
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
File: 64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json)
Hash identifier: OM16Svx78W/uD5jj4Zb0hNInnl1dWXR/qIGrZKNh35c=
Subject key identifier: 07:EC:35:9F:EA:D5:6C:D2:D2:0A:59:8C:67:51:CA:59:02:D4:28:34
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial: 0E89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
Manifest number: 0E53
Signing time: Sat 10 Oct 2026 17:49:23 +0000
Manifest this update: Sat 10 Oct 2026 17:49:23 +0000
Manifest next update: Sat 17 Oct 2026 17:49:23 +0000
Files and hashes: 1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: sLH4nIk/SRhauTDJkrBRLf765w8n3g5z6yhnR92xWxY=)
2: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: it/3YpWQm+cSLbHWwAmBABlwHA8BsBUrAprFxWV5Rl8=)
3: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: nmjI7Wi2B8aFQIAn+8Mjo7gbvju8oLY+EN7Rnxgggrw=)
4: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: 4SWrfrkL4KQ0GTNLnf+Lu03qdO1Vi/fN+eQr1sQ0Xl0=)
5: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: Fepdq+V83ixXVbOQsCG8E8Is2e9E4BLsSWrOJhnPvw8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 17:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3721 (0xe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Validity
Not Before: Oct 10 17:49:23 2026 GMT
Not After : Oct 17 17:49:23 2026 GMT
Subject: CN=6aca7aa3-4fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:ad:97:02:5e:c0:9a:44:4c:f0:01:e6:7c:
bd:7c:2c:16:24:7f:bb:f5:ec:82:4e:84:8b:4a:d9:
c4:c6:ce:e7:f9:d5:83:10:c2:af:3b:e0:8a:0a:44:
d7:31:36:e5:9b:69:88:8c:f9:51:16:64:63:cd:25:
d2:0f:25:54:12:32:10:c4:36:f0:5c:57:5c:6b:12:
dd:aa:36:2b:aa:fa:15:09:0a:89:d3:ae:53:5f:80:
ef:d3:e2:b8:d3:bb:08:62:82:e4:32:db:24:f9:5a:
18:34:83:3a:84:03:4a:f2:8c:cb:1f:a8:89:50:af:
2b:da:6c:85:5f:e2:91:7f:48:23:ee:8f:7a:e0:b9:
57:ce:f4:2f:7c:85:9e:8f:bf:34:92:23:9f:d3:22:
79:ba:07:74:97:5a:81:99:19:00:d3:17:75:48:e6:
b1:a7:ad:23:51:c7:85:44:b2:39:be:8c:9c:12:69:
eb:2a:5e:51:7a:03:9a:04:1a:4c:8f:bc:07:b8:f6:
89:1e:ea:07:9a:13:fe:77:3e:db:d6:9b:55:65:72:
d7:d9:84:cc:d4:f0:ac:9c:06:70:01:80:6e:e3:71:
01:0d:db:16:03:62:ca:dc:71:71:7f:87:90:44:cd:
b0:47:c1:32:7f:0b:cc:df:c0:f2:cf:44:dd:aa:99:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:35:9F:EA:D5:6C:D2:D2:0A:59:8C:67:51:CA:59:02:D4:28:34
X509v3 Authority Key Identifier:
keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:46:01:40:3c:8b:45:0a:9c:c0:db:ba:4b:c9:28:63:20:7f:
46:33:ea:75:73:63:bb:ac:bd:7b:64:a1:42:34:cd:c8:00:97:
7d:e6:08:c0:cf:95:31:39:dd:00:f0:b9:43:d5:25:69:71:81:
3b:a0:01:43:44:71:67:56:d3:c1:87:cf:14:6e:51:23:ee:1c:
60:8b:41:d5:7c:3f:e9:78:1a:32:56:60:e4:97:43:23:06:9a:
82:ae:ac:bd:12:0a:03:ec:0a:fc:c0:7f:39:26:f8:ca:a7:f5:
70:a1:b8:85:bd:c7:fa:da:b5:8c:53:90:b5:0a:16:8c:84:a0:
a0:44:34:51:62:b6:d8:48:7e:4a:c2:5c:fa:6e:3d:35:1f:91:
87:af:25:0d:27:4e:c8:85:85:d7:71:8b:2e:70:50:60:72:d0:
8a:7e:62:c7:72:36:a6:30:dd:78:df:0e:09:b9:a6:f5:9d:c0:
26:8a:fc:22:5c:fe:b2:9c:9c:be:c4:3a:f7:fc:77:1c:e0:2c:
43:41:31:b8:42:91:c4:86:04:f3:2a:4f:39:cd:e1:2e:ae:13:
aa:99:81:38:0a:8e:fb:06:02:c3:c6:4c:fe:b6:c8:f7:62:ce:
85:57:f1:65:59:4b:b3:8f:67:f5:b1:86:5b:0c:c8:f3:c2:4c:
bc:1e:bb:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QzMEExMTAvBgNVBAUTKEVCODExQjE0ODhCMjBGMTI2NjRFNjQ4QTgyNjI0QTMw
NTA2ODlGMjUwHhcNMjYxMDEwMTc0OTIzWhcNMjYxMDE3MTc0OTIzWjAYMRYwFAYD
VQQDEw02YWNhN2FhMy00ZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmKtlwJewJpETPAB5ny9fCwWJH+79eyCToSLStnExs7n+dWDEMKvO+CKCkTX
MTblm2mIjPlRFmRjzSXSDyVUEjIQxDbwXFdcaxLdqjYrqvoVCQqJ065TX4Dv0+K4
07sIYoLkMtsk+VoYNIM6hANK8ozLH6iJUK8r2myFX+KRf0gj7o964LlXzvQvfIWe
j780kiOf0yJ5ugd0l1qBmRkA0xd1SOaxp60jUceFRLI5voycEmnrKl5RegOaBBpM
j7wHuPaJHuoHmhP+dz7b1ptVZXLX2YTM1PCsnAZwAYBu43EBDdsWA2LK3HFxf4eQ
RM2wR8EyfwvM38Dyz0TdqpmHbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfsNZ/q
1WzS0gpZjGdRylkC1Cg0MB8GA1UdIwQYMBaAFOuBGxSIsg8SZk5kioJiSjBQaJ8l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDMwQS9CODU0MjRGOEQ0
OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4Sm1UbVNLZ21KS01GQm9u
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzY0RWJGSWl5RHhKbVRtU0tnbUpLTUZCb255VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDMwQS9CODU0MjRGOEQ0OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4
Sm1UbVNLZ21KS01GQm9ueVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACkYBQDyLRQqcwNu6S8koYyB/RjPqdXNju6y9e2ShQjTNyACXfeYIwM+VMTnd
APC5Q9UlaXGBO6ABQ0RxZ1bTwYfPFG5RI+4cYItB1Xw/6XgaMlZg5JdDIwaagq6s
vRIKA+wK/MB/OSb4yqf1cKG4hb3H+tq1jFOQtQoWjISgoEQ0UWK22Eh+SsJc+m49
NR+Rh68lDSdOyIWF13GLLnBQYHLQin5ix3I2pjDdeN8OCbmm9Z3AJor8Ilz+spyc
vsQ69/x3HOAsQ0ExuEKRxIYE8ypPOc3hLq4TqpmBOAqO+wYCw8ZM/rbI92LOhVfx
ZVlLs49n9bGGWwzI88JMvB67bw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:54:56 2026 by rpki-client