
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json)
Hash identifier: 3Z89RqfXrMcaXmlyizOYRUuzl5L1xYz9lk7glLWw2mU=
Subject key identifier: 8E:CC:BA:E2:95:AE:C8:30:D2:AA:14:42:45:91:58:17:65:F3:D5:B3
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
Manifest number: 028F
Signing time: Fri 17 Apr 2026 01:31:29 +0000
Manifest this update: Fri 17 Apr 2026 01:31:29 +0000
Manifest next update: Fri 24 Apr 2026 01:31:29 +0000
Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: Z1+cSkL3bKDiTUb+J/F0PPV3JbxQ9yz8QNjc94bBt/8=)
2: 9EFAFA76234311F18F511571AA833773.roa (hash: 4NzUw4b9D8ALfqcLviwrDkJ97hUefCQAutbVZdbx1i0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Validity
Not Before: Apr 17 01:31:29 2026 GMT
Not After : Apr 24 01:31:29 2026 GMT
Subject: CN=69e18d71-5cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:7d:61:d7:c1:bd:63:2c:62:a7:d9:48:5d:
40:72:dc:97:c4:c0:47:d8:83:9d:62:8f:a7:6b:fa:
58:a0:90:8c:0c:32:64:14:69:0d:3b:fe:63:55:f8:
21:db:38:5e:8a:ad:69:45:70:68:5b:d5:54:a0:05:
a6:8f:88:69:d8:60:f1:e2:fa:5d:09:85:02:a4:55:
ea:c7:23:7d:91:52:c2:cf:21:32:56:ce:9a:bb:51:
d6:4f:3e:67:a2:3f:c4:97:58:e5:d4:e1:77:2c:17:
28:6c:33:be:6c:ac:6d:7f:37:9c:dd:95:0f:aa:ad:
95:c3:22:e0:82:84:d5:5b:f2:e4:c1:48:6e:54:4e:
f4:17:a5:1f:24:2d:ad:06:36:f5:2f:52:3e:78:73:
e6:ba:f7:cf:1b:bd:2b:cf:c9:29:08:2f:a0:ed:b8:
91:8d:55:dd:40:0e:ba:68:04:5b:8f:75:79:c1:3e:
b1:1f:20:96:a9:d6:37:22:aa:aa:c6:f7:18:56:40:
d6:d2:55:98:b8:fb:5e:84:07:a3:d3:5f:f8:4c:e8:
dc:e1:fb:0e:b2:6b:e6:29:a6:3d:ca:1f:02:9b:09:
8e:42:a6:b6:ce:e0:cf:0f:64:90:9b:db:30:61:d6:
26:1c:e7:63:89:8c:02:05:cf:d3:3b:e0:bc:d0:cd:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CC:BA:E2:95:AE:C8:30:D2:AA:14:42:45:91:58:17:65:F3:D5:B3
X509v3 Authority Key Identifier:
keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:58:f2:7d:8a:d9:b0:8a:82:fd:4e:aa:73:47:bb:87:97:98:
cb:85:12:21:73:07:50:fe:93:97:e6:9b:41:8a:25:c1:66:a9:
8b:f1:8c:fd:1f:d4:49:17:10:5f:8b:39:d4:f3:85:84:06:62:
17:b5:79:b4:53:7c:b3:28:72:db:5b:95:a1:6d:2d:e2:3d:fd:
41:33:82:15:c4:36:1a:72:f8:a0:bf:40:26:1b:cb:7d:aa:b8:
2a:7b:0b:47:b9:7e:e0:32:e7:f2:54:58:82:04:83:d1:d0:57:
f9:34:35:17:68:94:22:66:d2:9d:29:66:c5:28:22:d8:6f:f7:
d1:3e:89:c5:0a:1a:54:8b:bc:71:14:80:5b:25:37:ef:09:5a:
aa:18:9c:0d:04:32:e1:84:53:30:b5:91:de:e3:79:69:1a:19:
8a:bb:5c:0d:b3:32:42:88:1c:a7:7c:33:c2:63:39:e0:93:aa:
32:49:0e:b9:08:b9:30:3f:0e:6b:86:ab:fb:1c:07:d5:08:e1:
48:f3:14:a3:09:23:7a:d5:63:8d:06:07:d2:21:3e:e2:ac:17:
f6:ca:51:27:65:6e:c5:ed:ea:7a:39:b7:89:b9:bd:64:62:b3:
43:a7:e3:8b:b5:7b:fa:dc:48:0e:80:67:37:40:23:26:0f:88:
70:fd:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:35 2026 by rpki-client