
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier: IgjtIdG2Xtkw2x83rEYjx82wIEi23RBqSVJr1ggwUWQ=
Subject key identifier: 20:2E:B5:51:2D:48:76:0F:1D:20:19:10:AB:F0:EC:BF:79:A5:B2:2F
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number: 01DD
Signing time: Thu 01 Oct 2026 04:30:56 +0000
Manifest this update: Thu 01 Oct 2026 04:30:56 +0000
Manifest next update: Thu 08 Oct 2026 04:30:56 +0000
Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: Rp/wGsfWv9hoy5bypt/8DQt3yd4qiROqVCugf8zupsg=)
2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 04:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Validity
Not Before: Oct 1 04:30:56 2026 GMT
Not After : Oct 8 04:30:56 2026 GMT
Subject: CN=6abde200-f25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:03:6d:3b:fc:c2:1c:30:86:dd:0b:dd:cf:
d3:6b:1c:68:ed:16:7a:6c:ef:37:11:dd:ed:50:4e:
6a:06:a5:27:13:d2:17:63:a0:c3:24:af:12:25:4d:
0e:76:89:72:6f:8e:fb:ef:be:93:f5:54:76:e7:b9:
54:08:52:a9:ca:27:50:f9:71:69:e0:36:04:bb:83:
38:87:99:78:89:23:1c:fb:60:4f:4a:a4:e4:6f:ed:
41:ee:e5:ab:2b:8a:11:d3:1b:d6:2c:48:ee:a5:35:
43:25:91:7d:da:91:1d:94:a0:f0:20:ca:d3:07:e7:
fd:4c:c3:63:ef:3b:ea:27:2c:77:0d:af:2e:d1:2d:
97:68:4a:fb:e8:86:6a:d9:f3:b2:7a:92:20:d6:ba:
51:c4:a3:d7:14:0b:00:31:0a:2d:eb:93:75:21:5d:
a4:38:32:61:14:62:aa:ab:39:c8:9c:c4:bf:b6:58:
e7:1b:0c:ff:3f:9d:71:26:84:d4:d3:48:79:3a:93:
b1:fc:af:70:96:cb:bd:9b:fc:47:26:62:4d:50:fc:
1f:72:31:8e:b5:ad:93:d9:f2:38:7b:9c:11:f4:55:
d2:c1:2b:a8:d2:d9:2d:1a:81:c2:4a:b7:f9:a7:9a:
df:9d:9c:40:1e:1f:2d:57:93:fa:04:3a:46:37:11:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:B5:51:2D:48:76:0F:1D:20:19:10:AB:F0:EC:BF:79:A5:B2:2F
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:1c:eb:67:a0:63:77:b9:b3:ef:7a:a5:a1:ec:32:5e:e0:46:
fa:44:1c:24:2c:47:b3:87:30:99:3f:19:ac:5e:6a:b4:bb:4d:
90:6d:b3:b4:ce:f6:7b:a8:cc:c0:6f:65:99:b4:28:46:b3:48:
64:00:0d:9c:e5:05:18:ce:e3:f9:fd:7a:0c:89:f9:3e:53:dc:
b0:4d:70:9b:ad:47:02:b6:75:07:fb:e8:3e:a5:ec:06:01:f5:
a1:3f:02:51:6f:12:0b:32:31:6e:b3:a8:da:4d:dd:05:c1:81:
20:89:9e:87:d9:bd:da:18:14:46:8e:e0:e8:98:96:e3:6a:7f:
9c:05:97:e0:7e:bf:da:6f:f8:3d:95:12:f1:fc:18:f9:87:1a:
88:b8:ca:a6:3f:84:93:9c:f5:cd:8d:8c:90:69:2a:46:50:fc:
34:90:e7:2f:61:70:33:0e:9b:02:19:7e:23:a7:be:df:f6:98:
16:2b:5b:f8:91:61:43:16:d5:06:77:04:8f:35:0e:1f:aa:6a:
07:ac:9d:9a:1e:93:11:08:c1:43:c6:ef:98:14:20:97:ac:13:
93:a5:fb:0b:46:45:0f:76:3d:b9:fb:d9:9f:f5:cd:f7:8b:99:
c6:e0:5e:29:bf:8f:18:01:8e:ee:d7:c9:91:20:c0:e2:82:b7:
61:e7:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:45:56 2026 by rpki-client