
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
File: etynHr4-GRMw4DyU0rT0_4mIRcU.mft (raw, json)
Hash identifier: IwDCdDESfpTM5auybBZXqa5+dP2SMkcJk3or9YAxEmA=
Subject key identifier: 47:02:67:5D:45:52:A6:8E:18:27:02:C3:C2:FB:64:BE:B3:CE:F5:F7
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Certificate issuer: /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial: 085D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
Manifest number: 084B
Signing time: Sat 28 Feb 2026 21:08:39 +0000
Manifest this update: Sat 28 Feb 2026 21:08:38 +0000
Manifest next update: Sat 07 Mar 2026 21:08:38 +0000
Files and hashes: 1: etynHr4-GRMw4DyU0rT0_4mIRcU.crl (hash: fWc9+TrC8EzzL6OfOq1lH0hIlRtsgek1tN+3Nmz1RI8=)
2: 1296A2EEFA1B11EA94AA6082C4F9AE02.roa (hash: QvC0naa2hsBftkpLoa3+nw3P5KmAxn2g2Jy737jOnbM=)
3: B7DF4CB0143711ECA137850DC4F9AE02.roa (hash: laTjFrVubY9e/HqXOTVMQUClw9bKB+tbq9rC5b8xxBQ=)
4: 86CDBD00FEB711EABA9B645CC4F9AE02.roa (hash: Y424A3Vvh/BUekHBsTE/Lv5kKrOjIed6mILejiBeLbU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F912, serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Validity
Not Before: Feb 28 21:08:38 2026 GMT
Not After : Mar 7 21:08:38 2026 GMT
Subject: CN=69a35957-17b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:4b:2c:a3:80:df:a9:83:58:a5:d1:0c:59:
11:bd:33:8a:7a:84:f8:79:2f:93:3b:65:aa:59:03:
df:ae:61:d9:ec:c7:7d:33:f3:98:12:d3:64:a7:5e:
3a:f7:72:06:cf:88:fc:d1:8a:1a:d5:fc:d7:ce:c9:
0a:9a:f6:e0:39:ce:fe:16:36:e5:77:57:57:5e:70:
41:46:eb:a3:95:9e:d5:ff:9a:cc:f6:39:5e:de:6c:
dd:cf:87:14:59:8d:22:54:d9:e2:fb:6e:b3:71:71:
63:17:42:2b:04:ed:71:b5:03:9e:56:59:bd:19:cc:
47:08:c8:79:a7:d9:0e:87:eb:b2:9e:7e:5d:cf:a8:
89:ad:24:96:dc:32:0b:56:62:25:ab:41:b9:16:76:
5f:c5:5e:59:ca:e9:5b:5f:e2:e1:c5:a8:05:3e:10:
01:2b:91:d2:e9:8f:df:48:3a:ce:fb:62:c5:00:be:
25:0c:14:cb:d7:d7:24:e6:62:c2:d9:41:a8:1b:74:
e6:0e:5e:dd:bb:f5:4b:86:6a:5a:7e:8d:b4:b2:a5:
1d:df:8f:5c:e9:70:6e:35:77:64:44:2f:aa:00:6d:
30:66:61:d3:68:64:e3:b9:95:56:d2:f5:1e:87:a1:
54:8e:8a:6a:b1:0e:01:e4:25:5f:c4:7b:36:a5:d1:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:67:5D:45:52:A6:8E:18:27:02:C3:C2:FB:64:BE:B3:CE:F5:F7
X509v3 Authority Key Identifier:
keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:18:a6:be:bd:81:2f:0a:10:dc:cb:d2:ed:6b:48:64:57:a5:
ed:e2:d0:65:91:cd:b7:51:5c:8b:1d:93:46:bf:2d:a6:57:8b:
10:6a:29:30:2b:59:99:22:3b:6b:69:dc:d6:7d:32:42:e6:1a:
ef:a1:5f:5a:08:8a:9e:20:3e:83:de:b3:5a:60:f3:03:c5:4d:
f5:53:60:d7:78:d7:35:1c:c4:8e:ab:e8:3d:cd:c7:6e:d0:54:
00:93:d6:f0:12:f6:d7:36:64:4f:90:11:75:47:f4:59:56:eb:
e3:4d:bd:f2:45:b6:cc:52:04:93:d3:d4:28:81:24:db:52:13:
aa:ba:c5:95:58:57:67:1a:de:28:cf:6c:fd:86:02:d5:5a:f9:
0e:57:6b:29:e9:1c:89:86:1c:48:c8:45:69:9a:e9:8c:62:82:
aa:ea:b5:6a:fa:2a:80:1d:7d:b3:f4:87:e4:6c:b0:2a:8b:e1:
60:d3:4e:95:8c:ec:f1:16:d6:c5:95:78:f9:48:bf:ef:71:c0:
c0:57:b9:d5:e8:c0:c4:44:3f:6b:5e:a0:43:9f:10:c4:6c:f7:
13:fb:ec:03:a7:e5:1a:f7:29:f1:73:0e:44:f4:05:8b:9b:3b:
71:71:2b:fa:23:0e:b2:f6:7b:64:a6:50:0f:b8:64:b5:17:48:
75:6e:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:17 2026 by rpki-client