
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier: hm/+fLM8B+2zwBo5TeoBVnfr9Cn2ODbGLgX0UkCJDLI=
Subject key identifier: F8:DD:59:93:8B:70:D0:4A:5F:E6:BD:2F:57:70:3B:C6:52:08:3B:7D
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial: 1E10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number: 1DFE
Signing time: Tue 06 Oct 2026 16:07:04 +0000
Manifest this update: Tue 06 Oct 2026 16:07:04 +0000
Manifest next update: Tue 13 Oct 2026 16:07:04 +0000
Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: myBkVfRp+ER5y4xpLKMPD0y0KToVvGT4uYPtMq5xFTM=)
2: DBB62584510F11EE91E98858C4F9AE02.roa (hash: f1TZSDO6dOE9en1CMS/wAFiLo9UGCV0vwp3Y9mMVLew=)
3: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: pnBR0xS0dQQ2SDLLqNdwnP0A7v24fxl8+oyuwqvoLV8=)
4: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: EH6q56ISDCHDpLM+gTINYlfYJSkWlD4ZZojPS20s3Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7696 (0x1e10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Validity
Not Before: Oct 6 16:07:04 2026 GMT
Not After : Oct 13 16:07:04 2026 GMT
Subject: CN=6ac51ca8-64a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:40:c3:be:cf:44:e2:74:fa:30:2a:5d:09:
ab:90:95:2a:2e:8d:6f:68:88:51:08:82:2c:3d:e8:
6a:72:0f:87:07:c8:06:70:72:8e:5f:23:f1:83:f8:
cc:b2:94:a3:45:a3:92:9f:01:c4:78:8f:9e:40:d7:
1e:41:2c:41:17:55:4b:18:b1:de:7b:f4:ec:75:b6:
07:88:cd:3e:51:72:04:3a:06:ce:7e:07:b8:18:0c:
9a:48:87:fe:80:4d:59:dc:6a:4f:d4:06:d9:72:83:
72:af:96:c8:45:01:b0:95:a1:11:f0:e8:1f:fe:f1:
0b:0c:d3:d9:54:6a:1d:a8:0c:72:03:36:61:6d:7a:
6e:fe:4a:9e:f7:ed:2f:f5:b7:25:a0:73:44:10:4d:
65:66:e8:09:62:bd:c0:12:2f:6f:b8:b1:b5:8f:88:
db:41:25:9d:61:96:7c:d9:7d:99:85:bf:0d:6b:e6:
8b:ad:df:b1:f6:e8:a4:fe:71:c4:30:e1:2a:de:fd:
46:e6:f2:85:2c:4f:c7:bb:35:bc:d1:08:c2:b9:b0:
5f:35:10:cf:c5:3f:c2:35:de:73:03:a2:bf:71:8b:
91:af:9c:fe:3e:e6:6a:b0:b1:72:b4:c0:39:17:17:
12:1c:05:9f:2f:3d:33:d8:b8:a6:a1:57:d5:14:b5:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:59:93:8B:70:D0:4A:5F:E6:BD:2F:57:70:3B:C6:52:08:3B:7D
X509v3 Authority Key Identifier:
keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:b1:02:5e:0f:97:c0:b0:50:b3:61:29:c1:70:3e:3c:6f:4b:
ad:be:01:37:94:97:9f:3e:32:1b:e1:3e:c4:dc:89:db:02:e2:
fa:17:55:83:78:f2:6d:f5:74:bf:ab:f1:7f:cf:d6:56:0d:e8:
b4:75:6a:ba:2a:33:66:2c:3d:8d:67:a3:7d:8a:ec:e4:f1:5c:
94:df:cd:d5:9a:3d:84:98:da:2a:9b:09:a2:9e:7f:b0:f5:10:
d6:3c:3d:2d:35:d2:55:e6:02:6c:92:dc:c5:77:84:e7:a1:f4:
05:c9:ad:e9:04:d0:10:dc:ee:f7:ff:6b:dc:0e:8c:1d:7c:0b:
db:08:b6:05:b2:5f:0d:4a:34:88:85:17:7d:e8:69:51:13:d2:
ab:c5:82:7f:ab:36:15:0b:67:4a:e0:e0:4a:56:3d:9f:db:cf:
1f:ec:75:e4:b3:e6:79:5e:70:89:c3:9d:58:5c:df:e2:c6:93:
6e:85:79:68:84:51:eb:b2:5b:b2:d6:81:a9:d6:ed:6a:95:19:
2b:29:b3:86:2f:c6:62:b1:8b:99:94:a4:cf:3e:7a:2c:11:9e:
e0:2c:2a:f3:ed:90:5c:78:e4:41:e3:68:34:66:c6:53:02:13:
3d:68:4c:63:28:17:31:22:16:33:3e:bb:1d:6a:d0:85:eb:9f:
da:5e:53:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw
OThDOUNCM0QwHhcNMjYxMDA2MTYwNzA0WhcNMjYxMDEzMTYwNzA0WjAYMRYwFAYD
VQQDEw02YWM1MWNhOC02NGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+1Aw77PROJ0+jAqXQmrkJUqLo1vaIhRCIIsPehqcg+HB8gGcHKOXyPxg/jM
spSjRaOSnwHEeI+eQNceQSxBF1VLGLHee/TsdbYHiM0+UXIEOgbOfge4GAyaSIf+
gE1Z3GpP1AbZcoNyr5bIRQGwlaER8Ogf/vELDNPZVGodqAxyAzZhbXpu/kqe9+0v
9bcloHNEEE1lZugJYr3AEi9vuLG1j4jbQSWdYZZ82X2Zhb8Na+aLrd+x9uik/nHE
MOEq3v1G5vKFLE/HuzW80QjCubBfNRDPxT/CNd5zA6K/cYuRr5z+PuZqsLFytMA5
FxcSHAWfLz0z2LimoVfVFLUsowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjdWZOL
cNBKX+a9L1dwO8ZSCDt9MB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD
QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REE0QS83MjU3RjkzMkJDQjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwt
MEpSeDZ3VkZIcXdKakp5ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGbECXg+XwLBQs2EpwXA+PG9Lrb4BN5SXnz4yG+E+xNyJ2wLi+hdVg3jybfV0
v6vxf8/WVg3otHVquiozZiw9jWejfYrs5PFclN/N1Zo9hJjaKpsJop5/sPUQ1jw9
LTXSVeYCbJLcxXeE56H0Bcmt6QTQENzu9/9r3A6MHXwL2wi2BbJfDUo0iIUXfehp
URPSq8WCf6s2FQtnSuDgSlY9n9vPH+x15LPmeV5wicOdWFzf4saTboV5aIRR67Jb
staBqdbtapUZKymzhi/GYrGLmZSkzz56LBGe4Cwq8+2QXHjkQeNoNGbGUwITPWhM
YygXMSIWMz67HWrQheuf2l5TMw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:55:00 2026 by rpki-client