
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier: BjY4HzG6Z+8XMzTHNiW3SyGnF7tojOxDDv+NwCavOI0=
Subject key identifier: 03:6C:A8:06:79:84:1E:0E:72:C1:DF:45:6C:0D:C3:AE:2E:3A:36:09
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number: 07BD
Signing time: Tue 12 May 2026 22:57:45 +0000
Manifest this update: Tue 12 May 2026 22:57:44 +0000
Manifest next update: Tue 19 May 2026 22:57:44 +0000
Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: o9t+Ssnr6hb2DRS55YW2mzMSuOu5hNrhcruqQhxO8bU=)
2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: KSFUQns+jUtZXbMl5PwqohaAbLzaofo6YcJauiEke4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Validity
Not Before: May 12 22:57:44 2026 GMT
Not After : May 19 22:57:44 2026 GMT
Subject: CN=6a03b069-3a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:5a:66:56:2a:1c:0c:d1:cb:d3:c5:8a:79:
f8:19:5f:9d:fd:f2:75:0a:aa:58:07:95:be:9d:83:
ef:8a:91:56:52:f1:0c:31:a6:f8:f3:c3:8c:2c:49:
35:09:16:ce:21:15:a9:fb:a0:d7:90:12:fb:6c:3d:
98:d4:1c:67:a4:9c:40:81:b9:a2:30:4d:be:ae:c7:
fb:dc:f2:4b:53:64:30:f1:ea:24:b5:05:5f:5c:9c:
14:69:f3:7e:4c:d2:85:74:ed:af:e6:08:78:b0:14:
84:66:10:9d:ef:f0:ea:33:0c:5c:63:b5:2b:f4:38:
c1:34:35:7c:5e:fb:4a:1e:4a:d5:20:8c:cd:50:57:
00:ed:21:69:d4:9b:4b:f1:21:f7:c1:9d:5b:4e:f4:
fc:42:34:6c:01:06:08:a1:88:9a:ca:a3:ee:0f:16:
b4:45:d1:72:42:0d:81:5f:a2:83:e8:2e:07:a0:45:
5e:25:30:3d:eb:cf:14:0d:25:2d:92:5d:5e:5f:b5:
84:9c:e0:36:1f:e7:19:20:ae:91:2a:fb:f5:29:e5:
36:1c:be:35:6a:19:f2:2e:7b:ec:dd:04:69:ac:b4:
28:23:d3:69:84:6d:e9:f4:cf:12:dd:ad:43:6b:2d:
ad:1e:e9:2a:65:59:2a:3f:77:fb:9f:30:4a:ed:ae:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6C:A8:06:79:84:1E:0E:72:C1:DF:45:6C:0D:C3:AE:2E:3A:36:09
X509v3 Authority Key Identifier:
keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:0d:f6:dc:25:89:9b:5b:1c:1d:af:96:e9:df:6f:6f:2e:ee:
c6:41:45:a7:57:d1:8c:e4:e5:a4:f3:26:46:ad:da:68:37:7a:
f8:03:20:a0:d6:48:88:10:b6:7b:17:83:4b:e8:80:2c:1d:2b:
56:fd:f8:d6:33:2c:54:08:90:b4:09:84:e2:82:d8:f8:c2:bc:
d5:e5:3a:47:e1:fe:0f:80:55:96:7c:db:f4:4d:17:da:b4:ae:
c2:8f:e5:c0:6c:a9:a8:f0:68:86:34:bc:8a:ec:d4:55:17:2a:
12:01:8d:5f:1f:2e:53:ab:50:0b:5d:eb:1c:0d:46:1b:c4:f5:
65:d2:29:46:0e:7d:7e:24:5a:6a:12:65:f4:e5:06:5e:3e:3c:
31:45:4c:17:19:dc:02:a9:8e:13:d4:f5:b1:82:a7:e7:4c:10:
ca:64:0a:05:95:5b:cd:98:f4:6f:24:61:f5:34:02:02:3a:78:
93:21:b5:0c:c0:cb:07:da:a4:79:aa:ae:14:4b:d7:35:2a:20:
ec:d3:3d:dd:57:0d:9b:ea:18:ce:9b:19:8e:36:59:2c:59:86:
bb:34:f5:d0:55:67:14:1f:01:9c:65:1b:f2:07:51:90:d3:5f:
3b:15:50:ce:64:52:3d:30:2e:44:6e:7f:3a:36:84:ad:a2:a7:
f3:08:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:35:02 2026 by rpki-client