
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
File: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft (raw, json)
Hash identifier: l0m/X8yMsDb/6aRLQveQFsZrRLt5uxBjqMfHgqTLRt8=
Subject key identifier: 9D:8C:3B:7A:37:98:A9:B7:F0:1D:46:41:73:A1:ED:03:E4:83:03:17
Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
Certificate issuer: /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Certificate serial: 79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
Manifest number: 75
Signing time: Sun 01 Mar 2026 09:12:09 +0000
Manifest this update: Sun 01 Mar 2026 09:12:08 +0000
Manifest next update: Sun 08 Mar 2026 09:12:08 +0000
Files and hashes: 1: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl (hash: CRyQluM+MKiZvIPSGdxkoBBZBh3msJ/Xz2Rvw8w3Y6c=)
2: 06239BF2677111F0BB789073C4F9AE02.roa (hash: ZQ/BdX/5Q3geNUAzu42OIAmZumGNrffiueKHNoVmkq0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:12:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Validity
Not Before: Mar 1 09:12:08 2026 GMT
Not After : Mar 8 09:12:08 2026 GMT
Subject: CN=69a402e9-e58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:d7:54:c6:8b:6a:b8:85:7a:9c:16:d7:40:
19:a7:2d:5d:00:a6:d4:b2:64:5b:aa:36:37:cf:1b:
bb:79:e3:d7:96:53:71:5d:6c:13:ca:a9:d8:f5:54:
f7:66:17:f7:f9:80:a4:0d:27:3a:6c:48:a0:eb:97:
b3:dd:e2:58:4e:8c:ee:eb:7f:77:ea:e6:58:bd:f4:
2e:f7:97:c0:10:a8:ed:26:bd:88:4a:8f:64:eb:97:
21:70:81:38:c4:a9:94:f2:7f:cc:7e:66:f4:35:ab:
09:67:6a:6c:29:b1:17:3d:32:fa:a4:57:18:8b:da:
57:97:66:1f:7a:21:9f:b4:07:b5:4d:f9:35:e6:9e:
68:c0:df:2d:04:3b:f2:dc:07:9f:8f:ea:b2:fb:4e:
59:2c:1a:7d:37:bf:8b:bc:dc:9b:1d:dd:52:b9:51:
63:32:81:53:fa:0a:1f:49:3a:93:d5:b5:9d:1c:a9:
d4:18:65:e3:7e:2e:81:1d:74:22:06:2f:09:7a:ae:
b1:85:4e:2f:86:d4:9c:5c:e7:12:45:17:cc:26:02:
64:4b:26:30:29:99:20:ae:60:a2:d0:c1:20:c5:df:
87:b5:38:a1:8f:04:58:1d:45:5a:90:e0:32:eb:d0:
55:66:50:bc:a1:e8:6a:c8:29:e4:7d:6e:0c:0a:97:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:3B:7A:37:98:A9:B7:F0:1D:46:41:73:A1:ED:03:E4:83:03:17
X509v3 Authority Key Identifier:
keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1f:49:d7:5e:ad:94:93:77:4b:c1:8f:f8:7c:2d:88:d3:49:
1c:dd:39:9c:86:20:b9:bb:6b:af:85:20:8c:0a:92:65:16:84:
e0:b3:bc:b1:2d:db:41:29:53:da:e5:ed:82:60:46:ab:74:e7:
07:62:9a:27:44:8e:dc:b3:7d:17:de:9d:9e:55:46:2c:8f:7d:
66:fb:92:2c:da:9e:ec:b0:31:f6:62:d0:a8:a3:da:aa:90:dd:
61:28:57:44:ba:e2:0a:cf:97:f1:8d:c8:17:f1:c6:64:76:b9:
d0:70:ed:51:52:f4:35:54:8d:9c:d9:e8:62:db:7e:70:de:9a:
8b:8a:38:d9:60:f2:bf:ea:a3:b9:7c:d1:a1:f4:c6:f7:43:d4:
98:3d:79:4d:00:d0:80:38:6e:9f:4e:79:17:fb:a3:bb:87:22:
21:cd:c2:b5:03:e9:60:90:de:83:f1:68:2c:4b:27:23:2f:03:
ba:d0:96:b0:3f:f9:e2:e8:f6:31:46:bc:ed:a8:d6:f8:f4:12:
e6:88:17:6c:4e:3b:5e:5d:a2:89:17:ea:b2:98:9f:32:f5:4a:
4a:c0:38:cf:67:d5:22:cd:fd:54:10:2e:d6:15:8b:d3:37:e0:
6c:5c:3a:ab:b1:aa:35:cc:d4:c3:34:34:05:c5:0c:2f:32:cc:
17:67:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:19 2026 by rpki-client