
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json)
Hash identifier: dp94D0lCeqfYcp8nVajcd4GDMYAPVxoAAv2M5FM+yjs=
Subject key identifier: BF:15:0F:79:3D:C6:8C:EF:4B:2A:A4:67:64:C7:8A:C8:6F:96:54:9F
Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
Manifest number: 020C
Signing time: Tue 28 Jul 2026 16:31:40 +0000
Manifest this update: Tue 28 Jul 2026 16:31:39 +0000
Manifest next update: Tue 04 Aug 2026 16:31:39 +0000
Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: a/nRV6twrdoEvNttv7ZbWLI3G6LlWewCgV7Fiqc8ZIo=)
2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: yEyjyfL4qmMdrXUNa8/FxH8a11hKOq88Y/fK6pSWFOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl
rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Validity
Not Before: Jul 28 16:31:39 2026 GMT
Not After : Aug 4 16:31:39 2026 GMT
Subject: CN=6a68d96b-067a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:b3:52:f4:da:2b:99:fe:89:4f:d4:a7:5b:
f5:93:97:76:bb:6a:44:d2:8d:3c:c6:67:d1:c6:c0:
69:69:b5:a3:c0:06:d6:00:98:72:c0:a2:48:2b:92:
34:2a:fe:36:16:d7:c0:e0:9b:1e:73:86:3b:7e:e1:
10:83:6d:da:8d:e9:d5:d5:f2:80:95:ae:92:aa:09:
ca:52:64:5e:f2:5f:05:d0:1f:72:a5:17:b0:c6:a3:
89:39:cd:c2:e8:c9:03:89:34:bc:75:ce:8e:49:d3:
b5:31:36:6c:78:91:52:98:c4:90:39:56:bb:e3:70:
b2:04:e0:ee:54:6d:3f:56:b1:56:d4:78:3b:49:94:
e8:ea:9f:c2:f1:91:31:02:81:f8:71:56:58:d7:24:
e5:57:9b:22:00:8c:92:94:12:93:2d:2b:46:fd:40:
2b:60:ae:7d:a0:e1:a6:84:54:94:6c:aa:cf:9b:47:
a3:0e:c4:e9:85:b4:b5:6b:c0:68:03:f1:32:1a:16:
47:e1:ed:54:67:5f:3d:fa:37:a4:45:aa:88:ed:0e:
1e:09:00:d7:fb:59:7c:26:d8:5c:9c:6e:a5:a8:ef:
d2:79:e8:32:d0:f2:54:ae:b1:e9:c0:cf:9c:9b:8e:
a6:80:4b:54:20:2b:32:24:4c:db:1d:2c:5a:8b:b9:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:15:0F:79:3D:C6:8C:EF:4B:2A:A4:67:64:C7:8A:C8:6F:96:54:9F
X509v3 Authority Key Identifier:
keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:4d:ce:07:0a:bf:b0:85:e9:f9:7b:ed:22:cd:6d:00:19:77:
a3:8d:a2:77:8a:73:3b:6c:b4:3a:a8:42:61:21:67:63:4f:8e:
a0:6d:a8:47:e9:99:bb:ac:d1:90:61:0d:49:ae:67:bf:2f:d3:
fd:d1:ab:f7:a3:01:0d:c1:55:e8:63:3c:d6:c3:b7:a6:ef:f5:
d8:56:3d:aa:8b:e7:df:35:21:12:79:ee:8c:ec:a2:4a:eb:54:
1c:a0:46:2d:20:de:e5:ef:9d:a8:5e:a6:da:e2:c2:8f:d8:da:
82:93:01:a1:04:f0:7c:90:f9:c7:05:b1:9f:94:e9:ec:9b:ce:
98:96:af:03:a3:ec:a5:87:e5:2d:99:2f:ee:eb:f1:c5:68:c8:
73:bf:24:45:40:fe:b1:87:f6:9c:28:18:91:98:b4:f2:13:0d:
52:5d:5f:57:9a:8a:7b:ba:50:29:09:ba:c3:3e:ca:74:b7:96:
b1:6d:5e:a3:a3:2d:9c:7c:13:68:12:5e:93:d2:d0:e0:cf:53:
20:f7:e5:57:fe:a7:00:31:b4:15:25:ad:bd:0d:14:69:35:11:
be:b5:a6:95:ce:b5:4d:2d:1c:b6:e8:f1:80:48:85:a2:cc:21:
6d:2e:74:d7:27:f3:73:77:57:e8:37:be:22:83:11:47:64:fc:
43:de:b5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:53 2026 by rpki-client