
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
File: 0ewZe9sNlRk40e71SWoRrMoCiO8.mft (raw, json)
Hash identifier: 2Ifa7hE9BLUtDjlm28kj1llV+vOBo3RQb/eQ0PVswGw=
Subject key identifier: B2:D3:F7:F5:C3:82:5F:DF:06:BF:F0:8B:1E:E5:6E:66:A2:8C:0F:8E
Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
Certificate issuer: /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
Manifest number: BA
Signing time: Thu 23 Jul 2026 08:52:23 +0000
Manifest this update: Thu 23 Jul 2026 08:52:22 +0000
Manifest next update: Thu 30 Jul 2026 08:52:22 +0000
Files and hashes: 1: 0ewZe9sNlRk40e71SWoRrMoCiO8.crl (hash: VKH/DrM4ot2SfIHw5QWfO/LhRvaehog01WknvnTJr78=)
2: ACFE803469E911F0A7D42F68C4F9AE02.roa (hash: +DP6MilESaiHYhOyYqOuZcz5QFs57aj6iwKoYbBinoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Validity
Not Before: Jul 23 08:52:22 2026 GMT
Not After : Jul 30 08:52:22 2026 GMT
Subject: CN=6a61d647-1bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:83:fd:4b:f9:ef:4d:cb:c6:8a:f0:d7:42:
43:03:32:ca:b6:2e:f3:49:c7:3b:48:73:22:8c:d1:
bd:ef:c8:5c:4b:28:2e:2e:79:5b:c5:48:e3:b5:52:
21:e8:50:91:ab:ae:e5:ad:de:64:d9:9d:73:bd:7f:
ce:3a:30:0c:16:09:8a:80:2c:a9:d3:b5:31:21:64:
b8:7d:e1:6b:72:15:c6:12:94:0e:50:c6:2f:d7:4c:
8b:4b:99:8b:33:e7:96:ea:20:26:2b:96:ac:a8:3d:
1a:1b:64:0e:4a:a0:10:32:8e:53:b2:1f:c6:c0:52:
d7:47:df:6f:d3:94:de:ff:30:a5:67:ce:6f:18:8c:
24:1c:ba:42:6a:71:b1:9b:9a:71:d0:38:47:f4:41:
81:39:02:87:a9:da:6f:a7:3b:ec:9a:49:73:e5:70:
03:99:06:b2:04:49:c6:45:99:27:c8:95:22:df:d4:
b4:85:8a:ef:87:8a:d3:35:56:4d:a1:ad:a3:19:a7:
99:50:88:1c:57:9f:f5:e3:ec:12:ca:9f:a7:02:a8:
fb:59:8f:e6:9e:40:64:d7:4c:1a:81:8c:15:22:6f:
75:1f:5c:b2:93:80:65:c3:a4:cc:9d:8b:96:62:33:
b0:16:d8:7f:a6:d1:28:84:89:da:d2:32:30:a5:ba:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D3:F7:F5:C3:82:5F:DF:06:BF:F0:8B:1E:E5:6E:66:A2:8C:0F:8E
X509v3 Authority Key Identifier:
keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:19:44:37:05:6e:74:ba:a6:ba:6d:68:66:86:cf:9e:dd:ae:
e6:85:97:69:f6:52:a9:4e:86:12:db:05:47:e7:c6:31:61:da:
e0:57:c9:e4:8f:eb:67:aa:6d:88:06:13:6f:26:75:36:19:06:
d1:9b:cf:c4:2e:e9:e2:36:92:41:8a:0b:84:85:00:92:22:b9:
0f:8b:58:d2:94:45:21:f6:44:13:e6:bb:f4:74:9f:e5:8f:4b:
5d:d6:6a:c8:e2:c4:4b:7e:c4:56:bb:ec:10:4a:5d:ef:dd:af:
52:fb:88:e9:8a:4d:87:84:0b:26:65:51:8c:5e:46:9b:56:42:
e1:90:dd:22:d8:e7:4b:e4:c4:24:78:7a:d7:b4:9c:53:83:2e:
b3:27:4b:70:44:cb:a2:02:bd:d5:56:a3:f3:7b:8c:15:04:48:
3b:80:f0:12:c3:e5:0e:66:8a:e7:e2:7d:45:dd:cd:99:68:28:
3a:5c:24:41:b1:9e:b6:28:20:d0:ad:12:6b:66:6c:df:b9:c5:
82:5e:17:90:6f:bf:84:d5:00:f6:32:2d:bc:fe:d9:9a:7f:30:
d3:bc:10:5f:a9:ac:85:3f:91:42:a8:69:22:c2:fc:84:11:5d:
74:ed:ad:69:46:d6:31:5a:d3:bd:8b:5d:2b:54:77:8d:2f:b0:
06:e6:d2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:59 2026 by rpki-client