
$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
File: i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft (raw, json)
Hash identifier: 755155fVgysvAKq6amjA0Amt1RJ7p2Au5EvNkU1BI2c=
Subject key identifier: 19:A0:59:E5:13:89:A9:77:39:34:1C:85:17:60:9A:A1:67:23:77:A3
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Certificate issuer: /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
Manifest number: 02C1
Signing time: Mon 27 Jul 2026 02:36:57 +0000
Manifest this update: Mon 27 Jul 2026 02:36:56 +0000
Manifest next update: Mon 03 Aug 2026 02:36:56 +0000
Files and hashes: 1: i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl (hash: UCd7QoUyyZFTKLXAm468rnRl205Urh+vd2cCSnnhTQ8=)
2: 9EFAFA76234311F18F511571AA833773.roa (hash: 4NzUw4b9D8ALfqcLviwrDkJ97hUefCQAutbVZdbx1i0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Validity
Not Before: Jul 27 02:36:56 2026 GMT
Not After : Aug 3 02:36:56 2026 GMT
Subject: CN=6a66c449-90d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:56:52:4c:df:71:ac:72:67:8b:00:6a:32:
11:1d:96:dd:16:75:9e:12:b1:93:bc:7a:ea:23:1d:
98:d5:ad:0d:a3:da:c4:59:4c:67:7c:34:98:c1:4e:
df:39:a1:10:f8:76:9e:68:68:94:59:ae:48:33:2d:
4f:7c:29:ec:09:d4:fc:2c:23:2e:a8:d8:2a:73:6f:
fa:68:4c:3e:e5:99:9a:f5:5a:ef:65:8d:2f:ab:f7:
fc:ed:9e:a1:82:1f:21:3e:6e:2d:13:98:51:16:55:
0c:01:0a:ba:72:b8:ed:4b:07:47:58:70:58:6a:f1:
4b:7c:7d:03:d0:7d:24:60:98:17:90:20:74:df:0a:
2d:84:af:8b:9f:11:6f:fc:76:21:e8:c3:fc:bb:83:
ea:e8:b8:6d:44:a5:88:dd:cf:3b:dd:48:bf:ae:d5:
c5:34:c0:b5:4b:8e:ef:c0:31:fc:7c:c9:50:6b:07:
77:64:44:f6:2b:dd:cb:a5:42:a9:35:d7:02:eb:88:
56:7c:42:8f:de:df:c6:73:8c:a6:02:66:73:ac:9d:
c3:05:c5:3c:84:89:bc:c9:be:6b:94:b5:77:d2:91:
23:85:08:85:34:b2:4d:c1:a0:1a:27:6d:9f:41:81:
12:3c:20:d8:93:70:4d:22:89:d9:5e:1b:b0:be:a5:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A0:59:E5:13:89:A9:77:39:34:1C:85:17:60:9A:A1:67:23:77:A3
X509v3 Authority Key Identifier:
keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:ef:bf:98:b3:c2:87:49:c6:07:30:39:60:28:06:d1:68:30:
aa:fd:fe:39:41:e8:7b:66:62:33:7b:3d:d2:10:58:3e:e1:ef:
3e:ca:54:af:01:98:ad:15:92:58:cc:20:d9:da:fa:87:b5:b4:
aa:7b:58:b5:22:04:5f:0c:0d:e6:b3:73:23:ba:e9:3c:ef:dc:
05:74:6c:d1:36:48:c6:72:2b:b9:22:bd:7e:37:60:ce:77:64:
83:5f:95:f1:d1:30:b8:60:e0:c3:3f:84:2e:8c:2a:08:08:f7:
48:43:d1:ed:7f:e1:94:50:90:9b:92:d1:14:26:ee:65:40:14:
23:41:f3:f6:db:5d:68:5c:30:d0:60:67:5f:5c:e0:25:4f:69:
0d:9c:72:a0:dc:5c:11:c2:78:e8:0e:ec:e7:68:b5:0d:b1:61:
71:a7:38:0d:5d:08:0c:58:1e:14:eb:ed:03:ef:fe:06:fa:c9:
d8:21:27:a8:40:77:8e:7c:9e:72:13:63:75:e1:43:a5:ba:fa:
7f:bb:d9:f1:a8:97:cf:dc:38:1e:89:0b:5c:7f:0e:af:23:93:
79:76:8e:1f:f0:09:60:e3:a9:3b:f5:ed:c3:46:18:ea:fc:ae:
ce:92:73:1e:9c:7a:b3:a7:fd:f4:dd:fe:30:20:3a:d6:df:24:
92:4c:5a:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVDRDcxMTAvBgNVBAUTKDhCN0ZERUU0NkE5ODBDMDQzMzk4RkI3QjIzOUIwNTRE
Q0YyMzdDRDcwHhcNMjYwNzI3MDIzNjU2WhcNMjYwODAzMDIzNjU2WjAYMRYwFAYD
VQQDEw02YTY2YzQ0OS05MGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmg5WUkzfcaxyZ4sAajIRHZbdFnWeErGTvHrqIx2Y1a0No9rEWUxnfDSYwU7f
OaEQ+HaeaGiUWa5IMy1PfCnsCdT8LCMuqNgqc2/6aEw+5Zma9VrvZY0vq/f87Z6h
gh8hPm4tE5hRFlUMAQq6crjtSwdHWHBYavFLfH0D0H0kYJgXkCB03wothK+LnxFv
/HYh6MP8u4Pq6LhtRKWI3c873Ui/rtXFNMC1S47vwDH8fMlQawd3ZET2K93LpUKp
NdcC64hWfEKP3t/Gc4ymAmZzrJ3DBcU8hIm8yb5rlLV30pEjhQiFNLJNwaAaJ22f
QYESPCDYk3BNIonZXhuwvqUuiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmgWeUT
ial3OTQchRdgmqFnI3ejMB8GA1UdIwQYMBaAFIt/3uRqmAwEM5j7eyObBU3PI3zX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNENy9GRDkxODU5MDU2
N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURBUXptUHQ3STVzRlRjOGpm
TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kzX2U1R3FZREFRem1QdDdJNXNGVGM4amZOYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUNENy9GRDkxODU5MDU2N0UxMUVEOTgzQTlDNjFDNEY5QUUwMi9pM19lNUdxWURB
UXptUHQ3STVzRlRjOGpmTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN++/mLPCh0nGBzA5YCgG0Wgwqv3+OUHoe2ZiM3s90hBYPuHvPspUrwGYrRWS
WMwg2dr6h7W0qntYtSIEXwwN5rNzI7rpPO/cBXRs0TZIxnIruSK9fjdgzndkg1+V
8dEwuGDgwz+ELowqCAj3SEPR7X/hlFCQm5LRFCbuZUAUI0Hz9ttdaFww0GBnX1zg
JU9pDZxyoNxcEcJ46A7s52i1DbFhcac4DV0IDFgeFOvtA+/+BvrJ2CEnqEB3jnye
chNjdeFDpbr6f7vZ8aiXz9w4HokLXH8OryOTeXaOH/AJYOOpO/Xtw0YY6vyuzpJz
Hpx6s6f99N3+MCA61t8kkkxaig==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:16 2026 by rpki-client