
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json)
Hash identifier: qB78mitlbHbxTuV5Eafxgt/vFZ2GfAc8vwkd2ToA4+c=
Subject key identifier: CE:13:44:B5:3F:81:EC:74:D8:EF:5F:9D:E4:79:3F:BB:33:83:AB:FC
Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Certificate serial: 04E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
Manifest number: 04C7
Signing time: Sat 10 Oct 2026 23:54:39 +0000
Manifest this update: Sat 10 Oct 2026 23:54:38 +0000
Manifest next update: Sat 17 Oct 2026 23:54:38 +0000
Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: 9IADWvXDkJw/4OGP98ipOKMzkCqOZRUG6DSfSoQbCtw=)
2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Validity
Not Before: Oct 10 23:54:38 2026 GMT
Not After : Oct 17 23:54:38 2026 GMT
Subject: CN=6acad03f-31dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:01:e3:8f:ad:ae:a1:33:2c:1f:53:b3:da:
13:c8:94:f6:ba:66:8d:01:a3:dc:fa:6f:4f:18:27:
77:35:3a:70:5b:1b:a7:8b:55:91:e1:78:cb:51:43:
8d:d8:f6:2c:7b:17:03:a2:68:c4:21:00:49:22:6d:
ce:0c:8f:ec:8c:f7:8e:00:77:f5:14:35:ed:86:16:
18:80:d9:15:2f:65:e3:ca:38:bd:ec:e7:c8:ec:df:
a9:bb:8b:74:d8:10:ce:76:5f:22:6d:11:4c:5c:48:
ad:33:2f:5b:da:30:84:90:7a:cd:3d:35:9c:ca:5f:
06:c9:48:0a:94:1d:fd:56:92:c4:b5:67:c3:32:82:
49:5f:f1:35:68:1b:e1:f3:b8:32:1f:97:f0:12:ea:
8a:2f:62:11:42:0b:56:96:9e:d8:02:d9:a0:4e:00:
97:a5:67:65:51:fe:6d:33:6e:2b:39:6f:ac:e0:76:
98:94:c7:4c:ca:58:01:93:1b:0d:6a:81:5c:57:9d:
81:60:70:d2:25:da:d6:a5:4b:60:a5:f9:f1:bd:64:
c3:ea:cd:ee:d4:aa:d8:f5:95:87:fe:5b:db:a7:7a:
9c:c2:d8:4a:57:a3:b9:86:01:f0:97:63:ba:c5:dc:
55:49:4d:85:90:e8:aa:6b:9f:ba:59:2b:0e:af:b1:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:13:44:B5:3F:81:EC:74:D8:EF:5F:9D:E4:79:3F:BB:33:83:AB:FC
X509v3 Authority Key Identifier:
keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b0:a7:8f:cf:68:8b:04:9e:7b:2c:fe:d4:6f:61:7d:f8:eb:
ff:5f:72:41:ff:46:4c:30:f0:1c:58:00:e7:cb:ce:73:3c:c1:
43:24:be:9d:db:4d:3d:2e:9d:0f:85:ad:9d:eb:5c:a1:b4:2e:
07:64:a4:57:f1:13:b1:33:be:9e:a9:31:7e:8b:ab:47:9f:de:
57:d0:47:d3:91:e0:fc:ad:b8:cc:04:c9:15:fa:8a:d2:45:46:
68:69:dc:85:80:4b:a0:53:39:66:13:61:ee:b4:0c:f7:1b:54:
ef:a2:46:b2:62:d2:97:aa:4c:72:b9:ca:b4:08:9e:87:02:1c:
b1:8b:77:75:63:70:9c:86:ee:c4:54:8e:20:8f:40:0d:c7:ae:
d2:54:27:1e:89:4b:c5:09:ca:78:6f:1f:f1:8d:72:1c:ec:0f:
66:45:d7:f1:21:1f:e2:d9:5a:41:b0:b9:46:d5:45:cb:d5:0f:
d7:45:86:fc:9f:03:07:11:07:94:9e:99:d3:3d:a5:dd:be:f2:
97:af:a3:17:05:4b:a1:74:1c:0e:cc:92:c6:da:b5:7b:10:e0:
fe:0f:7a:a4:6f:1b:b4:9b:4f:c0:55:30:50:6e:df:c6:1a:62:
e1:ef:a9:1d:98:79:e0:53:cc:d7:86:d8:53:44:ad:b4:14:80:
13:45:07:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD
NDY3NEVCQUEwHhcNMjYxMDEwMjM1NDM4WhcNMjYxMDE3MjM1NDM4WjAYMRYwFAYD
VQQDEw02YWNhZDAzZi0zMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJMB44+trqEzLB9Ts9oTyJT2umaNAaPc+m9PGCd3NTpwWxuni1WR4XjLUUON
2PYsexcDomjEIQBJIm3ODI/sjPeOAHf1FDXthhYYgNkVL2Xjyji97OfI7N+pu4t0
2BDOdl8ibRFMXEitMy9b2jCEkHrNPTWcyl8GyUgKlB39VpLEtWfDMoJJX/E1aBvh
87gyH5fwEuqKL2IRQgtWlp7YAtmgTgCXpWdlUf5tM24rOW+s4HaYlMdMylgBkxsN
aoFcV52BYHDSJdrWpUtgpfnxvWTD6s3u1KrY9ZWH/lvbp3qcwthKV6O5hgHwl2O6
xdxVSU2FkOiqa5+6WSsOr7HtRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4TRLU/
gex02O9fneR5P7szg6v8MB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG
MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn
aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm7Cnj89oiwSeeyz+1G9hffjr/19yQf9GTDDwHFgA58vOczzBQyS+ndtNPS6d
D4WtnetcobQuB2SkV/ETsTO+nqkxfourR5/eV9BH05Hg/K24zATJFfqK0kVGaGnc
hYBLoFM5ZhNh7rQM9xtU76JGsmLSl6pMcrnKtAiehwIcsYt3dWNwnIbuxFSOII9A
Dceu0lQnHolLxQnKeG8f8Y1yHOwPZkXX8SEf4tlaQbC5RtVFy9UP10WG/J8DBxEH
lJ6Z0z2l3b7yl6+jFwVLoXQcDsySxtq1exDg/g96pG8btJtPwFUwUG7fxhpi4e+p
HZh54FPM14bYU0SttBSAE0UHUw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:39:17 2026 by rpki-client