
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier: 0GKd7YS+LKjuTArr/4FJPXMwEctNiEbXkHnnOKv13Bo=
Subject key identifier: 73:54:D4:DA:84:13:13:F3:68:99:5B:AE:28:EC:59:44:1B:AF:71:0A
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number: 01E1
Signing time: Fri 09 Oct 2026 04:08:25 +0000
Manifest this update: Fri 09 Oct 2026 04:08:25 +0000
Manifest next update: Fri 16 Oct 2026 04:08:25 +0000
Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: kgjJJ1n5jTvDRpD+bNah1I0TLc+D4VLT5wamZU/4mVk=)
2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Validity
Not Before: Oct 9 04:08:25 2026 GMT
Not After : Oct 16 04:08:25 2026 GMT
Subject: CN=6ac868b9-0522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ed:67:f4:f0:4f:c7:38:52:e0:2a:ff:92:04:
bd:83:da:a9:ba:b2:32:c6:e6:9a:87:0a:c6:8b:3c:
53:99:65:29:f5:c7:5a:33:ca:d6:06:ff:88:91:a8:
a2:03:fd:87:30:da:75:aa:e7:03:4d:a0:57:b4:98:
e4:6c:55:d9:40:e2:d3:b8:c9:1c:0d:c1:eb:b7:62:
fe:a8:a9:4e:6b:fc:37:66:6a:7b:28:c7:aa:4f:74:
0d:2c:e1:1f:75:64:65:22:64:57:8b:93:db:24:e4:
89:10:9d:71:ba:df:d1:2c:32:1b:34:35:56:6d:d6:
9e:88:e1:00:90:a6:5d:e4:1e:b7:5f:fd:0d:a4:10:
6f:3e:06:f0:49:b5:9e:bb:1e:64:74:b8:de:95:ff:
64:13:32:e0:6b:1a:be:25:6a:db:03:0f:e7:fa:3f:
3d:56:f4:09:d1:36:e2:84:f1:b5:b6:ab:8d:46:6e:
f5:e3:ef:02:8e:05:ce:db:8c:c6:cd:e6:cd:51:f7:
cf:cf:e6:58:ca:3c:ed:86:98:7f:66:e0:28:30:b8:
55:30:ba:70:d8:ae:d8:42:fb:1b:5c:cd:71:98:5c:
53:27:c2:39:46:7b:72:e7:87:de:67:49:6b:0f:70:
b6:cb:46:47:34:62:b1:07:ff:be:60:f9:b9:f8:45:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:D4:DA:84:13:13:F3:68:99:5B:AE:28:EC:59:44:1B:AF:71:0A
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5b:8c:d2:ff:c8:ee:f8:3b:3a:30:51:f6:c5:e5:f6:87:9d:
f5:78:ef:6f:59:73:b5:fb:65:38:9e:d1:00:8b:0a:34:b7:48:
19:3c:03:c4:7c:39:1d:73:df:41:26:1e:41:67:8c:7a:17:75:
e7:83:3b:1f:b2:bc:8f:64:45:37:08:18:ed:c4:7c:8c:ec:85:
a4:4f:76:2c:eb:44:c9:23:54:bb:7b:b2:f0:ca:81:a1:de:94:
eb:15:21:df:2c:f0:db:85:e6:c1:f2:40:fb:46:b4:3b:fd:35:
65:01:46:3f:c7:83:59:42:d0:41:85:b2:5c:67:08:ae:08:fb:
0a:11:32:c4:ab:23:d4:e4:f1:e2:f7:e8:6c:eb:c8:36:5b:a4:
c6:0c:14:8b:23:53:f7:7e:58:b9:e6:3e:be:52:3b:6b:49:fb:
f9:8e:92:12:8b:35:36:3b:51:a8:e3:6e:84:2b:0c:68:8f:76:
d8:b1:40:e9:32:43:0f:86:87:e1:95:02:27:ed:70:fc:4a:0d:
ce:02:2d:16:6b:ff:55:b4:0f:8c:39:be:f0:6a:04:94:74:9d:
ae:26:bc:03:82:c7:3f:76:8b:19:28:c6:01:b5:0a:ed:19:03:
e4:a0:f0:3a:a8:91:65:ee:56:a0:6d:78:55:74:fa:8b:72:65:
02:e3:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:51:29 2026 by rpki-client