
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier: OIhxlJHYqHaQgGglfZx8kPF2PUO/u1gzcIsLioIvrhE=
Subject key identifier: 29:B8:C8:C1:BC:1D:1D:F7:90:54:43:C3:D2:7C:47:55:82:D9:F0:62
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number: 0101
Signing time: Sun 01 Mar 2026 07:16:05 +0000
Manifest this update: Sun 01 Mar 2026 07:16:05 +0000
Manifest next update: Sun 08 Mar 2026 07:16:05 +0000
Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: mSlQv998X/8IUV4X1JY0XB0WvvPe9XEV0V5CSwMqKeM=)
2: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CBRfaNleeLhQbkhZ9Y/Gyu8j+qS/vePZy+tfvqG3Iy0=)
3: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: MvYbkMM7qX+K3Cl1XMK5DsKY9VO54145P/lZVkIO3Zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Validity
Not Before: Mar 1 07:16:05 2026 GMT
Not After : Mar 8 07:16:05 2026 GMT
Subject: CN=69a3e7b5-b62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:9a:6f:2d:74:a7:1c:9b:ca:dd:fa:2a:42:
32:3d:54:e6:cb:4b:12:46:9e:7c:96:c4:cf:5a:d7:
81:95:03:66:a1:7e:9c:c5:f4:b2:fa:e3:9c:27:c2:
f6:a2:13:de:39:a8:50:21:63:7b:af:96:2b:72:c2:
31:09:eb:8f:ef:85:80:85:15:10:81:a3:46:30:2c:
f3:db:86:1a:e1:64:18:b7:a9:4a:60:f4:1d:cf:8a:
4c:3b:96:41:32:f1:b8:55:d0:73:da:45:2f:18:8b:
dc:7e:64:a8:f8:1e:07:48:09:b7:0c:a1:f4:3c:30:
9c:60:d5:78:31:1a:61:fd:f8:63:16:7b:22:04:ed:
b1:d4:7e:db:e8:21:25:fe:e7:73:d8:82:38:28:94:
09:c4:7d:2c:48:b7:e4:24:30:57:7a:87:b0:ca:51:
93:52:0e:fa:af:1c:64:7c:81:41:89:14:3a:17:30:
29:07:e9:ba:c0:c3:28:3d:7d:5d:03:8a:16:00:b1:
bd:49:55:f3:bd:02:a3:26:b9:eb:68:6e:1f:7f:4b:
32:6b:20:c7:45:da:7f:ca:8b:7e:a1:5e:99:60:3d:
eb:fe:f1:96:75:0e:18:e4:e7:9b:65:e5:4a:c3:37:
27:8b:96:7e:67:34:ae:37:a8:ef:59:57:9e:61:bc:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:C8:C1:BC:1D:1D:F7:90:54:43:C3:D2:7C:47:55:82:D9:F0:62
X509v3 Authority Key Identifier:
keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6e:2c:b0:74:51:11:f0:dd:b5:fa:2c:46:19:45:98:9f:a1:
21:3a:ba:ac:14:90:2c:77:86:88:80:b3:6d:80:b7:a5:35:5f:
f6:a9:ed:67:ac:d3:d6:a1:7f:31:34:f3:7c:1d:e4:ba:b4:90:
20:53:91:1e:a6:05:1c:17:e5:f0:99:a0:cf:5d:92:83:54:2b:
73:c2:b3:ab:af:20:e9:a5:15:52:8c:8d:a9:cb:6a:ac:db:cd:
9e:cc:10:fa:92:dc:46:31:75:23:88:e6:a7:42:61:01:03:81:
a0:a9:22:75:a1:36:85:57:a8:8a:32:e1:e2:fd:5e:fb:75:ec:
34:97:d8:cc:b4:f0:b5:82:16:1b:c1:f0:f9:f1:5c:00:a5:6d:
47:7e:c5:2a:34:71:4a:10:aa:f6:ca:ab:f4:c7:c5:8a:bc:b1:
1a:d5:b7:9a:64:0d:5a:17:d7:cb:ae:56:78:14:5a:7f:ac:d8:
06:8f:2e:eb:ec:0a:05:3d:0d:29:77:19:e6:7b:81:11:0b:cf:
cb:ff:15:3e:d9:96:bb:22:cd:61:d1:f5:3d:51:c6:2a:07:f3:
77:02:2d:d2:3c:71:f9:48:e4:42:fc:46:13:43:95:a2:35:c5:
22:3b:03:29:25:11:d2:ae:0e:19:06:ff:3a:61:56:9c:5f:71:
d3:fe:b4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:35:16 2026 by rpki-client