
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File: EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier: Xm+p7NKrpThPObZqxBCzkE0AymA074HejGk/Ckc1dgY=
Subject key identifier: FC:17:EA:16:B1:81:E7:43:3E:B3:3B:CF:26:DD:9C:56:BB:3E:62:F6
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer: /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number: 3A
Signing time: Wed 23 Sep 2026 08:17:33 +0000
Manifest this update: Wed 23 Sep 2026 08:17:33 +0000
Manifest next update: Wed 30 Sep 2026 08:17:33 +0000
Files and hashes: 1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: Wjl5ypi9osDO2Rr9lecC3rrasGzzZ02SFrB2KXhcvUg=)
2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Validity
Not Before: Sep 23 08:17:33 2026 GMT
Not After : Sep 30 08:17:33 2026 GMT
Subject: CN=6ab38b1d-09ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:30:39:26:cf:1f:16:a0:ee:da:1b:f6:a6:
f8:23:05:66:50:43:12:b1:30:97:54:14:1f:28:73:
bc:16:08:f4:e1:d9:a3:f3:b9:95:f8:7e:32:73:f6:
77:b4:89:b4:94:cd:05:0e:37:e8:ab:d8:0e:fe:f0:
ab:f9:57:7d:3a:3f:f9:ce:c9:fe:57:25:ab:a9:91:
e0:63:36:b8:a0:90:58:63:8b:58:18:cf:e4:b6:69:
f1:c0:db:b4:6b:6c:5c:2b:03:84:c6:7f:46:c6:0e:
f7:b6:65:9b:f5:00:3f:94:f2:a2:22:b2:12:8b:a2:
53:37:aa:20:b5:8d:3c:ae:1a:bc:d4:cc:0f:aa:9b:
5a:6d:e6:9a:b8:69:46:f0:c7:b3:58:d9:8e:28:2d:
42:5e:a2:ce:99:8a:d7:d2:f5:e7:53:30:0a:2f:fd:
f3:a4:25:00:40:5c:88:e0:71:d4:65:15:71:05:db:
ff:28:a2:b0:40:87:96:db:cf:b1:08:0b:03:e0:5d:
21:8b:48:8f:ec:34:5f:58:39:e5:87:81:61:71:b7:
e0:3c:59:0f:dc:54:11:b2:d3:e7:2b:79:7b:69:8d:
fe:13:a0:8d:5c:38:8c:75:47:8e:5f:82:c4:ab:71:
4c:7b:9b:4b:d7:c9:c8:ea:41:07:2c:a4:6d:f0:0b:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:17:EA:16:B1:81:E7:43:3E:B3:3B:CF:26:DD:9C:56:BB:3E:62:F6
X509v3 Authority Key Identifier:
keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:0e:41:9c:b3:69:ea:99:73:0a:13:e9:e8:6c:9a:e8:a8:bb:
f3:80:7c:1e:1b:cb:34:c4:7a:07:33:10:fe:8d:58:e9:f6:1e:
0c:86:96:43:b8:30:eb:af:98:95:86:fc:24:2b:3e:3f:18:c4:
bd:54:20:63:cc:f5:c6:07:8c:1c:69:4f:7e:b7:2c:d4:2d:71:
46:e5:9e:77:90:5a:0c:46:09:7d:e1:f4:68:d2:4c:c3:da:52:
28:38:e3:e2:da:0f:19:09:46:c0:6b:60:75:65:95:c8:75:0f:
59:af:c2:8a:58:3a:16:50:1f:f2:50:bf:3d:48:e1:23:f8:17:
5d:09:b7:6a:23:3d:95:85:8d:04:66:0a:7a:3a:e4:d9:2b:33:
49:c6:56:2d:be:1c:6f:4d:d5:cb:cc:aa:c9:f3:b9:a1:23:70:
1f:a1:74:1d:91:a5:0c:e5:a8:10:af:5c:bc:fb:2f:87:61:cd:
2e:0e:a2:f4:c2:20:af:ec:e8:4c:84:16:1f:32:ba:0b:25:e2:
01:2b:01:af:ad:61:50:2e:87:af:0a:61:46:22:d2:c5:fc:3c:
a5:7b:1b:d4:6d:19:c1:85:9c:b5:42:29:b1:ab:c8:b7:7e:64:
0b:32:b0:b1:2f:61:47:16:45:a0:5d:a3:82:1e:41:41:23:45:
a5:6b:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:50:40 2026 by rpki-client