
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json)
Hash identifier: 8NDRjX3n+5NAeh73StuCW8HGJGzO8Ag7mQAndpe4sc4=
Subject key identifier: E2:2E:D6:0D:F8:A7:8E:DA:C2:69:3E:6E:80:17:99:8E:AC:26:B8:7E
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial: 120F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
Manifest number: 1179
Signing time: Thu 16 Apr 2026 17:12:17 +0000
Manifest this update: Thu 16 Apr 2026 17:12:16 +0000
Manifest next update: Thu 23 Apr 2026 17:12:16 +0000
Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: 4trnL1ty4bDxrTSVa8XPsVBbcoOZjCOU1lfNBGbCOM4=)
2: 89C2D34A1AC911F1A26878773A3D8C67.roa (hash: 76O4IYXPBq1PdbW3XALTc2iktdnENccp1ab6ePfbt0U=)
3: 652F27C2268611F1B4DA1002B4833773.roa (hash: QkOdZG5FEv1Rbj8Iadwbn2v0UhPZuJkr7YpdV1fhrP8=)
4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: +VAYiRJdwp7AIJFptknUoX/WQ06mNIU7bXi85wbu8IY=)
5: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: B394cI0VrI1/IQFY1x3i0QaoEW2OuwCSpXnoIJQqOZA=)
6: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: 5i/UH503HWfNpIJgdTlhKUgyf9GU+TsIml7+DBFnaY4=)
7: 08DE553CE33411F09C32B5836E6F56BC.roa (hash: gKvmWouh5PfWLPdYDfJUbla3yQOrEGgpMJTDWd4FFn0=)
8: 345899BA1ACB11F18EC72DC33A3D8C67.roa (hash: JeWVqSmEgpPqe99fpviE9IltiegcfYWeYrX7sVepfPs=)
9: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: Vpw51MZvJPxwx8AO4fLP73wnxskz1308n4tyJojyQJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4623 (0x120f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Validity
Not Before: Apr 16 17:12:16 2026 GMT
Not After : Apr 23 17:12:16 2026 GMT
Subject: CN=69e11871-d0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:e1:f1:f1:cd:04:6d:72:06:51:af:58:2b:
c9:95:0a:42:46:2b:25:1c:7c:7b:9b:97:cd:80:de:
bd:31:05:97:1b:7b:fc:ca:c2:c0:aa:3d:c0:95:ec:
5e:97:d6:6f:ec:da:74:91:75:27:ab:c3:3d:6b:ad:
3e:8e:d9:d7:a1:ad:1c:e1:e2:8f:40:63:a2:2b:bc:
00:8e:90:43:13:42:3b:1f:7f:26:f1:ea:03:79:23:
45:e3:11:ca:6a:0c:6c:fc:29:fe:c8:45:45:70:b4:
17:a7:08:4c:20:a2:d3:d5:f0:03:67:98:4e:7b:d1:
ca:2a:e9:3c:6b:a9:c0:ab:18:ed:01:9c:47:04:22:
5e:63:56:ba:43:75:47:6d:f1:ae:45:a3:2b:49:8b:
65:e2:d1:c6:a2:d2:9b:b9:5b:1f:cb:da:94:26:04:
44:7b:5a:a6:47:ae:81:6b:a9:a6:de:51:16:3e:85:
a6:e3:b6:84:82:0b:33:e5:59:f1:b6:a4:49:f0:d6:
2f:f0:f5:04:5c:61:61:6e:bb:3d:54:1b:fa:fb:a9:
39:9a:83:fa:e4:7d:5d:f0:b0:80:45:24:8b:da:f4:
d0:e2:50:72:c5:34:f7:80:92:3b:9b:bd:00:af:5b:
27:2a:7d:0a:38:37:3e:7e:63:0e:31:23:39:e5:1b:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:D6:0D:F8:A7:8E:DA:C2:69:3E:6E:80:17:99:8E:AC:26:B8:7E
X509v3 Authority Key Identifier:
keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:77:f8:43:98:3a:3c:af:03:cc:70:20:fa:3d:f0:78:f5:0c:
50:bc:3d:51:ee:90:c7:eb:e9:68:6d:5d:57:1b:3c:4d:4b:5f:
c4:c6:73:02:03:12:0b:5a:a3:70:62:dc:c8:71:35:d6:cc:14:
0f:4b:14:3b:1c:16:72:87:35:c7:f8:2a:2f:23:59:6f:99:e1:
c8:e6:56:e7:ef:58:80:a0:90:fa:3f:a5:05:c2:d8:6f:74:75:
0f:b6:76:1f:97:fd:92:2a:ad:e9:c0:a7:30:24:ad:55:d9:82:
f8:1c:04:4c:89:a2:43:ef:d4:c5:0f:56:d2:3c:48:12:18:eb:
b1:5e:b1:42:0c:f3:6c:6c:f3:36:dc:af:a1:79:6b:3e:37:d6:
ca:3f:8a:e9:af:ce:9f:00:74:92:13:ad:c4:62:ec:f6:e7:d7:
74:f1:f0:00:05:39:99:90:a1:72:2f:55:b9:83:ee:03:7b:85:
33:53:c4:0a:8e:1e:a1:d5:38:37:d5:97:a5:14:c4:f1:b6:34:
db:34:57:27:b1:39:f9:4f:9b:29:7a:98:a7:58:2a:f1:4c:04:
5a:b5:37:22:88:37:6a:00:4e:87:18:76:4d:2e:15:08:1a:92:
7a:4a:07:f0:a6:a1:c6:d2:1b:5b:36:24:8f:ba:c6:c5:ab:96:
4e:37:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:25 2026 by rpki-client