
$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier: OP5MhBdfruvub8yIvWWkHbCsteDrXdFh26nRuyyU8h4=
Subject key identifier: 9F:55:8D:29:38:5B:DE:76:71:D7:79:F3:EB:23:CD:BA:3E:5D:16:20
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial: 0853
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number: 0823
Signing time: Thu 16 Apr 2026 21:02:15 +0000
Manifest this update: Thu 16 Apr 2026 21:02:15 +0000
Manifest next update: Thu 23 Apr 2026 21:02:15 +0000
Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: /a/32Uf7UGvQ89TqhIrOq5RGOEa8C8ETyfmaM+nOBEw=)
2: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: wZxfcnKBY6ws0g5Xj8YXKxzQCzDk14hq7Z5XlyYaNyg=)
3: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: lZyF/R0McwFHmab4BMeqcfU4ondgRb50VNMndNfEtsE=)
4: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: 6xwmJlbl5R7pahb4ie5zQu29OXgagY1TGzpA5chMv/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2131 (0x853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Validity
Not Before: Apr 16 21:02:15 2026 GMT
Not After : Apr 23 21:02:15 2026 GMT
Subject: CN=69e14e57-804c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:9d:7b:2c:b7:6d:4e:38:cf:40:e7:f8:6d:
25:e8:ab:de:41:61:8d:d1:2a:8c:b3:b4:1c:3b:53:
4d:87:68:4b:95:fd:4e:8c:05:85:6e:ec:63:59:c9:
32:b2:ab:d8:92:29:a1:1c:1a:4d:fc:e6:5e:01:31:
24:d3:af:f9:39:b6:ac:d7:12:50:56:1a:9d:c8:1f:
a8:62:3c:2b:ed:37:9b:ac:f3:6a:42:6a:84:b0:2f:
fd:04:3c:1b:d6:19:41:b6:9a:f2:8d:dc:58:ed:6f:
4e:d4:be:1b:5b:fc:5e:b7:82:bb:6f:52:8a:d4:d0:
82:82:c9:83:c0:6c:bb:8d:69:13:41:13:d0:15:03:
0c:79:00:66:a8:75:ec:95:48:25:ed:b2:46:6f:ad:
f7:4c:4d:e5:c7:54:4e:09:e3:a8:b3:af:eb:73:8a:
88:e0:26:65:c9:e3:11:de:6f:77:71:9a:34:5a:f8:
aa:e6:e3:e8:eb:20:4b:a9:34:ce:01:11:0b:60:3e:
fd:c5:83:71:66:5b:2b:2a:d2:5d:9c:76:7c:1b:93:
1d:c8:b9:a3:d5:a5:2d:78:6d:62:fe:52:b9:b3:81:
6f:d0:ec:29:28:78:b1:d3:9f:25:a4:19:46:19:a4:
f7:2d:47:2d:ac:7a:e8:eb:de:e3:8e:d5:25:e6:46:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:8D:29:38:5B:DE:76:71:D7:79:F3:EB:23:CD:BA:3E:5D:16:20
X509v3 Authority Key Identifier:
keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:0a:fb:1f:7f:b3:a1:4a:9f:52:bf:17:47:79:38:13:8b:b9:
7c:7d:52:3f:b8:b5:63:80:50:27:d1:32:3d:c7:99:6b:71:84:
31:a1:7e:82:d9:e7:a6:f2:07:b8:45:96:2b:e6:19:4f:9a:66:
08:e0:9f:bd:42:e0:58:41:57:2e:81:62:39:b6:02:07:df:3d:
85:f1:87:b6:e9:c8:0e:b9:03:24:28:69:0f:82:f9:e6:6b:dd:
f9:94:88:13:46:02:ba:d3:dc:88:7a:21:ab:25:88:5a:23:02:
c5:3c:47:97:03:18:71:11:1e:4b:0f:17:2a:42:6e:89:98:6f:
9f:bd:a2:13:20:76:71:98:8c:f4:34:5c:99:31:61:ed:85:16:
2d:b5:0a:cd:60:69:e8:4b:9a:f2:24:1e:31:14:75:24:df:d0:
98:9e:d0:85:2c:65:4f:fd:29:ba:87:b7:bd:0e:af:2d:b7:15:
93:8b:31:3f:15:7f:af:85:dc:c3:e2:b8:dc:ac:1d:1d:da:26:
22:5b:3b:26:52:3f:4e:6a:f7:eb:07:76:4d:5b:f5:0e:d5:33:
20:6a:67:48:a7:56:6a:f5:bc:64:a4:f6:f9:33:5c:e8:eb:ea:
30:60:bd:51:47:7e:8b:b8:7e:2a:23:bf:3c:23:5d:fa:80:b6:
74:26:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:35 2026 by rpki-client