
$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
File: 0ewZe9sNlRk40e71SWoRrMoCiO8.mft (raw, json)
Hash identifier: aWvpazbXPLiRnRrlRx3OI5Qi7rM3dMDmVXX1FA3PQPI=
Subject key identifier: 2C:13:B6:B2:09:AB:C4:A1:B0:E5:06:4E:1A:14:96:72:DD:E4:23:FC
Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
Certificate issuer: /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
Manifest number: 89
Signing time: Wed 15 Apr 2026 07:11:14 +0000
Manifest this update: Wed 15 Apr 2026 07:11:13 +0000
Manifest next update: Wed 22 Apr 2026 07:11:13 +0000
Files and hashes: 1: 0ewZe9sNlRk40e71SWoRrMoCiO8.crl (hash: pA0P/32rQf+aZyLmq8hDr21YQSrJlAxP/eDTMkbmKUQ=)
2: ACFE803469E911F0A7D42F68C4F9AE02.roa (hash: +DP6MilESaiHYhOyYqOuZcz5QFs57aj6iwKoYbBinoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:11:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF
Validity
Not Before: Apr 15 07:11:13 2026 GMT
Not After : Apr 22 07:11:13 2026 GMT
Subject: CN=69df3a12-65ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:70:91:85:1a:94:fc:f5:73:a8:01:9d:35:
21:07:c8:9b:f6:2a:74:5e:41:12:f1:8a:7e:0a:21:
d2:b7:6c:0b:90:45:30:e8:cd:b4:6e:ef:8a:39:9d:
8f:c2:b0:11:bb:f9:43:66:fa:28:2a:33:c1:ba:09:
d6:46:77:8a:7f:22:aa:5e:1d:fa:9a:aa:94:66:0c:
8c:80:72:2c:19:26:85:06:e3:cc:6e:ab:38:b2:c6:
06:f0:d1:07:3d:a1:81:16:67:a7:33:7c:65:6b:f3:
ef:55:de:34:d8:a3:e4:13:ad:c7:e0:b8:53:4f:59:
ba:e6:3d:3f:b0:57:ff:3c:19:e3:23:57:75:83:dc:
f4:4d:ed:88:d2:51:76:5c:98:22:7d:5e:fe:04:9a:
ed:53:21:f3:ce:73:00:c5:93:ba:c0:ee:b9:6b:fa:
e0:61:b3:b2:e0:ae:57:75:5a:9c:82:85:ad:79:de:
e2:7c:c9:f1:eb:57:38:2f:fd:8c:41:02:43:b2:71:
3f:bd:18:87:39:8d:e8:38:71:dc:5d:63:53:90:c5:
49:bf:22:3a:c4:37:02:a8:a3:3a:88:74:35:f5:ed:
56:e5:b7:45:2a:f3:6f:4f:06:63:52:73:27:fe:dd:
25:7e:1c:66:66:45:79:5e:8d:7b:6f:36:d9:29:70:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:B6:B2:09:AB:C4:A1:B0:E5:06:4E:1A:14:96:72:DD:E4:23:FC
X509v3 Authority Key Identifier:
keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:e2:a5:66:6b:b9:2d:28:93:c1:f7:fd:b5:27:a9:30:69:ea:
8a:e4:ed:1f:b9:f4:82:09:ed:74:c8:cc:63:e3:f5:60:3e:30:
7f:81:c3:2c:e0:ac:ce:56:6a:50:b6:9a:83:88:6d:c4:03:b2:
84:09:ba:35:a6:74:04:5d:18:44:e4:8b:dc:8b:f5:b3:96:37:
7d:a4:72:b4:40:39:5a:5f:74:e2:53:be:8a:ed:14:d5:4c:d8:
2f:b8:d1:8c:2c:01:05:b0:23:1f:d6:80:c5:9a:8e:bb:c2:53:
c3:ff:9d:8a:ad:f0:d0:55:fb:86:e3:6e:2c:ac:20:d6:52:6e:
79:6c:cd:7e:47:33:91:3f:c1:d1:25:30:b3:17:48:60:e9:ab:
77:89:ef:13:f7:f5:bc:a0:7f:0a:56:92:a7:5c:2c:58:d0:c1:
4b:1d:e4:09:e6:8f:ab:71:e5:cf:fd:98:65:59:69:15:83:9b:
a6:d7:d0:d0:3c:ba:44:c2:80:ec:38:5b:4e:d1:af:8b:a1:a2:
27:67:50:c3:a8:7d:26:06:3c:64:c5:8e:bc:6f:09:70:da:ab:
b1:1d:33:57:1b:04:08:54:ee:4b:9c:c6:fa:48:d4:62:75:10:
31:ff:c5:a8:29:04:64:ef:ab:5f:02:e8:b4:40:1b:36:fc:fb:
07:c6:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:20 2026 by rpki-client