
$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier: 8u7U6DRip9h6rU/ChWFnsfv/e9UhCP/xtWs9mkxeRsA=
Subject key identifier: D8:60:8E:D2:5D:79:E4:16:27:52:36:E6:81:62:0A:D7:E2:E6:39:D9
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial: 0C55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number: 0C3E
Signing time: Thu 16 Apr 2026 18:40:17 +0000
Manifest this update: Thu 16 Apr 2026 18:40:17 +0000
Manifest next update: Thu 23 Apr 2026 18:40:17 +0000
Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: 7jQvtZdklPiq/Igo3BSnK4g7b7rYfMBVnXCe802mW5c=)
2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=)
3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3157 (0xc55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Validity
Not Before: Apr 16 18:40:17 2026 GMT
Not After : Apr 23 18:40:17 2026 GMT
Subject: CN=69e12d11-3634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:c7:43:ba:15:8e:cb:46:4d:40:ee:2d:01:
3d:50:e0:3d:76:22:34:b9:fa:be:05:76:a9:20:39:
e3:58:80:82:96:2d:66:aa:37:ad:42:c8:8c:27:0a:
d8:5c:cf:c0:1a:c2:c6:b5:eb:d2:5b:d7:e7:49:b4:
8b:22:62:52:89:57:af:5e:18:08:2f:ed:40:d9:27:
89:3b:ab:31:a7:b4:77:0d:6b:9e:31:8f:96:a0:43:
51:7d:32:20:52:30:57:c2:fe:b2:a8:5d:c4:1f:f9:
4a:f9:2e:85:e7:1f:23:28:4d:32:1a:3d:1d:54:53:
f1:2c:26:74:84:d5:a0:de:da:81:b8:87:b8:76:67:
31:10:5d:9b:0f:06:db:6e:c1:f6:6b:6e:4b:22:c2:
65:61:77:d4:50:e4:bf:b3:67:f2:f5:ef:f3:68:84:
12:ad:94:0f:ac:4e:a1:70:24:c4:eb:f6:cc:ef:01:
bc:43:37:90:b6:fe:04:43:8e:42:2a:7f:b9:d7:07:
25:c5:a8:f6:a9:8f:ae:b4:0b:5c:d1:56:55:f0:23:
f2:b6:5b:4e:fd:b2:55:19:66:20:51:47:cb:49:ff:
ef:d6:db:37:24:bb:c2:bc:81:a2:93:8c:3e:22:d1:
a6:64:01:7c:11:f4:77:ef:e8:e2:a4:02:65:93:7f:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:8E:D2:5D:79:E4:16:27:52:36:E6:81:62:0A:D7:E2:E6:39:D9
X509v3 Authority Key Identifier:
keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ec:d6:16:13:ea:3c:26:4b:87:90:75:3c:9d:31:fb:2b:ad:
b0:aa:fe:69:1c:52:e6:82:6b:c8:8f:15:f6:d8:34:36:fe:c6:
a6:62:ca:f2:49:e1:10:18:0c:e6:58:dc:7b:d1:f9:e2:29:09:
46:6e:a6:cb:5d:0b:3d:b2:f4:7b:b2:89:54:18:55:9e:89:c1:
5b:c4:3e:7a:0b:c4:7f:88:5d:97:72:78:d2:f5:a5:b3:f2:73:
45:c5:bf:13:03:e2:c2:d7:2a:cb:65:04:f0:33:36:2a:d6:e7:
cf:39:9d:ce:f4:1c:80:9e:c7:c0:23:d2:5c:a8:0a:3c:79:e8:
bc:6c:74:2f:e8:7b:64:9d:ec:f9:49:07:45:b9:e5:77:4b:66:
94:e2:f1:eb:e6:71:7d:9a:60:90:2c:28:e7:e6:95:8a:be:8d:
ed:32:d2:19:7d:d0:e2:74:7c:06:e9:df:00:3b:38:59:be:ad:
26:81:f5:ae:82:57:77:79:3f:e4:68:fb:02:58:82:cb:06:7b:
c2:92:97:be:8a:f7:77:4b:b4:c6:f0:90:a8:69:af:4e:22:df:
65:72:90:a3:95:46:22:94:25:ba:2a:0c:e3:36:fa:74:49:00:
6e:be:b2:f1:5e:e2:04:cc:e0:e7:f7:92:f8:28:8a:b3:a5:53:
9d:54:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:06 2026 by rpki-client