
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json)
Hash identifier: VKcuq5TDgUOLJ45DhLP/zCq8Ttxk6d2mf9FDjyJD5xo=
Subject key identifier: F2:BC:22:7E:6E:FA:2C:A5:CB:31:AB:EA:76:C0:44:62:6E:8B:1D:85
Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
Manifest number: 01CC
Signing time: Tue 24 Mar 2026 16:22:08 +0000
Manifest this update: Tue 24 Mar 2026 16:22:08 +0000
Manifest next update: Tue 31 Mar 2026 16:22:08 +0000
Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: lIGcy4/u+bqRYIFoXXocJmiF0U5nnV9TB015J/zZ0yk=)
2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: yEyjyfL4qmMdrXUNa8/FxH8a11hKOq88Y/fK6pSWFOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl
rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Validity
Not Before: Mar 24 16:22:08 2026 GMT
Not After : Mar 31 16:22:08 2026 GMT
Subject: CN=69c2ba30-0434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:1f:88:25:52:02:80:23:82:98:16:37:4d:
3c:7b:e7:f8:a4:e5:61:a5:b1:b8:ff:8a:2e:5d:ac:
c5:58:46:5d:78:aa:e1:09:28:5f:96:ff:2e:b6:80:
0b:05:ea:a9:52:a9:0d:e1:70:80:fb:91:f1:52:ba:
5e:3c:29:4d:74:af:a0:36:33:2b:0c:f0:05:b2:23:
46:3c:2a:fb:f4:71:7e:ef:37:ae:7c:11:f2:53:63:
75:5d:2c:cb:08:3b:89:73:19:fd:25:66:5e:25:dc:
fd:e1:49:cd:b8:89:d5:cf:d3:0b:4c:bc:4c:c2:fb:
68:18:f6:60:ae:34:3b:b7:75:bf:54:86:ff:d1:e6:
ea:c7:74:8b:3d:c9:12:8d:d8:6a:ac:64:b3:9a:31:
c1:3c:e9:72:3f:75:fd:7a:82:fa:fe:1c:89:ea:49:
d2:94:e2:c5:28:57:de:47:34:1c:4a:ad:b4:62:78:
3f:f0:87:da:5b:d0:70:c1:ae:7a:ac:70:35:b9:f7:
dc:3e:83:6a:91:5e:9e:d8:c6:7d:db:cc:b1:2b:ad:
71:30:e3:11:7e:bb:bf:3a:c1:03:e6:25:4b:88:82:
3a:f0:35:dc:df:cc:49:cc:b3:1b:59:c5:46:f3:61:
d2:47:26:ea:23:14:78:26:f8:4a:34:67:51:e0:83:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BC:22:7E:6E:FA:2C:A5:CB:31:AB:EA:76:C0:44:62:6E:8B:1D:85
X509v3 Authority Key Identifier:
keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:b3:20:7e:24:ee:bb:4f:ab:4f:6b:aa:78:b0:d4:6f:8e:04:
ab:e1:16:eb:d3:b4:fa:95:2e:f7:a9:d2:4d:cc:77:77:a2:76:
72:42:be:eb:09:cf:21:aa:94:35:bf:fe:a6:cf:f6:62:cb:33:
7a:6f:63:db:95:6f:cf:28:00:c4:ad:a5:53:3b:c6:77:b5:03:
fa:30:23:96:87:e7:c5:e3:4d:04:09:ad:39:6a:2a:f6:49:9d:
f7:3b:db:7e:55:23:01:5f:67:1d:3e:43:7f:58:4e:2f:cd:9b:
9f:e3:ef:49:62:3a:f8:a1:da:5e:69:26:31:d0:c9:13:72:c6:
bc:48:84:ea:c1:16:82:78:60:15:f9:4d:9e:31:8c:ea:57:b2:
31:10:c2:05:28:54:bd:60:c1:11:c7:99:5d:65:c0:1d:d3:d4:
ad:9b:84:60:d2:60:a3:d3:56:0b:fb:e9:13:a7:37:03:a4:a6:
7b:ba:3b:67:a8:68:08:32:a5:07:90:10:77:ce:bc:7b:29:cd:
e9:d8:04:07:2c:e4:77:7f:95:62:7c:49:8f:c1:14:a0:d5:84:
51:fb:d0:4b:b3:98:3c:2a:32:0c:ea:52:7b:33:0b:ae:7b:c6:
a2:b1:46:62:d7:0b:0f:59:28:1f:69:46:83:ef:8f:7a:30:1e:
db:11:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:03 2026 by rpki-client