
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json)
Hash identifier: tzi2fMnd5GaBv82pFzy4k7LCwVQH6CtiUq2sydRJgyg=
Subject key identifier: 25:62:3E:E4:01:14:A6:00:6A:FB:63:5E:8A:08:1C:B5:C8:D8:37:A4
Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Certificate serial: 047A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
Manifest number: 0461
Signing time: Tue 24 Mar 2026 23:51:25 +0000
Manifest this update: Tue 24 Mar 2026 23:51:25 +0000
Manifest next update: Tue 31 Mar 2026 23:51:25 +0000
Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: UW9e/kaMwcIMSkKypyMsgZJIqEhm7QyL6i7yZqQsD4g=)
2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146 (0x47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Validity
Not Before: Mar 24 23:51:25 2026 GMT
Not After : Mar 31 23:51:25 2026 GMT
Subject: CN=69c3237d-8d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:60:01:e8:16:c7:c3:59:da:af:79:9a:08:
bf:a9:32:bb:31:b6:71:45:c0:a2:47:2d:72:6e:1a:
91:2d:d1:c7:a6:2b:b4:69:ed:07:ca:03:f0:ca:a6:
27:b3:b9:9d:cc:19:83:b3:31:fb:1b:32:60:43:ee:
5d:0b:0c:41:c4:40:33:bb:9d:54:d0:a2:25:c2:56:
67:c3:c2:a8:4e:50:38:70:bc:df:e3:46:a3:3d:1c:
78:86:3f:3c:10:e8:20:6c:cb:e4:1d:e8:46:e5:9b:
1e:73:f8:89:b3:bf:cc:76:35:75:d5:92:e0:7e:0a:
2f:43:02:4b:8a:df:e4:7a:83:0d:e6:dd:95:60:92:
3a:df:1b:fb:22:69:97:65:20:47:26:8d:10:7e:96:
50:2c:60:37:c1:03:95:4a:b8:d0:c5:67:6b:1c:66:
4f:ea:50:60:23:35:fb:4b:b8:9b:3e:d1:c2:f0:55:
7f:99:c6:b3:1a:e6:05:13:a0:c0:13:21:6d:9d:64:
13:d3:4e:1a:e1:24:9d:85:72:b9:b9:b6:d6:3a:66:
eb:57:2b:85:00:34:84:cc:56:2a:73:66:9d:ad:98:
b1:72:b1:0c:d3:9d:56:4e:ab:29:da:a1:c2:45:45:
1a:22:10:cf:cf:6b:9d:88:0f:60:56:61:6e:ce:51:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:62:3E:E4:01:14:A6:00:6A:FB:63:5E:8A:08:1C:B5:C8:D8:37:A4
X509v3 Authority Key Identifier:
keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d9:12:d3:5b:20:c0:73:e4:85:c8:e1:c8:e5:f6:0b:5e:af:
71:43:91:20:82:b0:bd:a9:a7:c1:8b:17:93:d9:85:63:35:11:
2c:b5:6a:aa:ce:75:2d:6d:db:fc:c3:ff:aa:d2:ed:8c:7d:a7:
0b:79:bb:ee:ef:86:21:71:03:2b:87:4f:6f:e7:77:2e:6d:41:
89:7d:ab:04:f8:7f:fd:77:bd:72:2b:d2:46:1c:1a:81:af:9d:
0a:af:81:fd:26:86:77:f3:5e:d7:d5:1a:46:ce:f3:8c:9a:43:
44:7b:bc:bf:33:2c:6c:d8:4e:7f:ab:5e:4e:0f:e4:20:54:be:
b8:f5:e6:a0:a2:18:67:3f:da:5b:4b:a9:76:ca:b1:5b:bc:f8:
ac:3f:eb:04:e1:b0:dd:2a:97:91:f2:51:09:ab:cb:d2:7f:af:
db:4c:d4:22:ab:51:b4:4a:51:52:16:05:3c:ae:92:22:14:aa:
4f:64:f3:4e:f3:36:dc:14:2c:86:a3:21:2f:79:bd:d3:ec:8a:
93:75:78:aa:39:a8:4a:43:e3:6f:d6:cf:c2:09:c3:5a:83:2a:
30:d1:49:c9:93:d9:36:3d:c4:70:20:62:84:49:82:b1:9b:fa:
a3:b8:55:c6:61:ff:57:4b:ea:ad:7e:7f:79:15:5f:12:fb:99:
da:89:c1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:00 2026 by rpki-client