
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier: GvknRNGmp+64CLEJTqxK8meaDY4SZ5vfMmV/YFM6+/Y=
Subject key identifier: 12:37:47:81:6C:44:1B:ED:BE:83:29:A3:1B:F7:85:C9:A2:FB:31:8A
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 08AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number: 0877
Signing time: Thu 24 Sep 2026 20:51:04 +0000
Manifest this update: Thu 24 Sep 2026 20:51:03 +0000
Manifest next update: Thu 01 Oct 2026 20:51:03 +0000
Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: 3TxWHuKKlouJbXNh5PCnUL97AsGi3J+TTmACmk2R2WE=)
2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: U6Px3+2UpSkVxzu/Qr8RX6ggWXcyYRot1wBwG96ExR8=)
3: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: /7IYWI/di3kJsTIoYEmQknNBsesmz2VOwgqLTQpmC0M=)
4: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: OEyVTkl1WhphFhFfhyBKXGd5r6CJfOuj4maOaVwdIhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218 (0x8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Sep 24 20:51:03 2026 GMT
Not After : Oct 1 20:51:03 2026 GMT
Subject: CN=6ab58d38-14e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:66:ff:85:b1:d4:6d:6d:0f:10:8b:93:d3:
77:26:39:5a:bc:72:87:81:79:34:5d:6c:d7:20:0c:
2a:04:31:0c:6d:4d:02:d2:b3:07:d6:12:68:8d:1c:
c9:8c:62:e2:13:05:16:59:e9:d2:68:98:4a:fd:57:
ef:e7:76:2c:72:1e:3d:f9:ec:79:de:c5:56:f8:a4:
96:fe:cf:1e:80:b9:74:9c:41:5c:06:8e:74:f1:f6:
e2:31:a0:9f:b8:6d:0a:22:67:87:43:4f:39:93:e1:
f8:32:a9:ea:c7:63:73:e1:9a:85:30:08:1c:1a:b8:
a4:02:19:59:0a:e7:74:65:a2:73:ae:59:33:aa:47:
e6:32:24:34:8d:61:50:75:f5:84:9b:d9:ef:5e:aa:
5d:2c:a0:bb:ad:25:22:c6:6f:5b:8a:84:62:d4:fe:
74:46:47:74:2f:49:ab:a9:fb:c6:f2:9d:42:ae:df:
a1:61:1f:9e:3e:19:74:71:84:1e:9d:6a:14:2c:19:
ce:a7:ca:94:3d:9f:ab:9c:6d:2b:43:f6:c1:fa:dd:
55:45:fb:c5:dc:1a:0c:9f:40:cb:c4:0d:8d:5e:2f:
87:4f:86:27:ec:1f:6a:5d:68:97:2c:b8:e3:37:80:
8b:5b:43:19:8f:c7:64:4f:a8:44:1d:a0:26:70:ba:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:47:81:6C:44:1B:ED:BE:83:29:A3:1B:F7:85:C9:A2:FB:31:8A
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:f5:a9:2a:dd:1c:c8:dc:48:1e:58:cb:93:6e:54:af:34:
3b:38:53:73:6c:97:1d:e3:b2:61:00:02:14:d1:6e:5f:70:9a:
78:11:a1:29:7c:b2:9c:99:c8:0c:ab:65:6d:10:87:1b:8e:b7:
d8:6d:8b:5f:f9:9d:bc:0d:8a:e9:8c:4f:24:03:63:79:98:a4:
50:5c:5c:5f:f8:f9:08:c3:29:a1:4c:40:cf:6c:12:fe:c3:62:
9b:d4:dd:7a:33:ae:e1:01:50:70:17:b0:9b:89:91:32:d0:ea:
d3:2f:72:e8:ca:e8:4e:3e:53:d5:ff:c8:1f:47:2d:06:3a:a2:
74:81:26:8e:6f:73:9b:6b:69:77:49:d0:ef:d9:4a:e2:95:7b:
94:2a:0d:e6:1f:99:39:f7:b4:2a:ae:50:8e:4e:2a:9f:48:6b:
2b:c4:5e:30:2f:65:5c:72:8c:d7:07:2f:a5:75:9d:4f:aa:57:
57:5c:90:ec:b3:e6:75:bf:48:f5:95:4f:f0:0d:a7:e8:01:85:
f2:53:75:9e:2c:47:10:d8:14:89:e6:60:87:7a:a8:90:25:b6:
58:2f:b1:0b:98:5c:62:3e:03:44:e1:64:01:2d:a5:6f:88:32:
8f:95:8c:c6:d3:b6:50:09:d3:6d:be:ae:2f:8a:cd:a3:6b:fd:
c1:ab:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:23:59 2026 by rpki-client