
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
File: EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json)
Hash identifier: Gu7yrmN9/LkIDah6KDdcmlmg0NcmHyiSrXg+dZvcvVA=
Subject key identifier: 91:3C:0D:7E:B1:0A:7D:9D:63:A9:94:48:D8:A5:80:62:3B:87:31:A5
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Certificate issuer: /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial: 0CE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
Manifest number: 0CD0
Signing time: Tue 22 Sep 2026 18:21:59 +0000
Manifest this update: Tue 22 Sep 2026 18:21:59 +0000
Manifest next update: Tue 29 Sep 2026 18:21:59 +0000
Files and hashes: 1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: oG4LyybIm68pN0llxADKWuDqQJcr9OOOlh7RzrVaKz0=)
2: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: Zz6cnYnUPcDEXRNQH9B/ouDYZ8xO3XrqKQp0FhjFncw=)
3: A80715221A7711EAA20A077FC4F9AE02.roa (hash: AdTxHqZB78HC5nvRr+rubqCxl7v2U8bQB16ej3Sal5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3301 (0xce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112B4C, serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Validity
Not Before: Sep 22 18:21:59 2026 GMT
Not After : Sep 29 18:21:59 2026 GMT
Subject: CN=6ab2c747-b61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:06:56:da:be:39:53:2d:42:ec:64:08:e9:
10:75:07:51:32:86:8f:b0:71:16:70:3e:f8:5d:88:
c8:22:38:a2:7b:96:c0:55:38:9e:35:b9:1b:0e:6f:
c0:08:3e:7e:6f:40:06:07:0c:e0:c6:37:07:82:d1:
c2:3a:c4:cf:1a:e9:fa:97:24:7b:ba:b9:5b:97:f4:
1b:c5:3b:8b:1a:e7:d3:8b:5c:30:a8:f0:1a:a9:d3:
f5:42:77:03:a7:3b:77:09:5a:32:49:62:02:fc:4b:
02:9e:35:62:0c:44:92:21:5d:4d:3f:e7:e0:36:95:
43:47:05:e2:b5:23:9e:87:37:b4:3d:ef:ce:78:80:
cc:52:76:d2:27:19:e8:61:13:f2:a0:0d:7e:f0:5d:
38:aa:f3:ca:9c:f4:80:2b:2c:de:b3:ab:70:c1:65:
8f:d2:31:96:98:c4:25:c4:70:9b:b7:c5:1e:28:31:
c6:cb:46:52:d4:3e:66:2a:9b:86:ac:ce:cb:c1:7a:
b5:85:a5:20:ff:60:c2:e7:74:19:72:b8:e5:18:2e:
ee:74:3d:a4:c2:47:b9:92:ea:7b:ee:2c:d8:aa:cc:
06:b0:ce:39:a2:d1:5c:aa:28:05:28:fb:cb:a5:86:
a1:31:e5:03:b8:0d:f6:40:e5:79:d4:22:e8:82:b1:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:0D:7E:B1:0A:7D:9D:63:A9:94:48:D8:A5:80:62:3B:87:31:A5
X509v3 Authority Key Identifier:
keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:96:fa:4e:e7:15:b5:4f:12:ab:59:fb:cc:91:85:d8:f2:2a:
a1:ef:60:0a:ac:2a:a7:08:9d:40:8f:ba:14:11:66:fa:4b:0f:
17:78:48:87:ba:86:57:a1:66:6a:41:cd:9a:62:ad:55:fc:7e:
1c:65:00:36:28:da:85:93:34:cd:e5:c4:66:70:bc:a6:39:56:
f9:a0:63:a3:c3:d2:3b:36:00:c6:8a:92:e4:09:64:b0:9a:fc:
92:07:73:8d:1a:91:ef:13:10:09:40:28:75:35:39:f4:a7:cf:
f5:08:82:8e:2f:71:dd:74:ca:db:47:d2:55:1c:bb:b4:0d:a0:
3b:ab:5c:19:a4:19:81:53:84:35:aa:2c:1e:a2:3f:29:b3:bf:
1e:30:1f:0b:b7:43:87:81:a3:3e:6b:ba:68:bb:16:b4:c6:ee:
63:31:2b:03:c6:6a:2a:c3:29:1b:a9:a3:c6:57:a5:b2:1c:f9:
2f:c4:43:20:8e:26:be:a1:0a:67:7f:08:68:12:2d:ad:05:fb:
be:cf:b8:8d:85:bb:16:15:32:21:2d:3d:ef:88:01:d4:d4:35:
71:4d:ec:80:d8:e6:77:76:ff:fd:be:88:a4:fa:9e:4d:33:6c:
b7:6c:64:2c:65:2b:4e:4b:d1:66:93:96:9e:ef:d4:be:34:b5:
c7:80:b1:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJCNEMxMTAvBgNVBAUTKDEyMDA4REJBQjc4Q0IzMUYyOTk0RTE0ODRFQTNGMjQy
NzRCOUQxQTgwHhcNMjYwOTIyMTgyMTU5WhcNMjYwOTI5MTgyMTU5WjAYMRYwFAYD
VQQDEw02YWIyYzc0Ny1iNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0o0GVtq+OVMtQuxkCOkQdQdRMoaPsHEWcD74XYjIIjiie5bAVTieNbkbDm/A
CD5+b0AGBwzgxjcHgtHCOsTPGun6lyR7urlbl/QbxTuLGufTi1wwqPAaqdP1QncD
pzt3CVoySWIC/EsCnjViDESSIV1NP+fgNpVDRwXitSOehze0Pe/OeIDMUnbSJxno
YRPyoA1+8F04qvPKnPSAKyzes6twwWWP0jGWmMQlxHCbt8UeKDHGy0ZS1D5mKpuG
rM7LwXq1haUg/2DC53QZcrjlGC7udD2kwke5kup77izYqswGsM45otFcqigFKPvL
pYahMeUDuA32QOV51CLogrH7PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJE8DX6x
Cn2dY6mUSNilgGI7hzGlMB8GA1UdIwQYMBaAFBIAjbq3jLMfKZThSE6j8kJ0udGo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkI0Qy83QkE1NDI1ODFB
NzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4OHBsT0ZJVHFQeVFuUzUw
YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VnQ051cmVNc3g4cGxPRklUcVB5UW5TNTBhZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkI0Qy83QkE1NDI1ODFBNzUxMUVBQUUxOUUzN0FDNEY5QUUwMi9FZ0NOdXJlTXN4
OHBsT0ZJVHFQeVFuUzUwYWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlZb6TucVtU8Sq1n7zJGF2PIqoe9gCqwqpwidQI+6FBFm+ksPF3hIh7qGV6Fm
akHNmmKtVfx+HGUANijahZM0zeXEZnC8pjlW+aBjo8PSOzYAxoqS5AlksJr8kgdz
jRqR7xMQCUAodTU59KfP9QiCji9x3XTK20fSVRy7tA2gO6tcGaQZgVOENaosHqI/
KbO/HjAfC7dDh4GjPmu6aLsWtMbuYzErA8ZqKsMpG6mjxlelshz5L8RDII4mvqEK
Z38IaBItrQX7vs+4jYW7FhUyIS0974gB1NQ1cU3sgNjmd3b//b6IpPqeTTNst2xk
LGUrTkvRZpOWnu/UvjS1x4Cxkw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:27:02 2026 by rpki-client