
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
File: 0ewZe9sNlRk40e71SWoRrMoCiO8.mft (raw, json)
Hash identifier: OwCfMGbGSA3jRLZINg3T75vqNkZINGD4PtztlEdDm4Y=
Subject key identifier: F2:A7:97:96:89:E7:C7:66:25:94:48:6A:AD:B4:FD:B2:FF:AD:70:8F
Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
Certificate issuer: /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
Manifest number: 96
Signing time: Mon 11 May 2026 07:36:40 +0000
Manifest this update: Mon 11 May 2026 07:36:40 +0000
Manifest next update: Mon 18 May 2026 07:36:40 +0000
Files and hashes: 1: 0ewZe9sNlRk40e71SWoRrMoCiO8.crl (hash: JGUahzF8thkXHpc/cJNPVqoJNn77UKWPiWBpwk63RVU=)
2: ACFE803469E911F0A7D42F68C4F9AE02.roa (hash: +DP6MilESaiHYhOyYqOuZcz5QFs57aj6iwKoYbBinoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Validity
Not Before: May 11 07:36:40 2026 GMT
Not After : May 18 07:36:40 2026 GMT
Subject: CN=6a018708-bbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:4b:a0:3a:a7:1e:c9:36:83:ba:4b:04:02:
42:ef:79:4e:f6:02:1b:56:5b:d5:06:d7:4f:ba:d7:
e8:be:08:a0:66:4b:98:dc:ca:92:c4:f0:d3:77:7e:
2e:c0:39:1e:23:67:a4:ad:b6:ec:a5:8b:f7:4e:d1:
7e:be:24:52:a7:91:7d:ff:8b:8e:29:88:d4:6b:c8:
40:f0:df:8d:e2:c5:6a:fe:e1:87:f3:f1:61:df:32:
b4:08:87:3c:80:74:5c:34:7a:01:fc:6e:e5:27:79:
c1:e3:5d:fe:21:95:f4:97:cc:75:01:c1:7c:9d:89:
31:73:42:b6:48:99:ac:be:04:4c:f4:f9:46:41:bc:
9e:93:47:4d:3b:d3:a8:dc:a0:9a:ad:fb:30:89:3b:
58:50:f7:27:c7:df:61:8a:6d:04:07:ec:8b:bf:75:
1a:49:06:70:41:3a:6a:b1:d9:99:d5:0e:70:c8:78:
42:b9:bd:8a:8b:95:d7:84:b2:4d:9a:cf:53:54:c3:
11:39:f0:67:f8:da:ac:02:ca:25:7e:29:15:70:9a:
78:31:fa:88:86:b9:a0:26:05:fc:a0:b3:15:fa:50:
e2:65:b8:3a:96:79:17:56:c6:13:c3:fd:01:11:5c:
34:0e:0a:4f:18:94:23:06:fc:fd:c4:6f:70:1c:82:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:97:96:89:E7:C7:66:25:94:48:6A:AD:B4:FD:B2:FF:AD:70:8F
X509v3 Authority Key Identifier:
keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:df:cf:70:f6:9b:31:f5:f5:cf:c1:62:27:6e:59:64:f3:da:
3c:9d:ca:d6:a5:fc:d9:8b:1e:1c:4c:77:8f:1f:3b:77:5d:87:
8c:21:d4:f2:8f:b6:eb:d6:06:ac:08:34:e9:11:b5:fd:60:ac:
e7:74:77:47:e0:55:62:5e:b5:9c:27:35:d6:9c:e8:48:e8:dc:
30:be:64:98:52:79:65:8f:3a:ce:14:4d:5e:f8:b4:f6:d9:df:
14:a3:c1:01:2c:ed:5c:d4:d2:07:67:1b:3a:54:e0:e1:68:af:
86:21:69:d9:6e:8f:df:b7:3c:bf:aa:10:b1:41:81:13:3b:13:
5c:4f:bc:0b:84:f5:14:ee:ab:d2:9b:64:ed:a6:35:6c:ae:b1:
35:fd:83:0e:b2:9c:71:1d:78:eb:23:1a:f7:3a:94:29:55:e5:
ff:6e:93:6a:fd:b3:7f:80:1d:d5:4f:1f:a6:df:f1:3c:76:4f:
3d:21:5e:1d:9b:4d:a2:b9:46:7b:08:be:50:53:14:27:c0:fd:
05:1e:26:52:0b:fe:55:0d:cb:4c:26:93:0a:42:3d:b7:05:67:
c0:b9:ce:a5:1b:b5:68:f9:25:a2:8c:dc:65:6a:dc:75:ec:b6:
92:23:ca:0a:ac:f0:40:79:28:5e:07:2f:4d:b9:b3:bf:8b:79:
a0:ec:8c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:19 2026 by rpki-client