
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier: R54ul3ROlE1WRyKgrex6DQHUl9YuKWk6jTcNEoLmrlc=
Subject key identifier: E4:C5:72:3F:B0:61:EE:5D:C2:8C:4F:63:64:BA:A6:02:46:EC:C0:FB
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number: 01BC
Signing time: Wed 29 Jul 2026 05:09:37 +0000
Manifest this update: Wed 29 Jul 2026 05:09:36 +0000
Manifest next update: Wed 05 Aug 2026 05:09:36 +0000
Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: NDg+eOX9ftPJUetfXnx4Nrajy4Z7IryksoNZbxbpHtU=)
2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Validity
Not Before: Jul 29 05:09:36 2026 GMT
Not After : Aug 5 05:09:36 2026 GMT
Subject: CN=6a698b10-d69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:1f:01:48:01:c5:9d:99:5a:a0:10:76:e0:
89:a7:e1:f2:8c:aa:c8:81:c8:95:84:d6:a7:1b:c9:
b2:d2:0c:b7:9d:8b:85:10:24:e0:c8:25:6b:5e:ed:
72:34:be:f7:98:6f:11:f5:0a:1d:77:3b:c0:52:f8:
38:a6:08:31:00:53:20:66:43:1c:aa:0b:54:e3:b6:
a1:5d:9e:3b:6d:1c:29:f5:d1:bb:57:f1:ad:e6:22:
a4:9d:d2:06:a2:62:99:9f:4c:cd:4a:f2:d8:e1:ab:
9a:52:b8:87:fb:a0:40:c2:11:f6:bf:01:3d:03:7f:
fe:15:2c:f7:be:a7:d9:85:e1:c8:19:12:e1:f3:1b:
8c:c2:ab:d0:3f:9f:32:2d:95:21:5f:06:18:23:ba:
8d:bd:25:44:e3:7e:e8:45:22:50:80:df:b8:88:32:
6c:8a:0f:bb:bf:ed:17:bd:a2:5e:ae:62:b5:63:94:
c5:51:f3:2c:30:b7:3e:a2:fc:ff:d1:e0:51:db:78:
71:68:46:84:6e:ac:71:d7:e7:d9:73:35:e5:73:84:
b2:14:9c:1c:1d:6f:45:77:b2:2d:7f:e2:a1:c9:4c:
41:ef:ae:0e:27:45:58:c8:2a:b2:52:57:9e:a6:f8:
4c:c7:66:97:70:4f:66:c5:0b:94:e8:73:d5:d6:85:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:72:3F:B0:61:EE:5D:C2:8C:4F:63:64:BA:A6:02:46:EC:C0:FB
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:23:a0:b5:e4:f6:01:72:3b:4e:0f:2b:fc:9a:e0:6d:1d:ed:
e5:e6:b1:36:bb:d6:bc:3c:23:6c:9c:e8:fe:a6:5a:c1:53:47:
8f:66:c9:d4:f6:5c:b2:62:36:7d:88:ec:83:74:11:f8:8b:63:
aa:6d:a9:f4:3f:ed:34:96:e5:6e:c5:17:69:32:dc:b1:73:96:
0a:5e:fb:78:09:19:d5:0a:57:28:a0:50:2a:50:09:dc:e9:fd:
5d:11:ab:1f:bd:43:66:5e:ce:0b:0e:a3:6f:ed:bd:b6:ec:3a:
75:e9:c2:04:69:24:b4:31:86:30:f0:39:70:ac:16:50:49:4d:
df:b8:c6:26:bb:74:17:75:39:79:61:3f:5d:85:6e:76:95:12:
c2:23:e1:dc:ab:0a:b8:15:1d:74:e0:77:a4:d1:e1:60:fd:9a:
61:70:fb:ab:88:e7:7c:87:25:20:17:fb:92:c4:23:dc:0f:96:
47:fd:26:50:18:f3:75:75:58:91:fc:6e:ee:c6:08:82:0d:42:
ad:3a:53:e1:25:2a:74:39:5a:15:20:10:e1:f7:97:c2:50:6a:
27:77:cf:d7:f4:c9:c6:65:c9:c7:16:6a:8b:b8:af:65:c7:78:
f1:eb:a2:6f:2b:37:7a:a5:71:aa:49:09:15:70:8c:31:26:dc:
f6:1b:d3:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD
MjBBRTUzODYwHhcNMjYwNzI5MDUwOTM2WhcNMjYwODA1MDUwOTM2WjAYMRYwFAYD
VQQDEw02YTY5OGIxMC1kNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm2kfAUgBxZ2ZWqAQduCJp+HyjKrIgciVhNanG8my0gy3nYuFECTgyCVrXu1y
NL73mG8R9QoddzvAUvg4pggxAFMgZkMcqgtU47ahXZ47bRwp9dG7V/Gt5iKkndIG
omKZn0zNSvLY4auaUriH+6BAwhH2vwE9A3/+FSz3vqfZheHIGRLh8xuMwqvQP58y
LZUhXwYYI7qNvSVE437oRSJQgN+4iDJsig+7v+0XvaJermK1Y5TFUfMsMLc+ovz/
0eBR23hxaEaEbqxx1+fZczXlc4SyFJwcHW9Fd7Itf+KhyUxB764OJ0VYyCqyUlee
pvhMx2aXcE9mxQuU6HPV1oVQwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTFcj+w
Ye5dwoxPY2S6pgJG7MD7MB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4
RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN
U1R5S19INkcxbW5DQ3VVNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARSOgteT2AXI7Tg8r/JrgbR3t5eaxNrvWvDwjbJzo/qZawVNHj2bJ1PZcsmI2
fYjsg3QR+Itjqm2p9D/tNJblbsUXaTLcsXOWCl77eAkZ1QpXKKBQKlAJ3On9XRGr
H71DZl7OCw6jb+29tuw6denCBGkktDGGMPA5cKwWUElN37jGJrt0F3U5eWE/XYVu
dpUSwiPh3KsKuBUddOB3pNHhYP2aYXD7q4jnfIclIBf7ksQj3A+WR/0mUBjzdXVY
kfxu7sYIgg1CrTpT4SUqdDlaFSAQ4feXwlBqJ3fP1/TJxmXJxxZqi7ivZcd48eui
bys3eqVxqkkJFXCMMSbc9hvTNg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:24:23 2026 by rpki-client