
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File: EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier: cpzvHO/6UJI49RRqf9n/1cRUq4WAK4BsnG/s99Kcaf4=
Subject key identifier: 1C:6E:0B:1C:3D:76:66:3C:01:97:43:EE:36:F4:29:42:BC:92:29:6B
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer: /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number: 1A
Signing time: Thu 23 Jul 2026 11:01:11 +0000
Manifest this update: Thu 23 Jul 2026 11:01:09 +0000
Manifest next update: Thu 30 Jul 2026 11:01:09 +0000
Files and hashes: 1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: VZybtkopMf9t2/RTByzHwKjUtgWu9Cwo/EQbS+m4vJc=)
2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Validity
Not Before: Jul 23 11:01:09 2026 GMT
Not After : Jul 30 11:01:09 2026 GMT
Subject: CN=6a61f476-ec72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:fc:4d:d7:41:56:8d:c8:cd:9f:21:59:eb:
06:0e:37:b7:c2:a1:7e:07:a7:c6:5e:c3:da:a4:1e:
fa:7e:fb:9f:71:db:68:bc:66:de:64:c5:e2:35:bf:
c7:42:97:9e:e2:02:a8:a9:55:6e:16:b1:db:78:56:
e1:21:9d:18:7d:db:71:15:07:09:8e:66:e2:87:b8:
17:69:60:f0:4b:8d:8e:b1:44:c1:d8:4e:ac:f4:21:
d3:af:aa:51:2c:58:8a:17:1c:e6:af:7f:9f:ff:53:
45:80:86:0c:0a:b4:5b:d1:24:e7:d9:62:c9:4c:91:
73:93:7f:f7:e0:c9:3c:9c:e1:31:e6:e1:53:9e:d9:
42:0d:c8:76:b2:ae:d2:43:52:28:49:eb:70:4f:76:
48:35:8e:8f:6a:ce:36:ca:38:e7:18:53:34:ed:10:
77:e5:5b:eb:b1:df:19:00:2a:17:8f:02:70:51:b9:
92:6e:64:c9:73:8f:bb:f4:f6:69:21:72:24:00:4a:
42:36:9f:c9:0e:09:c0:21:60:3d:62:d1:ea:e4:ac:
e2:dd:8a:35:65:f7:b0:50:93:25:21:0d:4d:1f:88:
97:f8:a2:69:e3:1e:ac:32:a4:e4:85:6b:90:49:50:
42:bd:e7:b1:12:c4:23:af:04:06:1d:e0:f9:ef:10:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6E:0B:1C:3D:76:66:3C:01:97:43:EE:36:F4:29:42:BC:92:29:6B
X509v3 Authority Key Identifier:
keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:c9:1f:95:c4:4b:5f:43:d3:46:ea:c9:8e:c7:73:cd:af:
6e:ef:c1:ed:08:b8:de:2d:44:fb:96:46:a3:1c:6e:52:de:87:
5e:41:41:b2:03:9f:7f:30:c6:94:95:90:01:c3:eb:85:46:1e:
28:99:12:29:cd:00:e6:98:00:54:a8:e5:66:b7:58:98:9b:c5:
73:f4:0b:69:b3:35:41:3c:1a:d5:69:d9:34:2f:e9:36:d5:6f:
a3:b5:55:61:66:9a:57:0b:d0:03:62:df:33:84:a7:aa:f1:4c:
26:76:82:49:fb:9c:38:3e:39:e4:40:9a:1f:01:05:a5:7d:1a:
28:0d:70:47:af:6a:ed:31:a2:ee:29:5c:bb:3e:fd:a3:3c:24:
d7:39:35:ec:16:29:66:df:31:d5:3f:46:6b:7a:5c:0b:69:8a:
54:27:dd:fd:22:83:7b:2e:ba:52:9e:5a:bf:83:09:aa:92:f4:
63:a5:16:0b:3c:02:59:e8:29:ba:c1:65:ca:ff:01:6b:11:b3:
39:3d:9b:27:e7:87:ea:ac:ee:20:6d:8b:e2:38:67:48:4c:95:
e6:c8:5b:ee:a3:37:43:f3:62:ca:68:ef:c5:22:29:8d:58:91:
ec:60:4b:5c:9b:48:60:be:53:93:8d:0f:b2:6b:ae:b5:c8:9d:
04:ab:8d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:59 2026 by rpki-client