
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier: X9jj1Q/QXpCctIIx4B3cd4Yxi7KMznCoA2qrL4Jv+zE=
Subject key identifier: 4A:5D:84:D8:33:40:85:D9:A1:9C:1D:79:BB:23:03:FE:90:EE:8C:98
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number: 0773
Signing time: Mon 02 Mar 2026 00:27:11 +0000
Manifest this update: Mon 02 Mar 2026 00:27:10 +0000
Manifest next update: Mon 09 Mar 2026 00:27:10 +0000
Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: 9mO9k1GA4UKUCkxT9qGfiWY83IjQEM0H2y3gzjcEArE=)
2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: KSFUQns+jUtZXbMl5PwqohaAbLzaofo6YcJauiEke4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Validity
Not Before: Mar 2 00:27:10 2026 GMT
Not After : Mar 9 00:27:10 2026 GMT
Subject: CN=69a4d95f-49b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:91:11:8c:fe:9d:a4:16:94:69:9d:98:c4:
50:be:14:ff:e3:53:ef:ef:b3:72:d6:a8:aa:a3:3a:
ef:3d:1e:77:d6:dc:fe:a5:7b:94:53:d1:f5:11:41:
51:79:29:50:19:a9:1e:5d:b1:f7:4d:6d:fd:0c:86:
e1:0c:67:f4:41:89:aa:83:43:52:b3:52:67:de:cb:
5e:11:20:7b:3b:11:2b:7e:be:b3:3f:07:62:51:a9:
80:f6:15:81:f3:c4:13:1f:e8:02:65:66:ac:28:ba:
2e:5a:9f:6a:47:48:3d:b5:89:a1:6d:6c:41:6f:8d:
90:f6:47:73:46:85:4c:da:a1:25:e8:95:0e:59:97:
46:7c:96:da:6c:f1:f0:81:f8:11:57:9f:49:d4:67:
67:91:c5:78:6c:6e:54:be:9b:c2:1d:ed:1b:2f:8b:
c0:15:dd:f6:aa:fe:84:96:8c:c7:60:b3:51:aa:18:
cd:66:ee:ec:7d:f3:8a:28:87:73:13:b9:47:ee:0d:
5f:77:a0:59:73:e7:a6:4e:ff:ac:03:82:19:07:1a:
65:06:7c:11:0e:2e:61:47:06:58:9c:aa:90:7b:be:
d3:d4:73:ee:d6:39:0f:7a:68:6e:8a:f4:4d:c2:8e:
0b:92:9d:08:de:6e:2b:c8:1d:9a:09:b8:ae:55:55:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:84:D8:33:40:85:D9:A1:9C:1D:79:BB:23:03:FE:90:EE:8C:98
X509v3 Authority Key Identifier:
keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:14:02:a5:1f:81:59:05:fe:92:5b:ef:59:e2:c4:a9:e3:48:
63:80:f7:d2:ce:82:29:2c:30:dc:fd:66:8f:6f:4a:43:45:fe:
db:c8:f3:8c:08:c8:6c:94:de:f5:3f:50:16:21:9d:4b:0d:41:
69:dd:d3:cb:ac:06:b7:34:8b:74:06:6f:8d:20:0d:80:a5:24:
34:77:0b:f7:1d:bb:ca:3c:c8:50:ea:21:6e:01:f3:3e:50:12:
7c:f1:ac:38:eb:58:ea:43:c2:99:07:6b:b5:af:27:4b:67:0b:
b6:e7:84:3e:be:a7:fa:c2:f8:f7:89:0e:a6:bc:92:74:4a:7a:
28:e0:3e:85:48:0d:b8:3e:f4:8e:01:e2:29:ef:86:26:9d:07:
3f:1e:91:96:1c:e4:46:d5:6c:36:5f:0d:8f:d2:6e:84:11:64:
11:00:6e:55:08:66:7c:57:31:5a:2c:72:4c:91:c6:52:95:3e:
5b:73:67:ae:2f:18:cc:dc:1f:ef:d4:21:9b:e6:55:9e:b3:86:
8c:eb:d6:af:1a:28:e1:d2:c0:cf:62:c3:bb:f6:1e:2e:8e:12:
be:d1:62:83:f7:0c:e0:d3:96:78:44:34:be:6d:c8:fe:80:6f:
86:3c:87:49:d6:3d:d9:c0:7a:9f:fd:2a:c3:3b:77:f5:f8:d8:
56:dd:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:48 2026 by rpki-client