
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
File: _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json)
Hash identifier: R+5jwNGGKdTY/vRBNrHHfU2L+9/hgLEVAFednsTLppI=
Subject key identifier: 4E:68:C3:E5:D4:31:44:D0:8A:68:8E:A8:91:EE:7F:10:07:D3:3D:E1
Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95
Certificate issuer: /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
Manifest number: 69
Signing time: Wed 13 May 2026 08:04:23 +0000
Manifest this update: Wed 13 May 2026 08:04:23 +0000
Manifest next update: Wed 20 May 2026 08:04:23 +0000
Files and hashes: 1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: 95CbNzxlFYG/5E3QZiVfWP0JxjCZbfe7cCXpfgRI800=)
2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: 0eYQs4+CcW1n3DAWa3b99gSSE/qKrGxFztudMbxy8B8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl
rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895
Validity
Not Before: May 13 08:04:23 2026 GMT
Not After : May 20 08:04:23 2026 GMT
Subject: CN=6a043087-7162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:d6:5f:04:f2:9b:99:24:16:41:51:0b:d6:
94:f3:c7:cf:ad:8b:9b:aa:b3:f5:57:f5:a1:27:1f:
42:ce:88:43:cf:78:43:b0:0d:7b:87:32:e2:ad:c4:
2e:db:3e:fb:3d:92:a2:6c:3a:b1:75:a4:4b:9e:36:
59:e0:04:a3:ee:2b:30:3f:64:25:8a:3e:ed:fe:cd:
fe:2a:85:b5:11:28:c9:4c:50:17:c1:f5:6f:31:b6:
e9:2a:99:96:a3:b1:61:e3:e5:0a:65:e7:0c:01:5a:
32:54:80:d9:33:39:87:1e:48:fc:ef:6c:ef:c7:6d:
d2:bb:cd:ba:6c:81:0c:fb:53:c8:c5:23:52:dc:c0:
e5:a4:3a:fa:d0:1e:7b:36:a0:0f:10:9d:dd:e8:61:
4b:5e:04:96:e6:de:62:a5:a9:7a:bb:2f:9f:ca:57:
17:c8:c4:a4:5c:7e:5b:0f:5b:c5:71:30:20:62:08:
03:fa:0b:9f:fc:c7:24:aa:0d:df:c0:54:08:23:8c:
1f:a0:30:12:12:c6:48:c3:0f:9e:18:5e:f6:15:69:
a9:69:ea:8e:21:a1:05:8d:67:9b:c6:36:33:52:3a:
36:9c:09:3d:48:bf:62:18:1b:d8:8a:5b:a0:59:bd:
d3:06:71:3d:1e:3a:37:53:de:12:3d:91:4b:d2:e3:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:C3:E5:D4:31:44:D0:8A:68:8E:A8:91:EE:7F:10:07:D3:3D:E1
X509v3 Authority Key Identifier:
keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:40:e8:96:19:cb:4f:e9:97:31:de:ea:50:38:ca:4d:17:43:
b3:c7:4e:ae:2f:eb:e1:ff:82:f7:c8:a4:ac:a8:e6:b4:36:35:
df:06:b9:ed:8b:b2:b5:3c:41:30:70:1a:c0:ac:d9:c9:42:e0:
e6:93:81:63:8c:29:fe:15:29:4f:46:4c:96:9b:f2:fe:4f:85:
e9:27:55:72:a5:2e:ea:be:23:39:ac:57:5a:5b:d2:fb:21:a0:
38:70:a0:19:fa:27:24:a2:3c:2f:20:86:55:2d:bd:4f:29:e4:
c8:5f:19:c2:a9:9a:25:be:d9:02:d2:fa:bb:21:fe:c0:9a:5b:
c8:ea:2d:cf:c3:7d:b4:cb:63:a8:42:26:a0:36:da:5d:f0:da:
59:1e:dd:a7:5f:bb:a3:2a:c7:b9:7d:8d:d5:a9:4a:91:99:15:
f8:80:ff:29:e0:c6:f4:1a:74:55:b8:b2:e0:31:60:2a:7f:b4:
3d:11:ca:61:3c:5f:c5:e6:2f:3c:25:19:1c:2d:5e:dd:1e:6d:
72:d0:89:62:84:04:9c:a1:6a:70:80:5f:de:c9:38:d1:4e:e5:
1f:1c:b4:29:10:ee:ae:9f:12:d9:72:5e:87:ad:1a:0a:d6:2d:
cf:33:8d:b1:ae:1a:57:5e:a9:e4:96:4a:e6:7c:41:0c:92:e1:
6c:7b:75:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:01 2026 by rpki-client