
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json)
Hash identifier: I6B14/hFAUEYBvX3SJqwPGdjsFsjnikX3swPLX0i7QY=
Subject key identifier: BF:FC:66:14:3F:86:2C:51:CD:FB:ED:32:EC:1A:25:DA:37:51:F7:C3
Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Certificate serial: 046E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
Manifest number: 0455
Signing time: Mon 02 Mar 2026 02:02:34 +0000
Manifest this update: Mon 02 Mar 2026 02:02:33 +0000
Manifest next update: Mon 09 Mar 2026 02:02:33 +0000
Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: RPYCFvIu+mjtBLgxN4c2M1pYjlKJD2UpV4VCRamnHP4=)
2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134 (0x46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Validity
Not Before: Mar 2 02:02:33 2026 GMT
Not After : Mar 9 02:02:33 2026 GMT
Subject: CN=69a4efba-d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:a7:f0:23:02:9b:52:f6:0e:77:e9:75:bd:
7e:e7:68:5c:76:d2:0b:4c:57:6a:c5:a8:33:2c:95:
15:17:c5:b1:81:40:23:95:13:7b:00:0b:a5:5e:bd:
2f:7a:12:87:95:18:14:82:0a:c9:ef:29:50:8b:8a:
95:9b:65:9d:24:82:22:a4:bd:62:d9:5b:fc:2d:a5:
1f:bc:2b:d0:27:75:ee:36:39:fa:7f:67:9a:b4:c3:
2b:88:43:31:dd:d9:dc:b6:7c:b5:10:7b:c4:54:67:
07:fb:13:70:8e:f0:3b:6c:e5:45:5e:a8:9f:7c:e3:
2e:ba:91:03:3d:6c:5d:41:76:8e:46:ec:00:e3:8f:
46:10:42:b6:c5:a1:e0:2a:9c:4e:3a:16:b5:aa:48:
15:30:2b:0e:be:a8:e1:01:46:52:d6:82:45:e2:65:
d4:ce:62:91:08:0c:97:4f:a9:04:0c:e7:0b:a8:bd:
f6:58:c2:27:ca:d3:68:bc:a1:04:e1:3a:d2:80:41:
f2:9b:a7:e5:b5:87:05:d4:b9:08:7a:73:46:f1:38:
69:e9:0c:60:bc:fd:2e:9e:7b:dd:29:7d:72:8a:5f:
e0:83:d4:8f:bf:00:95:ee:2a:68:55:5b:1b:a3:15:
03:af:d3:55:94:58:37:b5:7f:ce:d9:a3:70:1d:1d:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:66:14:3F:86:2C:51:CD:FB:ED:32:EC:1A:25:DA:37:51:F7:C3
X509v3 Authority Key Identifier:
keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:5f:2a:be:00:26:5e:c5:e9:b7:cc:b6:58:f2:51:94:b7:7b:
76:0c:54:dc:38:2b:04:10:80:6d:39:e6:f7:c4:ef:ef:e8:58:
33:76:34:55:34:78:b8:37:ce:b3:04:2e:fc:4a:aa:f6:13:85:
d3:78:52:d7:59:cf:7c:03:d9:14:89:0a:0d:15:27:ab:44:e9:
1e:73:b8:c1:54:4c:1e:6b:0e:25:76:b1:71:c8:33:a0:ac:bc:
fe:9e:e9:b8:30:0d:61:d1:4a:cf:cd:81:fe:5b:41:36:f5:fe:
13:30:fe:28:70:8b:82:67:d5:31:e8:8f:fd:76:26:18:06:09:
54:5b:97:4a:d8:ce:24:31:5d:44:d5:6e:88:2c:ec:5e:6f:94:
bf:df:ea:3c:4c:e5:ef:58:26:fc:90:12:83:83:f3:7d:52:6d:
f0:02:7f:6a:8c:f4:0c:b6:31:5c:06:d8:d9:99:5b:b8:37:e4:
ee:96:37:37:c9:09:63:7e:ba:ad:25:45:d3:99:69:6a:80:2b:
5c:61:cb:0b:47:ae:bb:8b:8b:64:dc:07:22:18:8f:0f:94:cf:
31:b4:72:ea:26:22:3a:82:d3:e7:e3:bb:6d:73:99:6a:1e:a3:
17:33:3b:ad:98:65:8d:5c:c8:3a:c7:ab:90:43:26:2e:83:ba:
5e:82:1c:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD
NDY3NEVCQUEwHhcNMjYwMzAyMDIwMjMzWhcNMjYwMzA5MDIwMjMzWjAYMRYwFAYD
VQQDEw02OWE0ZWZiYS1kOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHWn8CMCm1L2Dnfpdb1+52hcdtILTFdqxagzLJUVF8WxgUAjlRN7AAulXr0v
ehKHlRgUggrJ7ylQi4qVm2WdJIIipL1i2Vv8LaUfvCvQJ3XuNjn6f2eatMMriEMx
3dnctny1EHvEVGcH+xNwjvA7bOVFXqiffOMuupEDPWxdQXaORuwA449GEEK2xaHg
KpxOOha1qkgVMCsOvqjhAUZS1oJF4mXUzmKRCAyXT6kEDOcLqL32WMInytNovKEE
4TrSgEHym6fltYcF1LkIenNG8Thp6QxgvP0unnvdKX1yil/gg9SPvwCV7ipoVVsb
oxUDr9NVlFg3tX/O2aNwHR1DOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/8ZhQ/
hixRzfvtMuwaJdo3UffDMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG
MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn
aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJF8qvgAmXsXpt8y2WPJRlLd7dgxU3DgrBBCAbTnm98Tv7+hYM3Y0VTR4uDfO
swQu/Eqq9hOF03hS11nPfAPZFIkKDRUnq0TpHnO4wVRMHmsOJXaxccgzoKy8/p7p
uDANYdFKz82B/ltBNvX+EzD+KHCLgmfVMeiP/XYmGAYJVFuXStjOJDFdRNVuiCzs
Xm+Uv9/qPEzl71gm/JASg4PzfVJt8AJ/aoz0DLYxXAbY2ZlbuDfk7pY3N8kJY366
rSVF05lpaoArXGHLC0euu4uLZNwHIhiPD5TPMbRy6iYiOoLT5+O7bXOZah6jFzM7
rZhljVzIOserkEMmLoO6XoIcCA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:32 2026 by rpki-client