
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json)
Hash identifier: 98F5i9SS/J1zAxrw/axkCzmIFy51BJuxJAUWtDEbpNQ=
Subject key identifier: D8:8E:03:96:68:AB:AD:90:F2:4D:17:1E:25:A4:41:85:A9:55:E2:27
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial: 01DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
Manifest number: 01D5
Signing time: Fri 17 Apr 2026 03:20:56 +0000
Manifest this update: Fri 17 Apr 2026 03:20:55 +0000
Manifest next update: Fri 24 Apr 2026 03:20:55 +0000
Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: BuiM3fL9NPqmH+q5PHQC8cNC+4fTAdf1dziilRiWwmM=)
2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: DXyPsBb+TauSinAKSbTPrnscbrr/NLc4whMOIpsP9Xk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Validity
Not Before: Apr 17 03:20:55 2026 GMT
Not After : Apr 24 03:20:55 2026 GMT
Subject: CN=69e1a718-ebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:29:6c:41:bb:51:26:0b:17:0e:98:6b:4d:
7f:43:56:51:b0:a1:cf:0f:82:bf:89:16:36:8d:4e:
dd:3a:98:e2:00:46:72:57:f2:65:1c:92:60:8d:2f:
1f:16:19:87:70:b0:b2:ed:ef:5f:71:8f:0a:b4:9f:
cc:fc:ec:9b:d5:18:96:cf:7b:15:e8:53:b9:2b:96:
07:c7:96:cd:0b:f5:ba:d1:a6:ba:66:32:bf:82:41:
c8:a1:0f:4f:9d:e4:b7:d5:f7:32:ea:29:e5:b7:cc:
f7:ab:01:fe:8b:28:00:cd:ff:20:b0:68:61:33:e8:
b3:54:b3:46:54:01:92:b0:6c:f1:ee:ca:44:57:c3:
8b:97:b8:28:12:18:1a:f5:6b:ea:2f:4b:d2:d5:f9:
8b:92:13:3c:e8:cb:68:49:6e:a6:27:32:d1:c9:80:
c0:3c:25:4a:49:d3:ff:a0:ff:98:03:f0:77:91:c5:
88:19:2f:91:f2:7d:04:1c:74:b0:65:85:cd:a8:82:
9d:a6:62:a1:c9:26:a7:7e:14:5c:7d:2c:0d:df:3b:
a0:d1:aa:20:df:38:ee:c2:ff:ef:5b:b8:ae:84:62:
17:2d:81:cc:8b:10:78:45:1b:ca:d9:d1:a7:34:33:
c7:51:15:0f:85:9a:d9:76:62:cc:4d:38:42:dd:8f:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:03:96:68:AB:AD:90:F2:4D:17:1E:25:A4:41:85:A9:55:E2:27
X509v3 Authority Key Identifier:
keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:27:97:c0:38:fe:a4:e7:44:29:53:48:1a:05:02:6a:79:a9:
34:dd:1e:e2:28:e0:42:1c:eb:f5:8e:ea:83:ab:dc:6b:63:18:
97:e3:e7:ea:ae:43:3c:53:4f:25:2f:99:a1:71:6b:8d:c3:9f:
b7:6b:72:0d:0e:f4:56:42:bb:c2:12:3a:b7:07:cd:eb:29:57:
9e:66:01:06:1e:6b:7b:26:86:22:1b:c0:01:20:22:0b:2e:4c:
ad:a3:76:42:35:97:3c:c0:b2:09:e4:9c:c2:18:0e:d1:b2:bd:
67:cc:dd:d6:1c:3a:91:df:cf:ce:d0:2c:68:e7:0c:05:c7:9d:
4e:de:8c:8b:61:c9:fd:a4:0a:36:f1:51:87:dd:19:7c:25:d5:
90:79:af:f6:8f:81:26:5c:ff:4e:e2:26:af:a7:53:bb:0d:81:
dd:65:2b:6d:63:26:ad:ae:23:e6:21:ef:c9:b5:51:b4:02:98:
34:bb:23:9c:34:95:c0:d3:af:fe:7b:d3:0b:a9:79:ce:77:14:
6d:9c:0c:d2:3a:69:53:20:66:60:1c:12:dc:f0:83:ab:cc:e6:
47:e2:2c:e4:ff:a9:5e:53:0b:bf:01:90:53:16:15:da:d9:4b:
06:b3:99:ae:fa:b1:c6:48:01:88:28:92:74:04:c9:b0:10:35:
55:71:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:22 2026 by rpki-client