
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json)
Hash identifier: pOGWgivMZ2wiWEKd5KRZQWWntIexDxHNCCXddogZ5Xc=
Subject key identifier: EF:CE:3D:44:C6:98:99:B4:41:04:E1:48:AE:91:B1:9A:ED:4C:D5:9E
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
Manifest number: 359F
Signing time: Tue 28 Jul 2026 15:10:55 +0000
Manifest this update: Tue 28 Jul 2026 15:10:55 +0000
Manifest next update: Tue 04 Aug 2026 15:10:55 +0000
Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: EXJn7tRwkoWgD9ZM6/Uo0oRxZu0kHpCdm5ptntEgP4w=)
2: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: cYXAizbDFkYc4+qxaI9fGjQHetEUsCO8dm+QjI7b2mE=)
3: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: 7mgw4y6gg1SBlVNEQHsCERtFq1CWUXWcJo30iKspb4c=)
4: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: vOyegaR5JJSUQOjhLZ6HxjzSX6xypEzpGZlpHWRdUcE=)
5: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: guwFqD3altsZHbc1dAy4+jYBLpjvPALMbPm6i0aYzrc=)
6: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: mRHLmD+WT0k5/h+bHDnrdCDBqIL+VXOXAAhCSmlrQck=)
7: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: G3AZcfArLBgVhuokmF/dQxJk3out8og0ZVXYVtVJ8gU=)
8: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: jTPpPZ5LH71JdUajcwKXpYreDPG+XIGjiYKM4RGwxFk=)
9: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: K3NPwS93LI39vDCydod4QMQz06LNTlu8HQCmLQ09JU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13811 (0x35f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jul 28 15:10:55 2026 GMT
Not After : Aug 4 15:10:55 2026 GMT
Subject: CN=6a68c67f-8e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:9f:86:47:95:2f:5e:dd:9f:d9:3b:2a:65:
2d:10:85:d8:15:94:7f:9d:4a:ae:9c:21:f7:3b:9c:
3e:d7:be:37:e8:11:c7:4a:1b:d9:4a:47:e0:bc:d8:
2f:0d:88:61:0e:d7:d6:cf:ea:bc:9e:5d:94:8e:e8:
b0:69:45:42:6d:5a:d8:17:f6:a1:57:a4:21:81:81:
b8:8b:b6:a7:a4:c5:db:e8:5e:f9:7d:83:05:2f:0a:
de:d2:e7:5e:b0:76:03:44:d2:3b:4f:fd:77:5d:2e:
1f:69:26:48:3f:a4:6b:37:a5:15:c1:02:71:6c:3e:
35:76:96:cf:bc:4d:04:08:6b:62:f6:3a:b7:42:49:
4a:49:a3:88:23:51:58:76:06:2a:6f:23:db:2b:c7:
8d:21:53:7d:da:ab:d4:ed:14:05:8b:7c:17:34:5b:
28:99:7e:f0:29:a6:7d:a5:d7:90:de:eb:f2:59:a4:
30:9f:f0:58:96:d1:4f:8d:b3:55:7c:18:d6:43:c9:
cc:fc:e0:c1:10:4f:b3:78:1c:ce:6a:c6:eb:8e:45:
94:ee:7d:b0:7e:18:b0:27:66:6e:1e:a8:91:08:3c:
3f:06:c3:96:45:cf:1a:1c:33:58:28:b7:4a:65:da:
a8:fd:a1:34:ca:b9:a0:8b:f2:23:67:64:81:02:68:
93:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:3D:44:C6:98:99:B4:41:04:E1:48:AE:91:B1:9A:ED:4C:D5:9E
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c8:1e:7c:51:40:a5:d1:61:57:9d:de:cc:55:34:4d:dc:b5:
77:f9:74:24:91:e9:3a:91:3d:a9:2b:5f:ba:6f:2b:7e:e5:b9:
9b:1b:06:80:32:91:3f:59:48:2d:e1:ab:92:9c:d4:15:c2:54:
5e:e7:41:7b:1f:a4:c0:57:21:9f:17:b2:e1:90:d2:04:35:f0:
8e:8b:8b:44:b8:ac:9e:95:61:7d:f1:83:7f:1e:9a:3c:30:e4:
71:04:0d:06:30:4d:a9:d4:9d:ae:f9:34:92:68:d6:0c:70:da:
ec:4f:23:88:1d:7d:53:ec:c5:94:b0:0a:3b:6a:bb:9b:85:3e:
bc:91:f2:e3:0a:70:30:cb:fb:50:5f:dd:29:b5:c4:95:8b:42:
d7:45:16:94:08:d6:30:96:c7:e4:12:2a:b1:6f:f6:d1:11:34:
18:82:be:a8:9c:69:bc:86:67:24:cc:05:c0:5f:44:56:92:ce:
41:52:62:71:86:3e:e5:6c:dc:2b:1a:8d:0a:b2:49:20:33:ec:
4f:06:68:0a:48:c0:b2:72:57:af:3b:3f:5a:88:ab:08:d2:cd:
3e:1a:59:47:5d:2b:ef:16:e8:c4:0c:93:71:73:52:ab:aa:4f:
d1:ae:a2:4a:98:97:47:f2:f3:f4:2c:95:cc:3c:b9:c6:ab:f7:
5e:4b:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:49:12 2026 by rpki-client