
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
File: ME1k4_EFEpfktirH3jSA9Hoprg8.mft (raw, json)
Hash identifier: vWQZ1XOMaLoga1W56yqxDT55UioN1uNy62hB9mRgx2Q=
Subject key identifier: 0C:C9:49:25:30:D4:B7:6B:EA:CB:46:B5:2F:96:F5:A5:DE:28:F0:F8
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Certificate issuer: /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
Manifest number: 04E6
Signing time: Sun 01 Mar 2026 23:57:17 +0000
Manifest this update: Sun 01 Mar 2026 23:57:15 +0000
Manifest next update: Sun 08 Mar 2026 23:57:15 +0000
Files and hashes: 1: ME1k4_EFEpfktirH3jSA9Hoprg8.crl (hash: 2/VaeF6Ouyaot/uZ0CKV4wwiX9ry0++aL5Mj/NafdDQ=)
2: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (hash: vA9B5GdBFDfGPEm9RBw1RWDBG86jPKap4rBE62FZXT0=)
3: A9B82544A89A11EFA52A9970C4F9AE02.roa (hash: lQEBm3by7I1jb3X3Jvu/qhKOoUAQjYmCxF+2w/v/BXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Validity
Not Before: Mar 1 23:57:15 2026 GMT
Not After : Mar 8 23:57:15 2026 GMT
Subject: CN=69a4d25d-a4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:95:44:dd:c8:28:30:55:31:9c:0e:26:49:
45:10:82:f5:9c:95:ef:3f:e7:8c:ca:68:18:fd:f5:
f0:29:f1:fe:01:be:4c:4f:53:95:32:9a:75:0a:07:
6e:24:b0:39:af:ff:45:bc:30:f4:74:de:78:0f:40:
2e:26:65:3b:0d:10:35:90:d6:8a:3f:3d:be:dc:a5:
e5:57:97:c2:9b:66:3f:72:db:39:b3:97:ec:35:ca:
ae:43:ff:02:15:f3:45:2d:59:77:67:95:40:0a:b6:
d3:55:5a:79:f3:0b:5e:ce:d5:bc:7a:30:7c:74:71:
36:cc:37:0a:c6:57:cc:8b:cc:e3:02:75:22:83:25:
9a:ed:b3:73:7c:73:ad:9f:02:2e:7d:97:4f:34:ff:
a8:a3:95:80:8f:f2:9e:77:97:d5:4d:f0:47:6f:19:
3d:85:16:51:95:99:ab:a8:d5:e6:1c:99:f2:aa:cf:
c7:d7:c8:dd:62:f6:b7:c0:29:e5:9c:50:ce:c3:7d:
10:1f:d8:b9:3c:db:2f:52:ca:73:60:6d:8a:2b:52:
07:62:7d:51:0c:4a:fb:1c:4b:ca:2e:14:c5:7a:2c:
a7:88:49:8e:54:70:2e:da:4c:89:dd:d4:31:f9:a0:
68:c3:0f:8a:f1:5a:da:4b:3b:cc:4b:d5:0f:4f:25:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C9:49:25:30:D4:B7:6B:EA:CB:46:B5:2F:96:F5:A5:DE:28:F0:F8
X509v3 Authority Key Identifier:
keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:42:11:18:62:75:92:d9:f7:47:9e:b0:a7:a3:19:8b:13:dc:
cc:34:18:44:c4:92:99:c3:dc:ed:3a:5a:97:09:ac:bd:de:e4:
c3:a6:f5:d3:20:a9:90:b8:e9:e9:6a:3d:97:44:2f:43:c2:21:
f9:04:64:a0:4f:c5:34:9e:1f:4c:6c:43:45:8f:8d:99:66:ba:
f3:f3:ee:58:79:33:76:9d:9d:5b:e6:3b:4d:b2:d7:ea:32:14:
78:18:f8:02:93:0c:01:12:98:a4:b0:c2:b0:42:5f:93:99:a9:
01:90:cf:f6:7b:d9:49:99:12:58:16:99:fa:0d:61:ff:c7:70:
16:fb:72:64:25:10:df:94:a6:f1:da:36:34:a4:05:dd:32:6d:
8c:2e:ab:5c:41:b8:db:6e:66:d6:b3:af:5d:11:d8:6b:a2:29:
13:98:97:0a:2e:6d:8a:79:28:67:5d:d9:79:43:02:7a:3b:03:
68:59:cf:f8:87:b9:50:4f:88:a3:1e:14:df:e6:2c:62:20:1d:
3c:fd:86:b4:19:da:50:4e:37:12:85:06:1f:a1:73:f4:e4:db:
8b:44:2f:88:22:8c:c4:e4:ad:91:fc:ba:fb:12:af:88:6b:77:
cd:63:12:3a:32:6b:ae:50:eb:e2:93:90:5f:18:d1:2b:09:50:
e0:63:0a:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVDMkQxMTAvBgNVBAUTKDMwNEQ2NEUzRjEwNTEyOTdFNEI2MkFDN0RFMzQ4MEY0
N0EyOUFFMEYwHhcNMjYwMzAxMjM1NzE1WhcNMjYwMzA4MjM1NzE1WjAYMRYwFAYD
VQQDEw02OWE0ZDI1ZC1hNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwyuVRN3IKDBVMZwOJklFEIL1nJXvP+eMymgY/fXwKfH+Ab5MT1OVMpp1Cgdu
JLA5r/9FvDD0dN54D0AuJmU7DRA1kNaKPz2+3KXlV5fCm2Y/cts5s5fsNcquQ/8C
FfNFLVl3Z5VACrbTVVp58wteztW8ejB8dHE2zDcKxlfMi8zjAnUigyWa7bNzfHOt
nwIufZdPNP+oo5WAj/Ked5fVTfBHbxk9hRZRlZmrqNXmHJnyqs/H18jdYva3wCnl
nFDOw30QH9i5PNsvUspzYG2KK1IHYn1RDEr7HEvKLhTFeiyniEmOVHAu2kyJ3dQx
+aBoww+K8VraSzvMS9UPTyUe4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzJSSUw
1Ldr6stGtS+W9aXeKPD4MB8GA1UdIwQYMBaAFDBNZOPxBRKX5LYqx940gPR6Ka4P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD
RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9NRTFrNF9FRkVwZmt0aXJIM2pTQTlIb3By
ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01FMWs0X0VGRXBma3RpckgzalNBOUhvcHJnOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9NRTFrNF9FRkVw
Zmt0aXJIM2pTQTlIb3ByZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwEIRGGJ1ktn3R56wp6MZixPczDQYRMSSmcPc7Tpalwmsvd7kw6b10yCpkLjp
6Wo9l0QvQ8Ih+QRkoE/FNJ4fTGxDRY+NmWa68/PuWHkzdp2dW+Y7TbLX6jIUeBj4
ApMMARKYpLDCsEJfk5mpAZDP9nvZSZkSWBaZ+g1h/8dwFvtyZCUQ35Sm8do2NKQF
3TJtjC6rXEG4225m1rOvXRHYa6IpE5iXCi5tinkoZ13ZeUMCejsDaFnP+Ie5UE+I
ox4U3+YsYiAdPP2GtBnaUE43EoUGH6Fz9OTbi0QviCKMxOStkfy6+xKviGt3zWMS
OjJrrlDr4pOQXxjRKwlQ4GMKmA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:40 2026 by rpki-client