
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json)
Hash identifier: HQLSqrpAVCfV4+7xry2tBk7LfIj1NyGqi0w/OOLlUdE=
Subject key identifier: EF:79:C0:1F:F5:5A:66:97:0F:E1:6E:0D:EF:27:3B:7F:17:3D:A8:6D
Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Certificate serial: 0487
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
Manifest number: 046E
Signing time: Sun 19 Apr 2026 00:03:35 +0000
Manifest this update: Sun 19 Apr 2026 00:03:35 +0000
Manifest next update: Sun 26 Apr 2026 00:03:35 +0000
Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: gwa0ZMba5sStcmhK1BPC0c1/CWYw5/bB3g2r52juo+o=)
2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 00:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159 (0x487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Validity
Not Before: Apr 19 00:03:35 2026 GMT
Not After : Apr 26 00:03:35 2026 GMT
Subject: CN=69e41bd7-64a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:90:6a:e0:be:6b:ac:c9:05:f2:ad:d7:5d:
d3:df:e5:1e:c4:39:49:b8:b8:2c:c0:e6:b7:d2:cc:
9e:e9:e5:33:2e:22:f9:b8:05:82:d8:1e:e5:bc:fb:
da:72:7e:bd:39:df:6b:fe:e0:2b:ad:ee:e5:38:6f:
72:47:56:2e:f4:74:d5:18:59:70:3f:4a:c3:57:26:
98:aa:37:af:33:8b:25:27:0d:19:d6:d8:c3:d9:22:
7f:c1:a0:b1:d1:10:c9:16:d4:34:2f:ff:1d:67:74:
85:93:bc:7e:f3:5e:d8:da:1c:7f:7d:e4:1a:db:18:
0d:b5:4d:5f:3d:67:5f:61:40:d5:73:62:a7:e5:7e:
99:fa:3c:f0:60:98:88:8a:be:3a:0f:2d:5f:3a:45:
82:30:31:39:6a:f0:f8:5c:3f:7e:ce:00:06:89:52:
ab:f7:19:7b:06:e4:00:e6:7d:35:43:c4:63:76:38:
b1:76:9e:e0:db:4a:fe:86:a6:a3:10:7e:e8:aa:ad:
af:56:82:cb:ee:e7:2c:02:ca:8c:ee:ad:47:b8:5f:
80:02:f0:43:12:17:9d:50:c4:99:bb:ab:77:44:a7:
0c:0a:8b:1a:07:82:76:af:f6:63:5b:21:fe:20:a2:
ec:bd:1d:41:80:b8:77:76:ed:35:ac:64:d2:28:85:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:C0:1F:F5:5A:66:97:0F:E1:6E:0D:EF:27:3B:7F:17:3D:A8:6D
X509v3 Authority Key Identifier:
keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:36:30:6d:b5:c7:60:01:ab:8f:7a:43:82:30:17:17:8a:
69:50:fc:1a:ae:48:f2:23:85:50:82:7d:cf:b3:36:14:f2:59:
06:b3:4a:93:0a:43:88:27:4a:ad:d8:46:5a:38:65:50:4e:ca:
f8:d2:34:4c:b8:36:d4:0e:e4:1d:29:2f:0d:8c:6c:7b:40:85:
1c:90:b8:82:67:36:ef:66:28:1a:0e:e4:fc:8e:f7:53:1e:0e:
61:d3:25:24:11:0f:59:49:36:a2:17:6b:5a:f5:6b:59:42:4e:
04:2a:f5:04:d9:d8:dc:da:b1:5e:46:22:a9:11:5c:a4:a9:f2:
6b:24:30:26:ad:bd:2d:c1:d9:6f:58:48:c2:ee:d9:b5:1b:4f:
73:46:80:6e:5c:a4:2a:c6:94:41:32:6d:f9:9d:53:55:a3:ef:
43:87:2a:dd:1d:55:6a:a7:47:7b:ec:d3:3f:2a:e8:0d:a1:17:
0f:d6:9e:a2:c9:3d:30:73:bd:6e:cb:dc:a3:39:f4:78:f0:85:
d2:35:7f:a8:88:9e:91:c3:00:db:0c:c1:df:5a:40:9c:da:48:
52:8a:c4:82:a2:b6:a3:4e:ae:4c:61:01:8b:95:7b:03:1e:66:
e1:9f:85:f8:36:ae:c2:17:5b:5f:b0:d0:ae:2a:a7:da:4a:a6:
d3:2a:b6:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD
NDY3NEVCQUEwHhcNMjYwNDE5MDAwMzM1WhcNMjYwNDI2MDAwMzM1WjAYMRYwFAYD
VQQDEw02OWU0MWJkNy02NGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA37eQauC+a6zJBfKt113T3+UexDlJuLgswOa30sye6eUzLiL5uAWC2B7lvPva
cn69Od9r/uArre7lOG9yR1Yu9HTVGFlwP0rDVyaYqjevM4slJw0Z1tjD2SJ/waCx
0RDJFtQ0L/8dZ3SFk7x+817Y2hx/feQa2xgNtU1fPWdfYUDVc2Kn5X6Z+jzwYJiI
ir46Dy1fOkWCMDE5avD4XD9+zgAGiVKr9xl7BuQA5n01Q8Rjdjixdp7g20r+hqaj
EH7oqq2vVoLL7ucsAsqM7q1HuF+AAvBDEhedUMSZu6t3RKcMCosaB4J2r/ZjWyH+
IKLsvR1BgLh3du01rGTSKIX2WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO95wB/1
WmaXD+FuDe8nO38XPahtMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG
MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn
aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJSA2MG21x2ABq496Q4IwFxeKaVD8Gq5I8iOFUIJ9z7M2FPJZBrNKkwpDiCdK
rdhGWjhlUE7K+NI0TLg21A7kHSkvDYxse0CFHJC4gmc272YoGg7k/I73Ux4OYdMl
JBEPWUk2ohdrWvVrWUJOBCr1BNnY3NqxXkYiqRFcpKnyayQwJq29LcHZb1hIwu7Z
tRtPc0aAblykKsaUQTJt+Z1TVaPvQ4cq3R1VaqdHe+zTPyroDaEXD9aeosk9MHO9
bsvcozn0ePCF0jV/qIiekcMA2wzB31pAnNpIUorEgqK2o06uTGEBi5V7Ax5m4Z+F
+DauwhdbX7DQriqn2kqm0yq23w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:25 2026 by rpki-client