0:98:56:d7:91:8c:3d:85:86:
3c:8c:43:d2:a8:7f:31:4d:31:e6:8a:ee:3d:7d:c5:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:E4:5D:AE:A4:E6:80:AA:33:D5:70:19:C7:9D:D9:E7:26:FF:47
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:75:1b:f4:83:15:b0:76:dd:58:5e:40:2f:ff:c8:e8:fa:45:
64:c1:32:b0:46:0c:24:90:25:cb:b8:6c:12:67:e9:2c:08:6b:
d6:ff:d9:f8:02:b9:17:11:94:0c:b8:d4:fd:06:ef:04:e9:68:
42:3c:ad:9f:1a:d0:30:2b:c4:a3:50:24:a0:a7:f7:15:cb:d6:
a4:1e:66:4f:9a:09:97:81:2b:46:76:99:f2:0c:a4:34:9c:07:
17:3a:89:1b:9c:fc:90:a8:7d:54:e6:7d:d2:89:b8:ca:1b:25:
d5:85:2a:09:f1:2f:c3:d5:50:04:c5:90:d6:d5:c4:d4:79:ad:
8a:4a:bc:7e:b2:95:10:a8:74:07:59:d4:d3:4a:2b:40:66:c1:
c2:f7:9c:6c:fa:88:05:f2:d3:13:c6:09:a7:59:23:d6:7e:db:
7d:d2:67:12:96:42:a0:93:56:cb:08:2f:a1:4b:47:6c:d3:5d:
74:d1:93:46:42:98:3a:8b:8c:5b:18:a3:e6:32:24:e5:3e:f0:
e9:bf:30:a2:97:4e:13:f2:f7:f7:d9:37:14:b6:5e:81:af:1f:
e6:4d:c5:0f:66:6c:85:7c:38:68:1e:e1:ac:8e:16:dc:49:6a:
d5:27:57:ac:99:01:5f:cc:bb:eb:b4:39:94:fe:ac:86:1c:0d:
9f:b8:29:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:48 2026 by rpki-client