
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
File: tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json)
Hash identifier: FMmUDXOLfHUjxkiOl64eMrQ8+zPZama9cD1ytpLu0vc=
Subject key identifier: 43:CA:6C:FE:8B:69:3C:33:6B:E4:01:24:6B:02:C2:BB:C0:1B:F7:C8
Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Certificate serial: 0721
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
Manifest number: 071B
Signing time: Sat 28 Feb 2026 22:20:14 +0000
Manifest this update: Sat 28 Feb 2026 22:20:14 +0000
Manifest next update: Sat 07 Mar 2026 22:20:14 +0000
Files and hashes: 1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: HFE+omi/aRFN8htpohqVKfQXb8o78Q0cKkqq1I30/pE=)
2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: y+B4buIfbruqaejaK6x75+RSn7pa5KBjABUZlRGt/q8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:20:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825 (0x721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Validity
Not Before: Feb 28 22:20:14 2026 GMT
Not After : Mar 7 22:20:14 2026 GMT
Subject: CN=69a36a1e-b72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:8f:06:7c:55:4d:8e:1c:da:01:e1:f3:4a:
9c:92:fa:e6:be:70:4d:25:62:d3:fc:06:21:3f:d2:
d5:11:82:aa:ea:55:93:3f:80:db:d7:76:96:27:22:
2d:83:ab:bb:38:c0:74:d7:a6:29:36:06:34:74:0d:
14:f2:61:28:9f:58:02:0a:57:fd:08:d9:60:1d:9c:
fd:aa:64:bc:be:f6:bf:4b:c3:12:dd:9f:42:81:0d:
bd:25:d3:e2:28:c2:4e:3c:e4:cb:b7:ba:3f:50:4e:
83:16:c1:63:62:8f:b0:32:90:2b:5b:42:3e:74:42:
60:63:3c:00:a4:1f:8d:12:d8:46:66:cb:6d:92:90:
66:38:30:7d:ca:6c:a3:8b:8a:82:69:f2:a5:f9:8e:
27:0d:79:1a:98:b5:05:96:02:e8:16:8a:66:58:80:
cc:2a:e6:1c:a1:1b:68:73:72:91:e9:e6:33:1b:cd:
80:62:87:c0:f6:10:3b:9f:f7:17:56:48:67:ee:5f:
ba:a1:f4:5f:ec:c7:4b:a0:c6:aa:bd:14:2b:6e:09:
f5:b2:d8:e1:e8:ff:e0:cc:f3:2a:04:09:fc:91:63:
83:d8:1f:59:92:65:56:0a:5a:f9:97:65:09:e9:4a:
40:e1:5f:aa:f7:23:ad:a5:d6:28:26:33:a5:3b:63:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:6C:FE:8B:69:3C:33:6B:E4:01:24:6B:02:C2:BB:C0:1B:F7:C8
X509v3 Authority Key Identifier:
keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1b:c9:e1:29:fb:5a:e3:e5:2b:1d:e6:8e:02:8c:57:ea:15:
35:e2:f0:96:28:97:ea:28:0f:66:3b:bb:18:1d:79:95:95:04:
69:08:43:a9:df:ac:ae:46:6e:8c:46:44:89:b6:98:ee:fb:28:
b0:67:b4:b0:0b:4e:6d:90:e6:c4:ff:1a:36:20:82:27:54:64:
18:a0:9e:95:3e:85:5c:a1:ed:e9:25:18:94:64:8c:4f:6c:39:
84:96:0a:9c:b2:4f:e9:d5:46:ca:44:35:6c:39:ad:95:4c:57:
ca:a2:94:ea:e2:a6:b3:91:e9:82:65:ef:74:b4:16:ab:06:d3:
d3:6a:d9:3a:7e:25:be:4c:2b:54:c8:e5:69:27:4d:c1:72:60:
49:a1:09:3f:60:a1:52:a8:4d:63:cd:b9:78:44:a5:b1:fc:40:
19:8b:62:8d:8a:0b:4e:61:13:c8:4f:5e:d3:5a:05:8e:31:61:
39:e2:69:03:6b:2b:99:e2:b2:1d:6f:ad:3c:d4:a6:36:6d:59:
18:45:02:82:7e:20:79:08:99:50:2a:c7:53:6b:a9:6b:e7:fe:
ab:75:13:19:d3:81:7a:62:25:79:42:32:9e:3c:ca:3a:44:41:
29:e5:00:5e:4f:c8:80:ae:58:d9:55:8f:56:23:bb:d2:b1:0d:
7d:c6:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:45 2026 by rpki-client