
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json)
Hash identifier: ljd5U74cRfx3kFzSKeZHeINWnulWldJlC3fKt+wZZig=
Subject key identifier: 4A:00:38:D3:4D:4E:62:56:71:9D:3A:3D:3F:EA:54:AC:DF:42:6B:4A
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
Manifest number: 0205
Signing time: Thu 23 Jul 2026 04:24:21 +0000
Manifest this update: Thu 23 Jul 2026 04:24:20 +0000
Manifest next update: Thu 30 Jul 2026 04:24:20 +0000
Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: 5YjyEo8TQd6nCmk7EVQfb7TRqH2+xSXZmLOHntGtvI4=)
2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: DXyPsBb+TauSinAKSbTPrnscbrr/NLc4whMOIpsP9Xk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Validity
Not Before: Jul 23 04:24:20 2026 GMT
Not After : Jul 30 04:24:20 2026 GMT
Subject: CN=6a619774-ccdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:c2:79:80:da:c0:b2:1a:f7:b7:fb:e5:3a:
12:ff:97:2c:4f:b6:fd:9d:49:60:90:36:e8:82:01:
74:ac:d1:2a:d6:84:ce:28:ee:11:77:3e:ed:c3:cc:
6a:ba:64:2c:b3:01:0c:fc:4a:09:dd:72:83:a7:ad:
69:5a:2f:a0:83:c7:ff:9b:aa:7c:3b:22:86:9d:0f:
fe:73:7f:36:48:fd:a3:7b:8e:b9:7d:b4:6a:16:bd:
6a:2c:f0:9d:05:43:71:ba:08:73:ea:e2:51:7a:43:
63:97:f8:37:99:53:0f:49:88:34:d3:87:37:19:a6:
0b:8a:aa:7d:cc:8d:cb:24:0c:0b:8b:8f:62:7b:7e:
32:31:ee:41:ed:bb:81:0d:46:2b:78:cf:4f:8f:d6:
b8:3b:a9:00:b5:6a:e9:0a:4e:98:be:74:d6:4c:cf:
ba:9b:92:67:90:6c:89:ce:92:3a:21:72:da:6a:11:
36:df:1a:48:ce:e9:36:e2:88:64:60:28:d8:c6:d3:
1a:9a:4c:db:00:fc:8f:aa:e5:f5:4f:29:65:18:c5:
a1:83:9b:d1:fa:f6:1d:6d:5c:3e:62:94:a5:20:fd:
59:7c:3b:37:84:ac:a9:f6:61:03:1d:4e:08:fa:5d:
f4:ac:2a:c1:f8:30:9d:f2:99:2d:d8:98:ec:35:67:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:38:D3:4D:4E:62:56:71:9D:3A:3D:3F:EA:54:AC:DF:42:6B:4A
X509v3 Authority Key Identifier:
keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:41:53:6a:94:2e:a3:51:7e:d5:de:88:6e:ff:2e:ff:fd:1b:
cc:9f:2b:e5:0e:0e:b7:bb:32:45:72:25:26:79:48:71:7a:ed:
24:fb:86:91:e5:b5:ee:e4:a7:41:cd:93:89:15:c2:8f:fb:6e:
17:2a:93:12:61:74:53:9a:6b:54:1d:fb:f3:3b:06:91:a0:0e:
30:b2:57:3e:77:31:56:a0:83:b6:83:e7:d7:0e:a5:e4:38:15:
63:43:1d:03:63:cf:aa:b2:20:6f:2b:bf:0f:1c:c7:ba:00:6f:
3e:fd:2c:bf:1d:0b:15:34:9d:0f:11:86:eb:df:11:69:3c:91:
0a:b7:3a:47:31:7b:28:f2:08:65:f4:dc:89:7c:05:4f:f0:3a:
95:72:96:f6:7e:af:62:51:d7:67:02:fc:f3:0e:20:20:37:63:
16:9b:7a:24:3a:a5:20:38:ca:13:26:f7:19:1d:58:38:d6:89:
0b:e3:96:a9:cf:09:67:19:6a:aa:27:61:f4:c5:f5:6f:ff:2b:
1e:5c:96:cd:31:b7:8d:d5:32:07:d4:f3:39:b8:cd:ba:78:64:
bc:2a:65:30:ea:3d:fa:ef:58:24:de:29:66:28:da:33:7d:fe:
51:e1:cb:ba:1f:00:fe:0a:27:0d:96:be:da:79:c5:56:f9:09:
81:df:a1:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBERUIxMTAvBgNVBAUTKDEyOTZFN0VCQkUzMDExM0ZFMUQzRjI5NzMwMzNBNENC
MzExNDQ4MUQwHhcNMjYwNzIzMDQyNDIwWhcNMjYwNzMwMDQyNDIwWjAYMRYwFAYD
VQQDEw02YTYxOTc3NC1jY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2/CeYDawLIa97f75ToS/5csT7b9nUlgkDboggF0rNEq1oTOKO4Rdz7tw8xq
umQsswEM/EoJ3XKDp61pWi+gg8f/m6p8OyKGnQ/+c382SP2je465fbRqFr1qLPCd
BUNxughz6uJRekNjl/g3mVMPSYg004c3GaYLiqp9zI3LJAwLi49ie34yMe5B7buB
DUYreM9Pj9a4O6kAtWrpCk6YvnTWTM+6m5JnkGyJzpI6IXLaahE23xpIzuk24ohk
YCjYxtMamkzbAPyPquX1TyllGMWhg5vR+vYdbVw+YpSlIP1ZfDs3hKyp9mEDHU4I
+l30rCrB+DCd8pkt2JjsNWc3sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoAONNN
TmJWcZ06PT/qVKzfQmtKMB8GA1UdIwQYMBaAFBKW5+u+MBE/4dPylzAzpMsxFEgd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERFQi9BMzMxRjQ3NDcy
NjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VUX2gwX0tYTURPa3l6RVVT
QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNCMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VU
X2gwX0tYTURPa3l6RVVTQjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAUFTapQuo1F+1d6Ibv8u//0bzJ8r5Q4Ot7syRXIlJnlIcXrtJPuGkeW17uSn
Qc2TiRXCj/tuFyqTEmF0U5prVB378zsGkaAOMLJXPncxVqCDtoPn1w6l5DgVY0Md
A2PPqrIgbyu/DxzHugBvPv0svx0LFTSdDxGG698RaTyRCrc6RzF7KPIIZfTciXwF
T/A6lXKW9n6vYlHXZwL88w4gIDdjFpt6JDqlIDjKEyb3GR1YONaJC+OWqc8JZxlq
qidh9MX1b/8rHlyWzTG3jdUyB9TzObjNunhkvCplMOo9+u9YJN4pZijaM33+UeHL
uh8A/gonDZa+2nnFVvkJgd+h+g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:08 2026 by rpki-client