
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier: JhTY4/soTguCXAfRmb6kAz0nlqdcboQI0kzuIazwZno=
Subject key identifier: 37:98:C9:B3:2B:49:40:9F:D1:D1:8D:30:FF:8C:AD:87:E1:FE:10:2E
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number: 01B9
Signing time: Thu 23 Jul 2026 05:22:50 +0000
Manifest this update: Thu 23 Jul 2026 05:22:50 +0000
Manifest next update: Thu 30 Jul 2026 05:22:50 +0000
Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: RdtQhxtSedKMTpt9yLJC7ANXrZ9D+cmbOPYi/VcIyj4=)
2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Validity
Not Before: Jul 23 05:22:50 2026 GMT
Not After : Jul 30 05:22:50 2026 GMT
Subject: CN=6a61a52a-fedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:c9:9e:85:e2:6f:da:f3:37:f2:b0:f2:cb:
b8:2f:c6:fe:17:70:2a:75:ca:e6:b9:13:6a:c2:89:
d9:83:32:4e:4f:ac:65:bd:72:0a:ee:83:ce:09:ee:
52:41:d7:8b:db:3b:ac:28:5b:94:6e:a8:19:bc:37:
62:03:ed:b6:f0:7e:a1:f8:51:fa:c8:31:e3:77:9c:
c0:71:4a:ad:a5:7e:02:1e:a1:e0:e3:47:20:51:3e:
a0:38:48:10:d6:8d:17:12:d3:6d:9d:80:d8:ff:5f:
d7:f5:d2:c2:7e:8c:4c:d2:97:86:b2:10:f0:71:b5:
14:ec:52:7f:af:c4:2b:70:38:6f:f2:6d:37:42:f0:
5b:4b:fb:90:91:2d:c5:76:cd:53:ab:77:26:fb:5b:
dc:dc:51:fb:14:01:9e:21:51:c8:73:1e:b0:58:92:
fe:16:8b:de:dd:5b:cb:ed:3f:4e:b9:0c:3d:cd:e7:
a9:90:ff:e3:da:3a:2f:32:1f:76:74:0c:12:35:54:
f9:80:56:5a:69:1b:2b:49:b7:60:c6:70:54:3f:d9:
3e:e2:5f:b3:9c:b4:3c:97:46:80:30:a8:b7:84:cf:
15:d5:15:ca:bc:46:10:02:24:91:12:de:ff:dc:e0:
5e:8b:7e:53:2b:ce:50:e4:61:5d:be:70:38:6f:2b:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:C9:B3:2B:49:40:9F:D1:D1:8D:30:FF:8C:AD:87:E1:FE:10:2E
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:4b:74:de:85:ad:39:07:30:f5:70:c1:c5:d8:0a:da:ec:90:
67:bc:1d:b8:58:25:ef:51:51:f0:77:57:7f:d2:f7:9c:df:9c:
f7:3d:ec:c0:6b:39:1f:61:d3:0a:69:2a:6e:8e:9f:14:68:ab:
f9:97:96:11:ab:f4:6a:2c:3d:17:a9:9f:ef:4c:89:7d:0c:b3:
92:f9:c2:17:04:f7:3e:a9:5f:ef:ac:3d:92:87:03:c1:f4:24:
49:d1:5f:d0:18:09:87:9c:20:15:18:09:4a:38:10:f6:6f:ad:
93:b0:72:54:50:6e:c7:84:26:2d:ac:95:0d:9d:80:d6:66:88:
05:81:27:b8:d0:77:63:e0:82:ba:8c:03:ea:fe:a9:30:04:2d:
ac:4f:3c:44:f5:ac:26:7e:33:e6:2f:c0:88:fd:54:46:1e:dd:
13:42:5d:1a:7f:2e:cb:02:53:68:2b:b6:2a:88:0f:ef:fe:ee:
01:87:9e:ec:48:71:5f:a9:67:d7:8e:29:a5:a2:83:6a:c8:8d:
72:1b:59:f1:4f:4e:f7:68:d5:69:ef:49:74:0b:5c:5f:26:66:
9b:c9:a1:99:0b:a9:df:24:96:16:5a:b1:ed:e2:66:18:d3:c7:
91:ef:a9:74:7c:21:5a:2a:ba:24:9c:b0:4b:fb:15:35:da:01:
53:7c:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:39 2026 by rpki-client