
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
File: 0ewZe9sNlRk40e71SWoRrMoCiO8.mft (raw, json)
Hash identifier: jGt56ee3f0JokwaMUoZxOR9ZN6kYNl0ZnIOtzYyUUvc=
Subject key identifier: B1:DE:6A:8B:57:A5:E2:F9:67:7C:2D:FB:DB:EA:AF:46:8E:23:D4:4B
Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
Certificate issuer: /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
Manifest number: BC
Signing time: Mon 27 Jul 2026 09:08:57 +0000
Manifest this update: Mon 27 Jul 2026 09:08:57 +0000
Manifest next update: Mon 03 Aug 2026 09:08:57 +0000
Files and hashes: 1: 0ewZe9sNlRk40e71SWoRrMoCiO8.crl (hash: NPoZeBJNLP1pu4ON6NFOXYuwaTk+aZbAKF9E7lCmybg=)
2: ACFE803469E911F0A7D42F68C4F9AE02.roa (hash: +DP6MilESaiHYhOyYqOuZcz5QFs57aj6iwKoYbBinoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Validity
Not Before: Jul 27 09:08:57 2026 GMT
Not After : Aug 3 09:08:57 2026 GMT
Subject: CN=6a672029-3569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:d6:8a:40:14:9a:f0:cb:aa:58:c5:08:13:
dc:e7:a5:56:90:51:11:16:b1:84:99:68:ce:01:27:
b5:ed:06:78:e9:27:5a:01:5f:6d:40:92:63:fe:4b:
60:16:e2:67:fc:db:99:48:d1:b2:56:d9:6d:f7:d5:
13:39:3e:0b:0d:31:c7:65:8c:ed:f5:d4:97:84:dc:
e5:6d:4f:a5:87:0f:cd:f8:fe:c9:b8:1a:a1:0b:c4:
ab:42:a7:5b:92:a3:e6:2f:46:08:b5:a1:f5:c8:53:
35:da:81:f7:f4:17:8f:03:31:84:2c:4d:63:87:9d:
e3:9d:3f:9f:48:72:0c:9b:df:47:a8:bc:c1:3c:a9:
9d:2b:46:a2:a2:93:1f:db:cf:69:6b:ea:c6:14:7c:
d6:d8:41:dc:9b:e4:ac:bb:9d:42:09:23:a2:c0:cb:
14:96:4b:a0:a3:17:4f:88:58:a7:97:d8:14:9e:58:
46:55:fd:f7:87:ce:49:15:90:9d:b1:ca:4b:ad:00:
aa:b0:41:a3:2d:b9:a8:2e:9e:63:3e:d8:8c:d0:47:
7c:03:97:cb:5c:5b:7e:b0:94:18:92:50:45:93:ce:
d1:11:d6:f0:c2:c6:58:95:2c:01:63:da:be:a8:6a:
5f:26:68:86:dc:bd:d3:1e:2b:c7:49:2a:01:da:03:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:6A:8B:57:A5:E2:F9:67:7C:2D:FB:DB:EA:AF:46:8E:23:D4:4B
X509v3 Authority Key Identifier:
keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cb:2b:ff:9d:28:13:68:e2:a9:03:c5:26:cf:81:d2:c6:e9:
31:f2:c5:8b:46:8d:fa:0f:d0:a6:38:84:9c:6b:cd:71:d4:1e:
75:7e:de:a6:75:b3:16:3b:da:13:bb:d4:49:d8:72:92:29:5f:
0a:d8:15:a0:dc:c8:81:a0:1c:cb:ac:8f:16:0f:24:c1:12:fe:
bf:ca:7d:fe:1b:c4:c5:0c:1a:9f:d1:f2:63:bb:0a:b6:d1:bd:
a4:05:85:79:97:79:fd:d2:e1:db:01:60:bf:87:fe:dd:69:1b:
72:ee:6b:29:01:b9:05:21:13:14:4f:05:06:10:09:d2:6a:96:
88:40:f4:e0:8e:9d:9c:2f:c0:21:bb:26:89:24:cf:7a:49:0d:
4c:44:1f:6f:d5:cf:2c:b5:57:3a:6c:41:c8:7d:14:e2:82:1a:
47:6b:23:06:2c:0a:b9:68:38:83:aa:1a:6d:ba:b9:19:b3:0f:
70:4e:c8:82:ea:1d:b0:b5:23:0d:2e:a9:f8:07:ad:a4:e2:a5:
60:9a:ea:8f:80:3b:28:2b:4f:e9:d4:6d:c3:d9:4a:ff:2e:f6:
11:a1:f4:2a:6d:7b:4f:53:3b:fd:da:96:17:f5:4e:d4:0a:54:
9e:6d:7a:fd:b8:e8:ac:08:ac:51:a1:3f:ca:1d:3f:61:10:d2:
f7:a4:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:02 2026 by rpki-client