
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File: EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier: Bk4VLVyXCLLac/drdJEjo2rrYH87nFQGfK94W85zp4w=
Subject key identifier: 8E:3A:F9:D7:FD:CD:C3:23:20:9A:C9:BF:D5:57:BC:B0:34:8E:27:F3
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer: /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number: 01C4
Signing time: Sun 19 Apr 2026 03:28:03 +0000
Manifest this update: Sun 19 Apr 2026 03:28:03 +0000
Manifest next update: Sun 26 Apr 2026 03:28:03 +0000
Files and hashes: 1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: F6fvoBRGFJmEFm64ZUgwPnOBrerPpG7TswTIuPxcYXs=)
2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: VhLN1aZzqiikbTrPMY7QXPTuOPPGxbfjsop6eJxwkqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 03:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Validity
Not Before: Apr 19 03:28:03 2026 GMT
Not After : Apr 26 03:28:03 2026 GMT
Subject: CN=69e44bc3-1ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:24:2e:f6:d6:b7:a4:64:06:26:7d:45:04:
14:03:58:e1:ce:e7:a4:f6:64:b5:58:60:a4:3e:fb:
ea:4e:93:69:b8:bd:e2:ac:a9:95:45:54:4d:c7:d5:
5f:fd:6d:3d:88:0d:c5:38:dc:df:3c:b3:5d:94:d7:
c2:7f:51:d1:b2:44:b2:e9:95:9b:55:66:a5:37:3e:
25:37:ca:e0:fb:a9:f3:28:f2:f6:c1:74:5b:87:1e:
bd:5b:e6:4a:3e:4b:25:77:ea:a4:69:ec:09:d7:05:
44:21:85:01:a3:b1:ab:c5:fa:38:0b:07:38:8f:3c:
80:f7:b4:d9:34:a6:a7:a0:75:ca:4f:b6:a7:d1:22:
3f:84:6b:0f:c9:45:78:14:7e:28:25:ce:3b:2d:ca:
7c:2e:f3:8d:a2:2e:5f:f8:38:93:97:3d:d5:46:d6:
f6:9b:ec:cf:8f:87:52:c9:73:11:e2:75:a2:8b:f6:
2f:4f:7b:10:de:42:23:53:0b:0e:e5:07:26:4f:a5:
56:dc:ee:29:c0:3a:c9:94:8f:ee:ad:6e:3e:ce:ed:
99:47:27:bf:9a:32:f2:d3:fa:90:eb:96:cb:a6:b0:
e1:5f:e5:81:5d:39:9b:34:ba:d3:76:70:e2:ea:3a:
0c:52:d2:36:78:23:6c:e2:d7:5a:4b:dd:75:e7:a2:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3A:F9:D7:FD:CD:C3:23:20:9A:C9:BF:D5:57:BC:B0:34:8E:27:F3
X509v3 Authority Key Identifier:
keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:be:de:fd:58:33:f1:3a:16:23:6e:94:c4:5a:14:19:e1:d8:
e0:2d:18:88:3d:1e:e1:fc:fd:8a:c8:cc:26:72:f1:7b:6f:fb:
12:22:ba:ed:72:d2:60:9a:82:38:f5:3e:3a:6f:cd:ba:b0:aa:
0e:fe:28:72:11:53:2e:3e:dd:0d:b2:6f:9b:bf:eb:83:a5:b7:
a2:7e:0c:a9:df:be:2c:7a:01:b6:e3:ee:8e:da:3c:f8:83:d5:
d2:f0:59:df:81:dd:ab:e4:ca:e2:f0:35:a1:dd:7e:c8:ab:c8:
75:1d:30:c5:8f:fa:0b:a2:bb:07:6f:67:fb:c3:b3:a8:a6:5a:
7d:9d:ae:6c:dc:34:00:3e:c3:fe:7b:bb:11:02:f0:57:67:ce:
b7:52:a5:45:05:6c:88:09:06:7d:3c:67:09:68:1e:35:5d:32:
9b:a9:62:b2:80:64:1e:6f:9e:b1:71:cb:84:4b:6d:e6:b4:b5:
5f:2e:51:07:b7:b8:1b:47:44:fd:79:c6:c0:19:c3:62:a4:ef:
1d:b5:b9:15:9f:fc:f8:56:36:fb:79:5e:c5:24:2d:97:22:e4:
aa:a9:5a:54:26:b7:a2:fc:08:be:ab:d6:f2:06:08:6c:25:87:
6a:34:ac:4b:16:61:7e:99:b4:c6:76:b0:5b:df:18:91:13:9f:
a1:d0:d8:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUExRkMxMTAvBgNVBAUTKDExOEY5Mjk4NTkwQzc5ODc5QUExRDhGQzZEMTdGNjY1
NDU0QkNCQjkwHhcNMjYwNDE5MDMyODAzWhcNMjYwNDI2MDMyODAzWjAYMRYwFAYD
VQQDEw02OWU0NGJjMy0xZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoZ4kLvbWt6RkBiZ9RQQUA1jhzuek9mS1WGCkPvvqTpNpuL3irKmVRVRNx9Vf
/W09iA3FONzfPLNdlNfCf1HRskSy6ZWbVWalNz4lN8rg+6nzKPL2wXRbhx69W+ZK
Pksld+qkaewJ1wVEIYUBo7Grxfo4Cwc4jzyA97TZNKanoHXKT7an0SI/hGsPyUV4
FH4oJc47Lcp8LvONoi5f+DiTlz3VRtb2m+zPj4dSyXMR4nWii/YvT3sQ3kIjUwsO
5QcmT6VW3O4pwDrJlI/urW4+zu2ZRye/mjLy0/qQ65bLprDhX+WBXTmbNLrTdnDi
6joMUtI2eCNs4tdaS91156K6ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI46+df9
zcMjIJrJv9VXvLA0jifzMB8GA1UdIwQYMBaAFBGPkphZDHmHmqHY/G0X9mVFS8u5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTFGQy84MTkxRkI2Qzg4
N0ExMUVFOURCNDVCMTRDNEY5QUUwMi9FWS1TbUZrTWVZZWFvZGo4YlJmMlpVVkx5
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VZLVNtRmtNZVllYW9kajhiUmYyWlVWTHk3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTFGQy84MTkxRkI2Qzg4N0ExMUVFOURCNDVCMTRDNEY5QUUwMi9FWS1TbUZrTWVZ
ZWFvZGo4YlJmMlpVVkx5N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXr7e/Vgz8ToWI26UxFoUGeHY4C0YiD0e4fz9isjMJnLxe2/7EiK67XLSYJqC
OPU+Om/NurCqDv4ochFTLj7dDbJvm7/rg6W3on4Mqd++LHoBtuPujto8+IPV0vBZ
34Hdq+TK4vA1od1+yKvIdR0wxY/6C6K7B29n+8OzqKZafZ2ubNw0AD7D/nu7EQLw
V2fOt1KlRQVsiAkGfTxnCWgeNV0ym6lisoBkHm+esXHLhEtt5rS1Xy5RB7e4G0dE
/XnGwBnDYqTvHbW5FZ/8+FY2+3lexSQtlyLkqqlaVCa3ovwIvqvW8gYIbCWHajSs
SxZhfpm0xnawW98YkROfodDYlA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:25 2026 by rpki-client