
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json)
Hash identifier: hRGEDMhmwKWKIW2fz/maLzkMzTIpH10yAi9OHqC4les=
Subject key identifier: F1:70:79:BB:7D:3E:93:2D:9B:A8:23:BF:79:93:F7:DF:1A:81:3D:D2
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
Manifest number: 0207
Signing time: Mon 27 Jul 2026 04:40:46 +0000
Manifest this update: Mon 27 Jul 2026 04:40:45 +0000
Manifest next update: Mon 03 Aug 2026 04:40:45 +0000
Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: cdIDD8AK3M9d8OFthesiL6zdSnB6xh3htvafVI7Zezs=)
2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: DXyPsBb+TauSinAKSbTPrnscbrr/NLc4whMOIpsP9Xk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Validity
Not Before: Jul 27 04:40:45 2026 GMT
Not After : Aug 3 04:40:45 2026 GMT
Subject: CN=6a66e14e-bf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:d6:13:70:cb:54:4c:fc:cd:59:e0:4b:95:
17:e2:5a:1d:cf:19:c9:99:8a:7e:5f:e4:7e:c7:73:
9d:cd:4f:a8:49:e9:79:a0:4b:af:59:b7:fb:5d:c7:
71:f9:f2:06:dc:28:bb:96:6b:b4:10:0f:6e:ae:5e:
45:61:f1:8d:41:0d:3f:07:94:ea:63:47:91:70:d1:
0d:40:26:89:d7:61:b7:29:f1:6d:fd:56:c1:10:c0:
d6:fc:03:e2:cf:0b:8b:17:4a:25:e7:37:51:09:64:
bf:1d:24:49:40:18:ad:b7:0b:d1:98:24:96:2d:df:
14:a9:c4:0c:01:de:c8:6c:46:90:73:7f:cd:0d:b0:
ca:35:23:8c:64:35:2d:97:98:1b:b3:ff:7b:73:61:
6c:57:fc:7b:27:0f:cc:94:7d:7e:ef:62:23:62:7f:
fa:d7:4a:4b:01:7f:bf:b2:ae:3a:38:f0:11:f0:f3:
18:f6:59:44:b7:a8:e0:fd:64:b2:b0:53:bd:66:9e:
2e:a6:79:13:02:92:05:bf:dc:0f:93:08:1b:00:f0:
23:37:74:2d:7e:9c:21:e1:df:a0:ab:48:c7:36:ff:
54:4a:f4:4a:fb:1a:5c:fb:f1:4d:9a:ca:46:0d:4a:
87:8f:84:a3:31:46:14:44:2f:23:83:1b:98:92:c7:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:70:79:BB:7D:3E:93:2D:9B:A8:23:BF:79:93:F7:DF:1A:81:3D:D2
X509v3 Authority Key Identifier:
keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:cd:cb:1e:61:6f:3f:3d:66:3d:51:7d:da:78:53:5b:60:
ee:11:6c:d8:fe:2a:00:f4:61:14:10:a4:c0:76:aa:c9:6b:86:
af:b1:58:70:d9:20:3b:dd:05:e8:34:3e:3e:95:1c:69:e0:25:
f9:db:ff:ac:ca:ec:d8:c4:dd:7f:2c:7b:18:cb:bc:36:ba:61:
2f:0b:55:32:fe:db:58:59:86:2d:72:5e:74:94:43:a1:1f:62:
dd:11:a5:bf:0b:c0:c5:83:67:78:d8:26:84:27:7c:e0:30:bc:
be:26:86:2b:98:cc:ab:a7:4b:fb:1a:45:9b:ac:01:5b:29:87:
18:1c:f0:35:c2:e9:b2:c5:5f:a2:f4:1a:bd:66:b0:dc:35:ad:
1b:17:29:ee:31:78:e4:de:ba:ee:38:18:ff:c2:9b:ad:15:68:
d3:5d:dd:a3:62:3c:ee:d8:7a:4a:7a:8c:9f:86:74:57:f2:84:
cb:77:7a:f6:39:2f:4d:71:6c:bd:a8:f2:34:1b:fd:8b:15:2c:
d5:c6:b0:97:3e:63:2a:f5:80:98:a0:d4:67:54:ab:71:e2:30:
9f:4c:9a:ef:29:8c:6f:e8:e3:5e:87:75:57:88:f8:a2:aa:79:
43:71:b3:29:1e:c4:7a:16:76:b3:3c:96:dd:96:dc:ef:58:3e:
6a:cb:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:13 2026 by rpki-client