
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
File: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json)
Hash identifier: jd22ott1R6yMjTcxKlEbanU/3EpE3kgW7ku1bfd96H0=
Subject key identifier: CA:46:1B:CD:18:39:0F:8A:2A:92:E9:6C:46:97:3B:CF:69:79:2A:D8
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial: 3619
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
Manifest number: 3599
Signing time: Fri 17 Apr 2026 14:13:03 +0000
Manifest this update: Fri 17 Apr 2026 14:13:02 +0000
Manifest next update: Fri 24 Apr 2026 14:13:02 +0000
Files and hashes: 1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: Zg5fUe2+tb/sizmXIMRfO/Gsb35ReN1sDf6gAuM6ZBI=)
2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: 3pjfJCyknREszv/FegN9CbVDErK4IM348Au5D7H+UZ4=)
3: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: ac4P9h8lLDAof2k9ERCs9Yn8jJ76v4h2O4+ix7CVH8g=)
4: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: r71AZU/AGm0+my99KPYn1TXxS+UY3LlY1LswZtBbWGw=)
5: 5E5FD4943A3D11F1BA9A26A3A0833773.roa (hash: Jcy8NpWeyxlsek4l2QzVuwefebsXZYDny/VqxXJLrWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13849 (0x3619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Validity
Not Before: Apr 17 14:13:02 2026 GMT
Not After : Apr 24 14:13:02 2026 GMT
Subject: CN=69e23fee-7a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:f2:56:6c:64:de:32:fe:ad:8d:9f:e7:94:
77:44:81:0c:03:ce:d5:d4:21:8d:9e:c3:54:50:4f:
2f:e9:ef:33:48:7c:23:4e:13:b8:51:f4:72:ca:4c:
b3:fa:03:c9:49:0a:6e:ec:f0:60:a4:1e:95:81:45:
a2:4a:d1:ef:f5:0c:f1:8a:cc:f3:b1:a9:35:f8:b6:
3a:84:9c:0c:fd:9e:23:e4:9f:d6:82:74:cc:42:c5:
c5:c4:84:b7:7d:fe:2a:3f:44:1b:2a:4c:ad:2e:67:
80:55:85:f0:4d:ab:29:67:40:6e:3b:36:47:8a:61:
3e:05:f5:92:d5:09:1b:2e:71:20:99:83:cb:41:07:
97:0d:6f:68:77:56:38:a7:cd:d4:54:7b:59:e3:ec:
27:0b:bb:08:1f:3f:e5:d1:28:f9:fa:7a:bf:4d:48:
34:94:3f:8a:19:b8:01:8d:1b:b9:03:38:88:68:e8:
ba:d6:18:47:04:23:2c:57:9e:63:02:91:29:26:6f:
9a:7f:16:ed:6c:ea:3d:29:bf:d6:f4:5b:6f:18:5e:
1e:dd:40:17:f5:87:13:ca:b3:43:62:0d:e4:58:d3:
15:ed:05:c0:da:6d:1f:df:8f:f2:f9:32:91:b5:ae:
46:9b:52:b9:19:8f:ce:68:a4:69:09:b0:5f:35:99:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:46:1B:CD:18:39:0F:8A:2A:92:E9:6C:46:97:3B:CF:69:79:2A:D8
X509v3 Authority Key Identifier:
keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a1:56:8d:bf:a9:d4:b3:01:90:80:75:ba:2b:7d:91:b0:1b:
ea:72:ba:1d:cf:2d:7d:16:8a:3d:70:6f:4d:2e:a7:50:97:ee:
46:dc:8b:71:9c:2f:16:a7:a7:a0:9c:d7:33:7b:af:76:79:36:
91:aa:cb:c5:4f:5d:a2:0d:5c:f5:63:9c:9f:46:24:c2:97:93:
00:c4:23:a1:73:ca:b0:89:75:88:20:81:52:61:b8:ba:50:1d:
1d:7a:2d:1d:8e:ea:63:35:a6:0b:6c:e1:c2:ea:59:d6:20:90:
93:81:14:df:2d:3c:27:d1:fa:70:01:20:cb:ce:f9:07:b5:b3:
36:66:73:b9:86:e2:f9:b3:69:1c:c9:4a:ad:ea:da:1f:0b:e7:
29:e5:62:fb:9a:af:ac:b6:28:6a:a0:94:d7:d1:ed:53:3f:68:
54:35:16:b4:f2:f1:71:40:75:ab:66:fe:2f:16:4f:00:90:96:
96:22:9a:63:37:de:cc:9f:28:20:9f:a6:02:d3:b3:3f:d2:e8:
b9:f9:5b:a8:6b:dc:3f:f5:7b:b9:db:14:4a:26:0e:be:1e:5e:
5a:e7:c9:bb:4e:4f:b5:b5:fc:54:12:03:f2:e2:8d:1b:95:40:
2b:81:52:8a:f7:68:d2:05:07:d2:71:40:56:d9:72:e5:65:2a:
dc:0e:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:16:59 2026 by rpki-client