
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier: aME/kS+is3BlvI2+oCJlJ/B5lq0JUECagk3O3MjWuLg=
Subject key identifier: DF:D0:D5:D3:E0:F3:C1:DA:D4:1E:61:C5:0A:35:D0:65:27:95:12:65
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number: 01A5
Signing time: Sat 13 Jun 2026 04:12:49 +0000
Manifest this update: Sat 13 Jun 2026 04:12:48 +0000
Manifest next update: Sat 20 Jun 2026 04:12:48 +0000
Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: rLVRvca3CJqrkRak4H6bbHeEDLdir0UIlQI3F42igDw=)
2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Validity
Not Before: Jun 13 04:12:48 2026 GMT
Not After : Jun 20 04:12:48 2026 GMT
Subject: CN=6a2cd8c0-08c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:60:70:84:3b:a2:e9:90:0c:ad:3f:7b:09:
07:4d:34:38:0b:aa:80:1e:9b:3b:8b:77:47:e1:a9:
8f:d8:f2:92:c5:81:ff:78:8c:d5:39:c0:d5:63:47:
03:cd:10:f6:e7:1a:d8:06:31:b7:92:47:9a:2a:1c:
6d:58:ae:65:0e:a3:87:f2:95:20:8e:16:5a:74:29:
46:96:74:ce:26:83:41:27:5e:4c:78:fd:da:12:1e:
47:55:13:15:da:cc:63:e4:ff:6d:83:86:c8:18:86:
16:b7:ae:84:f3:ac:4f:26:e6:16:68:4c:02:a6:49:
47:69:f6:75:5b:51:e7:2d:b2:48:03:7e:ca:3e:29:
35:54:bd:99:7b:7c:58:80:97:f0:15:8f:b8:1f:c4:
14:df:f6:c2:da:88:70:58:8e:0c:b9:d0:46:f5:2c:
da:3d:90:95:e1:ca:c6:51:05:5c:ec:a2:9e:36:81:
77:a0:8d:db:d6:2e:b7:2e:60:63:62:05:52:3e:8e:
fd:a4:45:6d:c8:8e:a7:fc:20:3d:ce:b3:a5:4d:31:
58:9c:c4:6e:67:91:ac:e8:e3:c1:97:cf:6f:f6:0d:
af:f0:c3:5a:fc:bb:94:8d:32:fc:29:5b:23:40:5c:
76:3e:99:41:ea:25:d9:62:94:c3:94:0e:34:8c:e1:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:D5:D3:E0:F3:C1:DA:D4:1E:61:C5:0A:35:D0:65:27:95:12:65
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7a:e3:32:3b:fc:a9:9e:ad:6f:cf:ef:f0:e5:80:34:a3:5b:
39:4e:be:2d:4e:2b:be:e7:63:b4:5d:69:36:57:95:2d:c6:46:
d6:d1:1b:33:d3:62:08:91:e4:9b:a1:28:a7:39:8b:e9:f0:a1:
77:f3:cd:44:15:be:1c:29:56:22:7e:74:b6:04:e8:a7:75:9f:
fe:6c:62:cd:c5:3f:2c:7c:65:21:94:06:2d:0b:1c:1b:24:12:
c6:61:e4:56:3e:a0:df:2f:ed:9e:62:3f:02:4d:81:17:be:f8:
c0:c0:e0:54:66:af:e5:69:99:4c:d0:d3:c6:2c:28:17:dc:79:
9e:88:49:59:17:ad:d7:37:6a:38:82:95:3b:39:52:4c:22:ac:
64:e2:d1:c5:a9:9d:a2:c0:7c:81:b2:ce:56:1c:72:8a:43:a6:
93:97:ab:a4:fb:ee:45:f7:22:49:d2:c7:c7:9a:af:37:9a:eb:
60:86:4a:60:54:c8:48:4f:e1:36:39:f1:66:0c:35:37:aa:4c:
6b:bb:27:43:55:c4:46:ef:00:cb:19:81:7b:df:99:6f:78:b3:
8a:45:b9:8f:7b:b4:db:6d:0d:76:5d:ba:62:c3:bd:4d:d8:f5:
30:36:49:1a:ed:98:38:e2:d2:99:0e:c9:71:84:4b:20:07:c2:
ba:c7:66:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD
MjBBRTUzODYwHhcNMjYwNjEzMDQxMjQ4WhcNMjYwNjIwMDQxMjQ4WjAYMRYwFAYD
VQQDEw02YTJjZDhjMC0wOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuihgcIQ7oumQDK0/ewkHTTQ4C6qAHps7i3dH4amP2PKSxYH/eIzVOcDVY0cD
zRD25xrYBjG3kkeaKhxtWK5lDqOH8pUgjhZadClGlnTOJoNBJ15MeP3aEh5HVRMV
2sxj5P9tg4bIGIYWt66E86xPJuYWaEwCpklHafZ1W1HnLbJIA37KPik1VL2Ze3xY
gJfwFY+4H8QU3/bC2ohwWI4MudBG9SzaPZCV4crGUQVc7KKeNoF3oI3b1i63LmBj
YgVSPo79pEVtyI6n/CA9zrOlTTFYnMRuZ5Gs6OPBl89v9g2v8MNa/LuUjTL8KVsj
QFx2PplB6iXZYpTDlA40jOFXqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/Q1dPg
88Ha1B5hxQo10GUnlRJlMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4
RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN
U1R5S19INkcxbW5DQ3VVNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtnrjMjv8qZ6tb8/v8OWANKNbOU6+LU4rvudjtF1pNleVLcZG1tEbM9NiCJHk
m6EopzmL6fChd/PNRBW+HClWIn50tgTop3Wf/mxizcU/LHxlIZQGLQscGyQSxmHk
Vj6g3y/tnmI/Ak2BF774wMDgVGav5WmZTNDTxiwoF9x5nohJWRet1zdqOIKVOzlS
TCKsZOLRxamdosB8gbLOVhxyikOmk5erpPvuRfciSdLHx5qvN5rrYIZKYFTISE/h
NjnxZgw1N6pMa7snQ1XERu8AyxmBe9+Zb3izikW5j3u0220Ndl26YsO9Tdj1MDZJ
Gu2YOOLSmQ7JcYRLIAfCusdmMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:42 2026 by rpki-client