
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
File: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft (raw, json)
Hash identifier: J77kgdc3IvbcqZ2AdSKgGyCKkG0twdSNJ897mHj3pic=
Subject key identifier: F8:A5:13:66:55:D0:B4:48:76:07:A2:D2:AC:F9:E2:0C:E0:97:C4:30
Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
Certificate issuer: /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Certificate serial: 85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
Manifest number: 81
Signing time: Wed 25 Mar 2026 06:55:59 +0000
Manifest this update: Wed 25 Mar 2026 06:55:59 +0000
Manifest next update: Wed 01 Apr 2026 06:55:59 +0000
Files and hashes: 1: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl (hash: h/n5j6ehqkEwUxC3haNhXLnXpmlDwStU7ukJKrNt0n0=)
2: 06239BF2677111F0BB789073C4F9AE02.roa (hash: ZQ/BdX/5Q3geNUAzu42OIAmZumGNrffiueKHNoVmkq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Validity
Not Before: Mar 25 06:55:59 2026 GMT
Not After : Apr 1 06:55:59 2026 GMT
Subject: CN=69c386ff-af14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:cc:73:2f:95:de:97:22:07:af:73:d7:d4:
8f:2d:1a:db:5c:fb:f4:d0:40:82:b5:3b:82:e7:12:
cd:0a:f1:42:50:8c:15:e8:66:a7:29:00:18:01:23:
5b:c6:d3:a2:d3:20:c3:ba:0e:35:a5:ee:4f:39:60:
59:59:6a:59:20:cc:6a:f0:29:78:79:6e:1f:69:41:
0b:94:66:68:4a:d7:31:e3:1c:f8:7b:96:97:c8:4d:
28:0a:19:e4:ee:a2:f4:79:88:e8:bd:f9:b3:e0:cc:
c5:db:83:69:1e:63:e5:bb:39:7e:b1:73:53:97:49:
4a:20:ac:ee:59:fa:10:d3:53:c1:d5:74:05:3c:fb:
03:72:e3:39:45:a3:7d:26:be:ec:87:e7:99:be:f8:
c5:c9:c8:34:e2:e8:a7:03:02:a1:e3:68:a2:e0:92:
1b:74:18:ec:07:dc:3a:3f:37:de:2f:1e:b9:c0:31:
a4:e2:98:03:44:2e:3f:db:3b:64:c8:78:d6:13:16:
6a:1a:93:5b:4b:75:0f:a1:41:b7:4e:12:8f:fe:66:
47:f3:98:07:83:f1:27:be:e7:d6:69:cd:f9:fc:a1:
d9:20:d4:67:f4:a2:db:e5:a5:48:95:f7:5d:59:42:
be:f8:eb:28:a7:a7:61:3c:87:9d:dd:4d:79:32:ad:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:13:66:55:D0:B4:48:76:07:A2:D2:AC:F9:E2:0C:E0:97:C4:30
X509v3 Authority Key Identifier:
keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:2b:b6:de:f7:08:05:b9:a9:74:80:e5:fe:93:5e:32:72:ee:
b8:45:8c:51:55:9f:33:ee:32:6a:da:9e:fb:09:ff:ca:16:52:
d0:00:fa:9f:6a:51:d8:0c:32:4d:56:16:00:8a:96:8f:32:36:
6d:b3:d9:76:05:20:93:ce:3f:96:08:46:b1:38:f5:c1:d2:1f:
d7:7f:09:e5:78:48:c5:7f:6c:bb:df:d2:22:bc:c8:12:f9:3f:
e9:bc:d4:12:60:00:6e:97:70:ad:ae:ea:b6:ca:5e:44:63:3c:
4d:b1:eb:85:ef:65:0e:65:d4:38:84:50:f2:5c:81:c3:f7:e5:
a1:a4:a0:5d:f1:7a:23:e0:07:78:68:04:8f:70:12:5e:98:e7:
cb:21:43:49:a9:a0:25:65:2b:0e:03:b4:cf:74:e5:b8:a7:f5:
25:2d:b8:4b:80:a3:94:31:c1:d3:64:58:09:0c:a3:3c:d0:3f:
6b:1a:80:5d:3b:f3:f8:5f:4f:e3:79:88:c6:d2:fd:a1:06:b4:
35:cb:83:5d:43:56:67:30:62:7b:4e:fb:13:b9:f3:a1:4e:bf:
e4:4b:da:e9:cc:b0:a6:43:46:53:71:93:23:ae:ba:87:ac:cb:
8c:74:ca:c7:d6:e9:91:b5:b3:21:5a:ef:62:8e:f4:f6:d3:e6:
b4:03:00:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEExRTcxMTAvBgNVBAUTKDc5QkE1MUQ5NkJGREMzMTNDNzg4QUVDMzMwNzNDOTY5
OEU1RDAxQzIwHhcNMjYwMzI1MDY1NTU5WhcNMjYwNDAxMDY1NTU5WjAYMRYwFAYD
VQQDEw02OWMzODZmZi1hZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1cLMcy+V3pciB69z19SPLRrbXPv00ECCtTuC5xLNCvFCUIwV6GanKQAYASNb
xtOi0yDDug41pe5POWBZWWpZIMxq8Cl4eW4faUELlGZoStcx4xz4e5aXyE0oChnk
7qL0eYjovfmz4MzF24NpHmPluzl+sXNTl0lKIKzuWfoQ01PB1XQFPPsDcuM5RaN9
Jr7sh+eZvvjFycg04uinAwKh42ii4JIbdBjsB9w6PzfeLx65wDGk4pgDRC4/2ztk
yHjWExZqGpNbS3UPoUG3ThKP/mZH85gHg/EnvufWac35/KHZINRn9KLb5aVIlfdd
WUK++Osop6dhPIed3U15Mq3kuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPilE2ZV
0LRIdgei0qz54gzgl8QwMB8GA1UdIwQYMBaAFHm6Udlr/cMTx4iuwzBzyWmOXQHC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTFFNy85QTY2NzU3RTY3
NzAxMUYwOTNEMTc0NzJDNEY5QUUwMi9lYnBSMld2OXd4UEhpSzdETUhQSmFZNWRB
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VicFIyV3Y5d3hQSGlLN0RNSFBKYVk1ZEFjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTFFNy85QTY2NzU3RTY3NzAxMUYwOTNEMTc0NzJDNEY5QUUwMi9lYnBSMld2OXd4
UEhpSzdETUhQSmFZNWRBY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAViu23vcIBbmpdIDl/pNeMnLuuEWMUVWfM+4yatqe+wn/yhZS0AD6n2pR2Awy
TVYWAIqWjzI2bbPZdgUgk84/lghGsTj1wdIf138J5XhIxX9su9/SIrzIEvk/6bzU
EmAAbpdwra7qtspeRGM8TbHrhe9lDmXUOIRQ8lyBw/floaSgXfF6I+AHeGgEj3AS
XpjnyyFDSamgJWUrDgO0z3TluKf1JS24S4CjlDHB02RYCQyjPNA/axqAXTvz+F9P
43mIxtL9oQa0NcuDXUNWZzBie077E7nzoU6/5Eva6cywpkNGU3GTI666h6zLjHTK
x9bpkbWzIVrvYo709tPmtAMA6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:58 2026 by rpki-client