
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json)
Hash identifier: cWhDXmjjNCPiG0pfFC4rui4q1S/ZhOsyOs5W7p5CsRU=
Subject key identifier: 39:C9:7C:40:B8:AD:2C:0B:FE:6A:3E:DB:11:B3:03:99:64:9C:51:24
Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Certificate serial: 0493
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
Manifest number: 047A
Signing time: Wed 13 May 2026 00:12:58 +0000
Manifest this update: Wed 13 May 2026 00:12:58 +0000
Manifest next update: Wed 20 May 2026 00:12:58 +0000
Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: WH7bxTkz4TOX5xeTSBmefm3HmlWpfNNZE0kdVjq1QjM=)
2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171 (0x493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Validity
Not Before: May 13 00:12:58 2026 GMT
Not After : May 20 00:12:58 2026 GMT
Subject: CN=6a03c20a-0b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:01:c0:c4:3d:e6:a1:c6:89:84:62:9f:4c:
90:ee:fc:67:83:3c:1d:00:98:60:8c:94:57:3a:7f:
4c:24:88:ee:cb:ea:42:e2:c3:9c:7f:21:60:bc:35:
62:fc:50:d6:37:35:24:ff:8a:f9:8b:ce:dd:5f:ac:
e7:ba:01:be:66:98:06:48:31:31:48:8f:5d:6d:ba:
42:ca:59:b5:13:42:52:24:17:65:3a:f7:4e:4f:d1:
d8:35:06:b9:0d:a2:ed:3c:63:db:30:09:1b:ae:8a:
63:a8:08:07:70:bc:c7:07:f6:a6:ff:0b:5f:4a:d0:
5d:f6:21:11:56:a4:75:d7:ae:12:23:92:d3:f9:ca:
b6:b4:21:9c:58:30:2f:48:ba:3d:f9:a8:66:fa:39:
23:93:8b:ff:e8:23:52:15:33:92:e4:16:88:3d:a7:
15:4e:34:d6:a3:31:61:cd:a6:c5:17:58:7b:50:0c:
7f:ee:f9:a1:b4:0f:1b:c8:8b:f7:48:a2:b4:ec:72:
b1:ff:cc:69:27:9f:3e:51:c0:4b:06:d0:81:8a:81:
84:f7:a4:10:5b:d1:53:da:45:48:a8:84:01:99:51:
c2:72:a4:95:cd:b3:f2:a2:ef:92:a1:8f:4a:c6:58:
0e:5d:c1:22:cb:e3:1d:17:30:6c:98:aa:19:e7:00:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:7C:40:B8:AD:2C:0B:FE:6A:3E:DB:11:B3:03:99:64:9C:51:24
X509v3 Authority Key Identifier:
keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:39:9b:38:8b:95:80:35:cd:b4:ca:6a:00:58:0d:35:87:89:
50:0c:16:75:5f:45:01:1e:0b:fb:bf:8d:1a:00:96:00:f7:6b:
4d:38:56:8b:5d:11:ff:5b:92:4c:66:3e:7b:00:bc:67:97:22:
6c:76:a3:3c:8c:4a:3d:51:e6:90:2d:3c:24:b4:8d:9b:03:ec:
81:3c:eb:42:21:ff:3e:82:53:80:c8:12:d2:e9:5d:22:b4:25:
c6:45:a9:75:ef:ac:c7:c8:57:2a:e3:c5:c5:6a:2d:d3:a1:e6:
67:ef:d4:8b:68:2c:12:b5:69:ae:10:4e:2f:20:fd:85:57:ae:
41:00:db:dc:84:51:4d:b9:fa:42:c9:b7:ee:74:18:f4:0a:68:
7e:58:f3:51:00:65:b5:74:58:6e:a9:7b:62:47:9f:5b:f8:4b:
a8:c4:c6:38:c1:78:d9:cf:99:dc:aa:49:7b:ab:5f:22:c6:0b:
cd:ac:cc:c7:ba:0c:b3:17:c6:99:0e:53:15:5b:fc:8a:d2:33:
42:4b:b8:f0:e0:03:f3:02:d0:b7:98:5f:38:ba:c5:38:3f:4f:
ff:c5:c3:83:ca:d5:41:61:7e:de:04:98:42:6d:15:4d:86:e3:
37:f3:3d:23:4c:8f:bc:1c:71:ca:e0:4d:f6:d5:9d:f2:1e:53:
d6:94:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:08 2026 by rpki-client