
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier: PLEh7e8iv748eaSsoUdVwPnBzn+wbXhLlo3JbVrgFT8=
Subject key identifier: 67:77:83:EB:49:89:BD:7E:7D:BE:F7:0B:CE:F9:E3:F0:0E:E0:88:49
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number: 016C
Signing time: Mon 21 Sep 2026 04:59:21 +0000
Manifest this update: Mon 21 Sep 2026 04:59:20 +0000
Manifest next update: Mon 28 Sep 2026 04:59:20 +0000
Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: JgTNMMgx3R7VwUk75PYio+Y2wPuHH593//dks0c/2Cg=)
2: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CTkMutpvAk7yYXe3XyhfPht58lpcIVgdH5hdBMm7y34=)
3: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: zQjdwBYrCmNJ6NC3Jbu/wsnNVtPFgbdvd9Z7ELK9Okw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:59:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Validity
Not Before: Sep 21 04:59:20 2026 GMT
Not After : Sep 28 04:59:20 2026 GMT
Subject: CN=6ab0b9a8-ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:58:7a:77:bb:14:a3:b6:8e:f0:c8:24:d6:
dd:b0:e7:6e:b1:92:e9:ec:56:d1:2c:4b:4d:1a:ff:
ee:10:71:bb:60:fd:c5:d5:3a:2a:34:a1:93:84:13:
82:e7:74:bc:55:99:d6:3a:5a:f1:80:1b:55:36:cc:
07:5e:2c:d7:e1:98:70:5a:68:a6:79:ca:61:ca:8c:
85:2b:10:49:a6:9a:aa:c7:b3:08:5d:25:88:8f:a3:
0e:b2:e0:dd:32:07:00:1e:9d:dd:2f:c5:8b:67:69:
09:9c:d8:6c:68:86:ac:df:a3:2d:75:4d:3c:b0:24:
08:ed:32:7e:f3:d8:ec:39:59:99:42:31:2c:96:02:
5a:ff:96:8c:cb:dd:b8:40:39:a0:af:e0:fa:71:64:
d3:2d:f5:d1:65:73:a8:85:8c:23:72:aa:91:f3:28:
7c:02:99:74:31:dc:7b:fc:7f:27:96:51:0d:2f:08:
08:e7:79:cc:d3:11:4f:21:f5:f2:45:ff:aa:47:e3:
e3:19:61:99:fb:7a:9c:c2:03:00:1f:31:44:c5:4e:
d2:96:52:1f:67:63:3e:56:ff:c1:e3:14:2d:be:07:
98:99:41:e4:fa:fd:97:2e:b6:d1:b6:97:79:0a:8e:
b8:d5:3a:e3:6a:3a:32:38:0d:9b:30:e3:d6:74:fd:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:83:EB:49:89:BD:7E:7D:BE:F7:0B:CE:F9:E3:F0:0E:E0:88:49
X509v3 Authority Key Identifier:
keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:7a:50:02:57:65:7d:7b:89:04:b6:5c:a5:f9:78:3f:73:
4d:4c:81:82:8f:ba:0a:b0:be:cb:cb:a2:ca:aa:f0:37:79:ea:
3a:bc:2e:39:e9:95:2d:bd:d0:29:b4:d7:96:5b:1c:8a:5b:52:
39:d1:e5:03:ca:b2:e9:a0:40:99:bb:7b:c5:29:c5:34:08:35:
33:dd:ea:85:5c:12:7d:e5:af:f9:f9:8b:a3:ad:dc:c8:d4:19:
c7:35:17:d6:3f:74:0d:e7:6e:1c:65:05:6b:c8:d5:28:b8:f8:
dd:b9:8a:f0:d1:bc:af:da:65:46:87:39:93:c5:d5:7f:fd:48:
0e:7c:9f:dd:db:70:23:18:fd:81:ed:b6:b2:6d:f4:69:10:cf:
a5:da:6a:07:4a:ac:00:59:1a:78:5f:7c:0b:81:f7:ae:b0:cf:
0c:c8:3e:86:b0:b8:4e:c7:34:5d:af:28:87:c1:18:ac:1c:b1:
9f:2e:ca:12:05:ec:09:0d:fc:6e:25:42:1e:5e:65:ae:f8:72:
9f:0c:42:ab:fa:bb:83:12:b7:a9:b3:39:a5:0d:6d:c8:ad:0d:
de:59:cc:03:7f:78:b6:a0:c9:47:a0:86:17:cd:f9:29:8c:b5:
70:37:a3:71:ef:c8:0e:65:03:e4:c0:11:ed:e9:75:a6:9f:d6:
00:6d:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:23:49 2026 by rpki-client