
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json)
Hash identifier: xwxytmGTDsQFnrSE3I6EGoHlJHZAQkE4l/fLPcGEqLQ=
Subject key identifier: 93:BE:76:30:E7:5F:78:8A:BD:AA:44:4F:37:76:31:E8:2D:43:ED:E9
Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Certificate serial: 0688
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
Manifest number: 0680
Signing time: Sun 01 Mar 2026 22:38:06 +0000
Manifest this update: Sun 01 Mar 2026 22:38:05 +0000
Manifest next update: Sun 08 Mar 2026 22:38:05 +0000
Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: BtBGYDubQjha8JRlbrHUaXTrMZ74J/oVz5/oQ3tMQ5M=)
2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: BD9XvgbfGZGyT2mqJsZmkBVu9isJKAOPHUUx0vygtGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Validity
Not Before: Mar 1 22:38:05 2026 GMT
Not After : Mar 8 22:38:05 2026 GMT
Subject: CN=69a4bfcd-60b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:ff:88:01:11:4a:77:df:d5:00:df:f1:82:
45:75:f7:4e:05:9d:56:8f:dc:6a:cc:f7:dd:f2:a2:
20:ae:54:c5:d4:3f:5f:58:97:9f:14:a9:55:7a:da:
24:ee:1e:9f:a7:ad:32:49:a5:2c:35:73:8a:77:ca:
af:f1:08:5b:08:26:eb:e6:ec:fa:e1:ae:44:19:10:
c5:ec:3f:b9:fb:36:92:47:5a:1d:4f:04:af:91:eb:
1d:71:a3:da:a5:54:eb:a5:f8:5f:03:f8:d3:66:92:
ad:85:d2:32:b2:c3:4f:c3:e9:fd:f2:66:c4:a4:20:
39:65:ad:bc:17:44:b6:4e:01:dd:db:2d:a6:d3:f9:
05:7d:8f:a3:d7:85:4d:66:72:35:bc:8e:74:eb:86:
87:fb:51:6a:79:2d:43:6b:27:0a:d5:d5:e8:5f:ed:
2e:23:60:19:1f:87:22:77:32:f5:53:06:14:9f:56:
5e:4f:8b:83:5c:08:23:25:04:ee:3c:7f:85:ef:8f:
ea:88:bd:09:dc:9e:ed:79:f5:9b:35:29:d3:f8:25:
df:5e:31:ad:ee:05:d9:2e:49:ba:eb:d3:31:e1:e9:
e9:1a:28:3c:50:81:a1:00:e2:ca:70:72:25:e0:a9:
36:53:72:c1:6f:27:82:c8:5b:b7:23:a5:42:26:dc:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BE:76:30:E7:5F:78:8A:BD:AA:44:4F:37:76:31:E8:2D:43:ED:E9
X509v3 Authority Key Identifier:
keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:8d:59:4f:23:0e:06:6b:56:bf:d0:ec:e2:a5:f3:12:ff:3f:
0d:5e:30:d2:bc:c2:8b:1b:67:16:f1:8d:b3:68:e6:b2:07:46:
7d:05:c0:c3:1f:6d:63:74:d3:a2:e3:fe:f6:92:b8:6a:e2:5d:
ac:26:d1:26:3b:cf:2c:17:ca:9a:36:5a:50:aa:cd:da:b9:26:
4a:c7:c9:ea:d2:b8:ae:76:31:39:42:8c:37:90:52:24:23:66:
0d:42:f3:a0:9e:45:98:f7:f5:f2:dc:eb:27:4d:39:3a:8e:34:
25:af:4e:c8:9e:c7:31:78:ae:33:15:9c:cb:4c:99:70:2c:4b:
25:9c:2e:94:d1:d6:fc:4b:2a:09:ab:11:c9:bb:19:f6:b1:1a:
28:15:dd:c5:d2:e6:c8:65:1f:d9:fa:25:79:e9:f1:c1:7c:ad:
7a:da:c9:f4:52:5d:55:21:bf:7b:a2:6b:4b:4b:fc:ad:e1:8e:
1a:ed:1d:fb:e2:a2:9c:fa:de:4a:bc:c9:54:e8:69:4e:b9:25:
0b:b1:10:dc:3a:6d:1b:9e:74:4f:a1:b8:84:9f:fd:3a:70:a1:
f1:7b:6c:36:34:58:74:6c:a4:41:ed:11:d5:4c:96:36:0f:ff:
34:fc:8a:b4:56:05:40:40:4e:84:21:6b:eb:10:2e:45:c4:4f:
15:da:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:18 2026 by rpki-client