
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier: KTH8vZYEuhpriuXf5D5X49/K6vp+C2NEZruSPfX4VKg=
Subject key identifier: 92:4A:17:CD:C8:03:16:8D:0F:10:F8:42:35:6F:A2:2A:D7:8B:EE:99
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number: 07A3
Signing time: Thu 16 Apr 2026 22:49:31 +0000
Manifest this update: Thu 16 Apr 2026 22:49:30 +0000
Manifest next update: Thu 23 Apr 2026 22:49:30 +0000
Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: RkNI2pU2t02+slbBFYfU/ScQoYsIfyAEgXBdaz7P+2w=)
2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: KSFUQns+jUtZXbMl5PwqohaAbLzaofo6YcJauiEke4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Validity
Not Before: Apr 16 22:49:30 2026 GMT
Not After : Apr 23 22:49:30 2026 GMT
Subject: CN=69e1677a-b39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:af:e0:d3:a8:13:d2:eb:ab:84:23:5b:8b:
12:4d:5f:01:f1:90:39:28:3a:5b:46:32:d2:4d:42:
d0:7f:5f:d7:0c:ed:24:e1:23:23:77:00:df:17:ee:
7c:e8:18:24:39:c5:c4:cd:5b:2b:29:d2:44:c3:d9:
52:18:ab:6c:ec:cf:ca:21:e6:bc:d5:66:a0:e3:f3:
88:b0:f5:78:f0:24:4f:8d:e7:f2:2b:cc:72:72:6c:
eb:d6:28:50:9c:71:35:90:12:81:9e:74:5d:63:0f:
83:c6:ef:8a:67:f2:49:ac:5d:7a:5c:8b:d3:85:34:
0a:5c:41:53:02:e6:99:67:29:8b:de:b0:7d:a0:de:
22:ea:d2:19:89:29:15:c5:17:7e:f9:10:6a:55:57:
a6:2e:39:05:3f:06:fe:51:c4:c8:a1:02:ad:f0:64:
58:9b:ce:fb:5b:65:74:6a:60:38:d8:15:61:95:de:
17:7c:f7:34:7a:19:bd:9b:29:40:f1:9b:8c:55:a6:
f7:f6:e6:cd:f4:bc:0a:0e:99:ed:28:1b:f8:c4:52:
1f:a4:80:5d:89:a9:e7:e5:83:c7:17:ed:46:2d:5e:
5a:3d:99:cc:0f:ef:c8:b2:23:83:b5:38:ba:d2:9c:
29:ad:c8:c8:30:a7:4e:47:f0:9c:2d:8d:61:a8:a0:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:17:CD:C8:03:16:8D:0F:10:F8:42:35:6F:A2:2A:D7:8B:EE:99
X509v3 Authority Key Identifier:
keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1c:6d:88:db:88:fc:5d:a7:59:d3:16:31:14:03:38:e3:34:
ea:6c:9a:15:91:99:5b:b7:76:47:b1:57:c4:2c:3f:9b:29:c0:
06:24:55:d9:ef:80:07:2a:b8:59:28:9e:68:f2:9b:20:da:44:
0a:77:05:b2:fa:6a:d9:b2:d2:ca:b9:6d:39:5c:d3:04:1d:49:
84:5a:00:8d:9a:73:46:22:db:06:cf:77:07:0d:b5:58:35:5c:
3f:67:8e:8b:62:2c:b8:66:8c:a7:12:73:da:aa:e4:52:c0:25:
9c:a0:23:62:3b:79:c1:d9:c9:c8:dd:ba:11:24:68:c9:dd:cb:
ed:ec:dc:8d:b6:fe:8d:f6:7a:34:21:4c:ce:b7:72:3a:8b:b9:
99:85:3e:e6:e5:1b:c4:73:c5:bb:ac:5a:55:77:9c:1f:df:72:
70:5c:9b:da:7d:30:bb:fe:5f:f8:4e:e4:48:06:ef:da:53:19:
a0:a7:1c:bf:81:a2:a2:aa:6a:24:22:18:60:a6:44:27:6f:02:
42:cc:50:c6:25:16:16:2a:d7:ae:18:7d:74:b3:65:61:a0:1b:
ec:13:4f:6d:2b:e0:83:db:6b:41:e5:22:7b:5f:ab:e3:57:6a:
6e:e8:6c:87:7d:73:e5:d4:ff:9b:12:92:47:e5:b9:53:34:00:
92:74:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:05 2026 by rpki-client