
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft
File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json)
Hash identifier: yurKxYJLlZO1+C/6UsErC7JdK1PBFxh6fQie3kAaUrY=
Subject key identifier: 74:8D:7C:C3:6F:B3:08:79:ED:D2:9B:47:89:47:F6:45:BE:92:2E:24
Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92
Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft
Manifest number: 01D4
Signing time: Fri 25 Sep 2026 03:46:47 +0000
Manifest this update: Fri 25 Sep 2026 03:46:46 +0000
Manifest next update: Fri 02 Oct 2026 03:46:46 +0000
Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: D5kuD7FRCU1Qhox2msWVo+3Uc0FvvamlJZrunQRk9K0=)
2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: phSGmEc2a3ws2qXRRrzbPA214VO9t93SrroXMLPZc4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl
rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292
Validity
Not Before: Sep 25 03:46:46 2026 GMT
Not After : Oct 2 03:46:46 2026 GMT
Subject: CN=6ab5eea6-9279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:7b:0e:0d:7a:75:dd:78:c3:66:4f:28:c1:
b2:d8:15:40:c9:a4:6b:67:3b:eb:c9:64:be:f4:03:
10:56:89:24:0d:70:c5:88:4d:3e:01:62:e1:ce:e5:
31:c6:f8:e6:16:9e:75:4f:fc:f4:f4:f7:cc:6c:ff:
9a:ae:be:59:6e:ba:07:6c:ce:1e:13:7c:53:ff:f4:
9b:8a:30:6a:7b:56:65:83:63:1e:29:d4:74:7c:ec:
78:a9:e5:0c:e8:2b:ad:6f:2f:9a:d0:d3:99:dd:bb:
7a:0d:8e:5f:b7:83:36:34:dd:51:78:d1:cd:9f:3d:
a7:39:3e:8f:ee:81:99:19:df:4d:6a:ad:45:c8:bd:
11:28:c0:3a:1d:b2:76:ca:b5:b1:b1:c6:44:6a:69:
9e:d6:80:5d:9e:23:f1:d1:21:88:ad:c7:4e:cd:25:
e2:82:96:b4:a6:04:6c:53:bb:0c:fe:31:59:11:11:
9f:4e:97:99:4f:e4:8d:e9:f9:cf:44:3c:16:34:3f:
c0:98:a1:f4:27:21:bd:73:e2:d4:5a:d6:8b:f3:29:
f2:ef:21:98:29:d8:9e:e9:7f:06:7b:61:70:61:04:
3e:08:46:e3:bd:7e:e4:67:14:96:55:ae:ae:f9:85:
ff:5b:63:e4:6d:06:ac:e8:e6:05:ca:2b:8d:36:22:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8D:7C:C3:6F:B3:08:79:ED:D2:9B:47:89:47:F6:45:BE:92:2E:24
X509v3 Authority Key Identifier:
keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:0e:f4:e6:ea:22:3d:56:95:39:80:9c:20:16:d3:59:03:f3:
97:44:98:72:a8:3f:ae:f7:eb:8d:95:1d:6f:73:32:4d:06:9e:
83:d0:8b:8c:2d:82:e5:1c:7d:5c:a5:bc:09:6a:7c:bc:9b:db:
08:4d:8a:8c:6a:52:d6:ac:aa:62:7f:71:fc:aa:86:70:ea:f8:
5c:14:25:05:37:a8:bc:85:ce:a3:4f:a1:21:d5:8e:6e:25:b4:
fb:23:6e:91:11:de:b2:25:2f:3b:1b:c0:e5:33:b9:f5:d6:08:
ac:28:99:1e:72:df:3e:27:e8:0a:21:3f:ea:c0:14:73:df:25:
d1:6f:73:21:74:1c:6a:ee:c3:6d:66:a6:a7:63:f3:bc:fc:bf:
63:c6:47:5d:5b:ed:fa:d5:03:25:e4:0c:96:bb:33:23:b9:9e:
9e:b7:d3:72:f8:27:8b:4c:a9:31:7a:f0:2c:df:a9:f0:48:06:
3e:b5:ad:d2:54:dd:3e:1d:51:1e:dd:90:14:e4:12:1d:75:84:
96:3e:01:c6:45:a3:df:56:0a:e2:c5:b6:2b:99:16:43:1e:c0:
3e:2e:29:d3:28:df:44:f1:d0:3a:bd:17:8f:46:85:aa:9c:06:
5d:8b:b3:02:33:78:da:c0:5b:75:54:6d:2c:f2:9f:32:60:eb:
5e:b8:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:50 2026 by rpki-client