
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier: jg6bHYGEnQHorQRy4Te3JewDhwH31b4Q89tZ49pQJgs=
Subject key identifier: 50:8D:2A:ED:84:C4:B1:12:DB:80:57:D0:8D:D2:09:42:BB:91:89:C6
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1DB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number: 1DA6
Signing time: Thu 16 Apr 2026 16:04:29 +0000
Manifest this update: Thu 16 Apr 2026 16:04:28 +0000
Manifest next update: Thu 23 Apr 2026 16:04:28 +0000
Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: flI4jH0gOc5MQbHmSHH0yfb+3dUxy7R6CWv+th+AWDk=)
2: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: EH6q56ISDCHDpLM+gTINYlfYJSkWlD4ZZojPS20s3Yw=)
3: DBB62584510F11EE91E98858C4F9AE02.roa (hash: f1TZSDO6dOE9en1CMS/wAFiLo9UGCV0vwp3Y9mMVLew=)
4: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: pnBR0xS0dQQ2SDLLqNdwnP0A7v24fxl8+oyuwqvoLV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7608 (0x1db8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Apr 16 16:04:28 2026 GMT
Not After : Apr 23 16:04:28 2026 GMT
Subject: CN=69e1088d-a019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:d5:52:77:95:20:55:d7:0b:d9:6b:a4:b8:
c5:07:6f:a1:3c:bd:11:9a:a9:7c:a8:de:05:d7:0a:
40:99:7f:39:2a:21:b4:99:f0:c2:10:86:bf:76:c0:
a6:20:b7:18:d6:04:d0:91:68:98:a8:fd:76:a4:85:
03:92:14:6c:6c:42:22:9a:08:bb:48:f5:c3:70:61:
7e:b4:b6:40:2a:40:73:3f:fc:22:c5:6f:0f:bd:cf:
5b:01:16:fd:39:9f:b3:4c:b9:1d:bb:d3:e9:c4:9e:
f1:cd:97:75:a7:fd:48:cf:53:4b:f5:f0:43:b5:4e:
4a:10:ab:68:1a:6a:36:67:00:d9:5e:a7:9b:ea:15:
a2:8a:95:02:d2:d5:8f:63:01:aa:e4:15:55:3b:90:
fc:d7:87:a9:cf:9f:a2:1a:10:9e:2b:e0:ca:08:20:
b8:05:2c:e9:bc:79:8a:5b:6f:4e:47:42:fe:d8:b1:
ab:fb:5c:90:74:e8:c9:27:11:35:22:05:ab:26:31:
a4:c7:df:d8:f9:1d:ac:26:fb:1c:a4:bb:4f:b9:34:
e9:d8:15:32:a7:ad:bb:03:f7:20:f2:20:e6:fa:92:
c8:8a:af:e0:22:f5:c9:b7:20:ab:70:9b:25:9c:58:
6e:3a:2b:0e:c2:d2:d1:b8:74:ab:f2:d4:fb:9e:46:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8D:2A:ED:84:C4:B1:12:DB:80:57:D0:8D:D2:09:42:BB:91:89:C6
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:36:e0:4f:47:bd:44:f7:78:11:0b:01:6e:ef:3b:89:81:
98:b0:26:c4:27:73:82:6d:a5:a9:fb:8c:9f:da:a8:a5:be:fe:
42:ed:08:a6:54:b7:13:fd:37:33:ca:07:90:4a:1b:30:c4:3f:
1e:73:ca:7d:f0:1b:8e:42:e4:fd:0e:f2:4f:ae:ea:cf:8c:84:
1f:fb:2b:ef:9d:0b:62:49:fe:2a:6c:4e:d6:27:7e:66:8f:50:
35:52:8f:34:af:29:ef:6d:34:4f:58:6a:ff:f2:88:ed:b0:50:
c7:2f:85:fa:f5:67:f2:f5:8c:b8:d0:41:fe:a8:b6:60:b5:33:
fd:95:77:64:78:e1:a5:5a:a7:d4:70:4b:d5:9f:d6:0c:36:1d:
bb:f8:27:77:6f:0c:51:8b:2d:2a:d8:25:c4:45:b6:e6:d2:f8:
6f:16:e8:af:81:9e:f8:f4:fe:7a:85:86:7e:18:e4:66:ba:b0:
b7:44:74:66:48:d8:8a:e0:94:24:53:ef:9e:db:b2:6c:c7:ad:
ff:ea:29:06:96:5c:97:fc:82:31:87:96:5a:da:b4:bf:61:7e:
7f:a0:74:4b:28:5f:c9:68:4f:f9:e4:8f:fd:3b:0d:0d:ac:77:
2c:95:d9:9b:8a:ef:c5:2f:80:f0:29:56:89:2c:4f:91:8e:92:
a6:34:ad:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:20 2026 by rpki-client