
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json)
Hash identifier: GL3b/3H0IuGB10HjBV9w2sPyRhetbQtHiDkh6c5BfzU=
Subject key identifier: F7:6A:33:00:48:E2:08:E3:B1:A3:FC:82:AE:DC:D6:E5:CE:2D:A4:EE
Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Certificate serial: 04B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
Manifest number: 04A0
Signing time: Mon 27 Jul 2026 01:00:00 +0000
Manifest this update: Mon 27 Jul 2026 00:59:59 +0000
Manifest next update: Mon 03 Aug 2026 00:59:59 +0000
Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: JRtJYVfoSiZxR8emJgJOawg07tHcZtQIg+yC4z0HTLo=)
2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1209 (0x4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Validity
Not Before: Jul 27 00:59:59 2026 GMT
Not After : Aug 3 00:59:59 2026 GMT
Subject: CN=6a66ad8f-f657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:14:fd:08:ff:30:5e:81:7a:15:ab:79:a7:
18:27:53:f9:8f:3a:1b:3d:9a:55:80:57:07:fd:38:
2f:15:0d:b2:56:66:66:bb:94:ca:eb:25:b8:e8:0f:
98:3b:12:61:9b:eb:d9:33:27:7a:3b:d4:f6:e2:fa:
5b:fe:55:03:ee:b2:b3:58:e6:74:0a:50:a0:e1:c8:
39:cb:95:5e:6d:e7:8e:d2:24:3b:38:d7:ac:99:f1:
2d:3f:68:c9:e5:ab:16:f5:38:f3:35:ee:a8:c8:fd:
c6:ea:3e:6f:6f:84:1b:65:e2:27:fe:b3:7a:86:c9:
a0:20:be:c0:92:8e:4e:a5:27:c2:4a:09:d1:e6:b8:
93:50:69:b7:1b:e6:36:8b:40:f9:65:c6:22:5e:b1:
2a:b4:d9:8f:52:5a:bd:44:1e:82:3b:27:a3:0b:a4:
e6:b9:be:8a:c1:fd:24:f5:b5:c1:95:02:6c:47:75:
e7:14:ff:42:61:e9:cc:4a:16:52:b6:c3:07:f6:e3:
43:89:b1:e9:6c:5c:3d:77:27:bb:92:72:66:30:a9:
8d:79:0c:8c:9e:5a:16:b2:a2:41:8d:0c:a6:a2:26:
15:e5:54:1c:7f:17:f5:86:91:ef:b0:12:b3:dd:52:
f6:5a:e2:1d:36:a6:20:07:d1:7c:87:5b:87:b8:ef:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6A:33:00:48:E2:08:E3:B1:A3:FC:82:AE:DC:D6:E5:CE:2D:A4:EE
X509v3 Authority Key Identifier:
keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e6:4d:c7:79:85:48:52:4e:5d:20:08:05:6d:ef:10:bf:97:
70:95:be:2d:57:ad:4d:75:15:05:0b:79:27:d9:be:53:f2:7f:
81:b2:f7:e7:08:9d:cb:6a:26:9f:96:ae:25:0c:0d:cd:83:bd:
b3:69:95:be:e3:59:bc:c8:d3:a8:0a:be:f0:5f:ba:b3:d9:25:
98:4f:2e:37:62:22:69:af:b9:19:4d:7e:8f:5f:05:25:7d:0e:
bb:99:62:90:d8:9b:8d:07:87:04:f2:bf:34:9a:b5:cd:57:f2:
cf:81:7a:a6:06:c1:22:c5:d3:0a:64:42:ed:b5:86:cc:bb:74:
b1:e9:7d:17:d9:1b:6c:22:cc:89:c5:8e:6b:6a:37:88:c5:96:
00:12:86:d4:ec:a6:e4:65:70:9e:19:35:12:8e:ce:5f:29:b1:
ef:55:ab:94:b6:f7:96:14:4f:da:24:f5:35:09:a0:40:99:56:
a4:b4:e1:71:04:ae:18:9f:d8:0e:f6:12:cc:76:1b:c7:67:46:
ef:30:dc:fc:b2:99:de:1c:d6:4c:3f:10:c1:3c:e4:65:66:23:
e4:85:8a:62:ed:5f:9b:32:d1:59:8d:c2:ca:54:47:b6:f2:52:
f1:ef:7b:3f:21:bf:3d:65:dc:44:7c:ae:0b:55:ba:b1:89:3e:
db:53:b2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:16 2026 by rpki-client