
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
File: etynHr4-GRMw4DyU0rT0_4mIRcU.mft (raw, json)
Hash identifier: CmA1Vh3uRnGJba3dTkLKSSYZr1cFmySFI42kFiIIYZc=
Subject key identifier: 4C:DB:E5:6C:20:31:B4:FA:FD:6E:88:45:68:24:9D:CD:F3:BD:66:6B
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Certificate issuer: /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial: 0871
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
Manifest number: 0859
Signing time: Tue 24 Mar 2026 20:30:30 +0000
Manifest this update: Tue 24 Mar 2026 20:30:30 +0000
Manifest next update: Tue 31 Mar 2026 20:30:30 +0000
Files and hashes: 1: etynHr4-GRMw4DyU0rT0_4mIRcU.crl (hash: 78YK8darCwbWtg+Kcw33GWwPvnu9W3bUy8B4Py/JD9A=)
2: 86CDBD00FEB711EABA9B645CC4F9AE02.roa (hash: LMiGZrGdRef/gr8dnZSqVPcPkO5GIlA0gw9HVMBepsA=)
3: B7DF4CB0143711ECA137850DC4F9AE02.roa (hash: gs/VsOiCfQg70V+/s3SLyTkS+1XUJY7RhDq1hFkklMI=)
4: 1296A2EEFA1B11EA94AA6082C4F9AE02.roa (hash: Bsn0ZHK1VOb//E1bnYWa8gJiN3NG+POP4XJgG0W3MpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2161 (0x871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F912, serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Validity
Not Before: Mar 24 20:30:30 2026 GMT
Not After : Mar 31 20:30:30 2026 GMT
Subject: CN=69c2f466-1cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:da:0f:39:7c:1d:e4:97:86:1b:b9:c4:31:
af:a6:42:57:0d:d0:4d:26:7c:db:f0:94:c9:63:dd:
4d:a9:5f:8e:d9:71:9a:ee:13:dc:02:c1:fa:3f:9f:
2d:bd:36:c0:61:4d:00:e1:4b:29:02:10:dd:0e:3e:
42:78:ae:b5:0f:15:01:16:c1:dc:f6:9f:04:1c:03:
6d:a8:76:29:ce:35:20:00:bb:43:35:bb:7a:f2:3c:
8e:6d:61:e0:45:d4:df:c8:81:3c:64:2d:af:b3:3e:
cd:ba:e9:7b:d6:a1:5a:10:24:ff:8e:bf:ab:05:70:
c5:92:98:f6:5d:25:0e:34:3c:b5:40:1b:c8:2e:7e:
df:40:98:ac:3b:91:1a:d0:14:d3:05:6d:73:89:0a:
49:d8:e5:f0:fd:6b:75:cc:1f:01:b4:7b:ea:dc:cc:
dd:05:e3:31:0d:ef:74:d2:88:1b:dd:9b:7a:8f:66:
bb:8d:85:3b:de:25:f8:be:6b:8a:c8:d4:40:63:09:
dc:fa:2c:7f:bd:6e:68:eb:c6:8e:cc:fd:f2:bc:10:
d8:e5:eb:22:39:e2:2c:b8:2f:f5:78:41:ec:ac:5d:
5c:70:b7:bb:09:73:89:5e:8a:b6:24:5a:93:d6:39:
38:4a:b9:83:73:21:89:6b:6d:af:aa:60:a8:91:7c:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:E5:6C:20:31:B4:FA:FD:6E:88:45:68:24:9D:CD:F3:BD:66:6B
X509v3 Authority Key Identifier:
keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:9c:f1:3d:fa:56:e9:96:9f:d0:d7:a4:1a:a3:af:86:13:
92:e3:86:5c:00:61:41:a6:20:4e:f0:ea:51:f2:67:2a:4f:34:
d4:d0:4c:47:8b:31:23:b4:19:aa:fa:22:0a:3b:e9:80:ab:5e:
0e:28:d7:6a:26:22:05:fb:72:e4:08:25:88:a9:00:b5:26:37:
ac:e8:9b:5d:d6:0b:66:e4:a7:55:c5:9f:f1:c4:fd:56:ba:cf:
65:2f:6e:96:81:2f:1b:e9:ae:6b:45:1f:df:bd:5d:e0:f1:26:
3c:55:ab:09:72:e4:08:1a:a1:7e:ac:ad:33:35:b0:80:a6:33:
a3:9b:61:fc:bf:22:c0:90:aa:8a:28:a6:77:5e:6c:77:87:7c:
c9:43:ba:24:be:7e:e5:60:42:4c:ec:63:e3:52:14:7e:7a:bb:
56:64:36:99:3b:84:95:fc:ad:39:03:73:a0:f7:85:fe:67:39:
08:dd:6c:0b:be:c0:bc:99:84:ec:69:64:bc:94:25:ce:50:44:
24:11:26:67:77:cf:aa:8a:0e:04:82:04:ae:95:08:20:56:d8:
71:16:44:34:0a:eb:b8:74:84:ff:59:0d:a2:bc:69:98:83:d2:
81:86:57:54:48:57:ab:6d:00:e1:0c:98:15:2b:69:0a:a9:19:
95:49:34:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY5MTIxMTAvBgNVBAUTKDdBRENBNzFFQkUzRTE5MTMzMEUwM0M5NEQyQjRGNEZG
ODk4ODQ1QzUwHhcNMjYwMzI0MjAzMDMwWhcNMjYwMzMxMjAzMDMwWjAYMRYwFAYD
VQQDEw02OWMyZjQ2Ni0xY2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzjaDzl8HeSXhhu5xDGvpkJXDdBNJnzb8JTJY91NqV+O2XGa7hPcAsH6P58t
vTbAYU0A4UspAhDdDj5CeK61DxUBFsHc9p8EHANtqHYpzjUgALtDNbt68jyObWHg
RdTfyIE8ZC2vsz7Nuul71qFaECT/jr+rBXDFkpj2XSUONDy1QBvILn7fQJisO5Ea
0BTTBW1ziQpJ2OXw/Wt1zB8BtHvq3MzdBeMxDe900ogb3Zt6j2a7jYU73iX4vmuK
yNRAYwnc+ix/vW5o68aOzP3yvBDY5esiOeIsuC/1eEHsrF1ccLe7CXOJXoq2JFqT
1jk4SrmDcyGJa22vqmCokXxN/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzb5Wwg
MbT6/W6IRWgknc3zvWZrMB8GA1UdIwQYMBaAFHrcpx6+PhkTMOA8lNK09P+JiEXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjkxMi8zRDhGMDY0NkZB
MTkxMUVBQjE3MDQ1ODBDNEY5QUUwMi9ldHluSHI0LUdSTXc0RHlVMHJUMF80bUlS
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V0eW5IcjQtR1JNdzREeVUwclQwXzRtSVJjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjkxMi8zRDhGMDY0NkZBMTkxMUVBQjE3MDQ1ODBDNEY5QUUwMi9ldHluSHI0LUdS
TXc0RHlVMHJUMF80bUlSY1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJtKc8T36VumWn9DXpBqjr4YTkuOGXABhQaYgTvDqUfJnKk801NBMR4sxI7QZ
qvoiCjvpgKteDijXaiYiBfty5AgliKkAtSY3rOibXdYLZuSnVcWf8cT9VrrPZS9u
loEvG+mua0Uf371d4PEmPFWrCXLkCBqhfqytMzWwgKYzo5th/L8iwJCqiiimd15s
d4d8yUO6JL5+5WBCTOxj41IUfnq7VmQ2mTuElfytOQNzoPeF/mc5CN1sC77AvJmE
7GlkvJQlzlBEJBEmZ3fPqooOBIIErpUIIFbYcRZENArruHSE/1kNorxpmIPSgYZX
VEhXq20A4QyYFStpCqkZlUk0rw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:04 2026 by rpki-client