
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier: 9LlyMEBULwr6e8Z6At4e5ZqcJEFeJdCmAem/tSdQhrc=
Subject key identifier: 4C:EC:F3:96:BB:63:B4:C7:CD:CA:D3:5E:57:E0:31:FD:07:A8:DB:20
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial: 013F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number: 0135
Signing time: Thu 23 Jul 2026 07:16:45 +0000
Manifest this update: Thu 23 Jul 2026 07:16:44 +0000
Manifest next update: Thu 30 Jul 2026 07:16:44 +0000
Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: GsrT+Hxn5jvDmU1rFS6Lni8ayAhp644IOMUuFZlTtZI=)
2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Validity
Not Before: Jul 23 07:16:44 2026 GMT
Not After : Jul 30 07:16:44 2026 GMT
Subject: CN=6a61bfdd-0b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:6b:af:c8:58:86:9f:79:bd:eb:5f:73:e9:
0e:a8:3b:57:b4:54:6e:97:c1:e6:da:21:bd:f3:e2:
fb:9b:3d:b6:15:31:a6:61:85:b7:e9:dc:5b:4a:98:
e4:01:de:d6:d2:1a:d5:23:e9:50:14:1e:37:8d:33:
ac:03:37:e5:6c:0a:98:a4:38:64:d7:82:58:cd:2f:
9a:9d:17:4a:69:cc:d7:8f:28:92:d9:d3:a8:b8:0f:
d8:0a:ae:9c:f3:20:bb:73:69:29:95:16:6f:26:ea:
79:27:7e:09:72:6b:0c:51:c8:bb:f7:e7:ec:47:09:
81:eb:26:12:9d:0a:94:d3:70:8b:cf:a9:a1:a1:e4:
1e:c4:11:70:54:3d:e8:7b:6a:cf:30:56:d7:43:e1:
84:4a:33:0f:40:6e:fb:eb:1a:b2:13:12:7f:22:b2:
8a:b5:16:8f:d6:44:d2:0c:87:b1:d5:6c:a9:8c:a7:
b9:f1:4a:bf:9e:d1:89:d3:58:0a:19:81:2d:2d:05:
eb:ea:3b:9d:a0:94:ea:b6:1f:f4:d6:28:7e:49:b4:
78:78:bc:09:c0:9c:7b:fb:5b:d2:c8:99:d7:b4:0c:
98:5b:99:1b:74:3b:f0:57:26:37:ef:1c:10:93:be:
ff:56:88:3d:45:0d:a0:82:ff:9e:57:cb:96:89:70:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EC:F3:96:BB:63:B4:C7:CD:CA:D3:5E:57:E0:31:FD:07:A8:DB:20
X509v3 Authority Key Identifier:
keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:43:3b:6a:7f:d0:cf:a7:b4:80:49:a9:79:4a:ef:d5:2a:c4:
c6:6d:e1:1f:8b:75:39:16:c3:03:1a:1c:1e:b1:3d:37:28:c1:
a9:af:c7:6a:ec:f5:20:cd:4d:aa:33:d8:af:56:c0:18:39:f5:
06:64:1f:d8:29:52:d1:f8:47:24:cc:f9:95:75:8b:cd:b3:b3:
bd:1b:03:d6:eb:04:bd:c8:0a:6e:2d:ca:09:8d:c8:2a:3d:96:
f1:6c:c7:da:90:46:25:6a:c4:53:71:81:b7:ac:3c:57:40:42:
4f:59:d9:1a:dc:0d:56:78:2b:53:bf:ca:1c:79:32:f1:06:46:
bc:77:e4:d1:41:64:bd:0c:1d:d4:04:40:be:e6:6f:67:f9:ea:
e0:c3:3a:7a:89:82:d9:68:1d:6e:de:5a:b7:11:37:f0:31:5a:
ec:16:db:f9:e1:95:a6:1f:cd:3d:d9:72:72:aa:e5:e5:ae:e5:
32:35:89:57:71:ad:a8:9d:b3:db:62:84:26:82:a7:77:ea:34:
83:56:a5:8b:10:e8:fc:c1:d7:03:ff:b7:8a:d6:a4:17:0f:b7:
63:ef:3b:06:5e:ce:5d:ac:12:ad:4d:b0:35:87:53:68:f8:dd:
2f:db:06:0b:79:ec:34:be:91:36:cc:b0:6f:0a:81:72:56:1d:
33:58:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:08 2026 by rpki-client