
$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
File: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft (raw, json)
Hash identifier: 5CPs25E/fqPux4Od7aQJgH6+l/Itm2QgbVS4TYa1aZ0=
Subject key identifier: 26:4B:2E:E8:B0:82:08:B4:DE:10:B9:6F:E7:1B:52:75:FF:BB:4B:D1
Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
Manifest number: 0112
Signing time: Mon 27 Jul 2026 08:02:39 +0000
Manifest this update: Mon 27 Jul 2026 08:02:39 +0000
Manifest next update: Mon 03 Aug 2026 08:02:39 +0000
Files and hashes: 1: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl (hash: opfsP0+3uE/L6x2UhwCbqUZS+4PUGOd3O0/odxbh3Do=)
2: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (hash: tVJVMY/89KF907+NMLI3bnlJnvz83r7ofpq8v/2Sjfk=)
3: 9A54CDE2348011F086A8BD61C4F9AE02.roa (hash: pZ/IuFjNSaP5mWEh2joWSRI7X8KU75Bz1DpqY2aQSvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Validity
Not Before: Jul 27 08:02:39 2026 GMT
Not After : Aug 3 08:02:39 2026 GMT
Subject: CN=6a67109f-8fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:7b:83:60:0b:ba:7f:21:b7:24:80:10:eb:
d9:2e:78:17:6d:ba:91:07:4b:a0:ad:b4:10:89:da:
fd:4e:07:19:42:c2:1a:89:dd:21:70:5d:3e:ec:81:
98:57:00:d3:14:2b:5b:cd:fc:55:54:97:6f:d5:20:
bb:a9:8b:db:d4:4e:49:9e:0c:18:ca:6c:8b:bc:b3:
85:e5:d0:fe:44:20:53:ba:47:6a:12:8a:c3:23:23:
a7:c8:0c:df:db:15:72:c7:ef:fa:5a:08:01:50:77:
70:8d:1b:c9:90:4d:c3:61:56:93:1a:b2:38:e7:38:
3e:9f:c9:b4:5a:18:ec:ef:f4:fe:28:a9:e3:10:b2:
48:fa:42:9f:4a:8f:2e:72:36:e5:47:58:2c:c5:21:
40:a9:75:b3:8e:30:4f:21:47:24:78:9a:96:6f:f7:
b4:47:d9:66:a1:70:57:54:e5:63:d3:90:79:9c:52:
99:e9:8c:74:c8:46:20:5f:c1:3c:ec:e9:1e:eb:bb:
90:cc:12:2a:ae:b5:e7:bc:0d:40:5d:ee:9b:63:15:
eb:6a:99:7f:8b:ef:ed:0b:6f:a0:5e:f5:13:d1:d0:
a3:75:e0:9c:5a:86:e0:f3:9b:d0:7e:bc:e3:65:ef:
8d:fd:41:8f:8f:c4:12:78:4d:e7:21:c8:32:07:2b:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4B:2E:E8:B0:82:08:B4:DE:10:B9:6F:E7:1B:52:75:FF:BB:4B:D1
X509v3 Authority Key Identifier:
keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:88:49:83:0e:e1:84:b1:2e:7d:c9:a9:78:29:86:89:74:a1:
89:b3:7f:59:65:e1:f7:54:1d:c9:bb:35:02:88:26:38:10:18:
4f:7a:20:cc:a8:6a:65:d7:7e:07:6a:a8:e0:08:06:12:77:63:
c1:a2:e5:61:be:1f:18:f9:aa:82:b1:55:ae:17:cd:47:12:be:
fe:b2:de:1d:be:38:ab:27:3f:b7:b8:2e:57:91:f5:05:48:28:
83:00:a5:43:b3:d1:c3:4c:40:a7:d9:af:4e:fc:02:ad:31:88:
b1:c1:1d:38:71:b9:33:b1:78:67:6c:bc:5c:17:d0:dc:d2:cc:
d3:d9:26:cd:44:37:67:ce:81:1f:b5:b6:c8:ad:86:d2:36:aa:
a9:f6:83:4b:87:08:50:a8:32:14:8a:1b:59:5b:7b:e9:43:31:
23:7b:29:c8:fc:c6:24:56:6e:60:65:f0:80:41:97:d2:b2:98:
a5:a2:44:ee:81:27:e7:70:0a:d0:10:e9:96:56:80:93:9e:46:
50:ca:ea:9c:03:85:03:23:e8:18:00:87:4b:4d:5b:bc:65:81:
fe:5c:88:7d:1e:be:12:a4:1e:61:9a:ea:c8:90:a9:d0:00:77:
d7:2f:55:72:fc:24:59:88:87:d4:47:ea:73:50:8c:e0:c2:d2:
c1:eb:75:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:21 2026 by rpki-client