
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier: k5/h+0Q6KwosSZc02uM5lMbcCNRgFGS9is+e8uG6a14=
Subject key identifier: B8:B4:97:D7:D2:67:E1:2D:E7:16:B9:D5:A0:C9:B8:93:46:C1:17:26
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number: 0111
Signing time: Mon 11 May 2026 06:08:39 +0000
Manifest this update: Mon 11 May 2026 06:08:39 +0000
Manifest next update: Mon 18 May 2026 06:08:39 +0000
Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: ZTYZni6udU2gMNlWojmW2WUjYqc4hczRCv43NDu8y6g=)
2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Validity
Not Before: May 11 06:08:39 2026 GMT
Not After : May 18 06:08:39 2026 GMT
Subject: CN=6a017267-12cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:a9:f1:c8:81:d0:f4:b7:6c:ad:b4:47:91:
cd:04:a6:60:17:e0:5e:8a:86:f5:99:f9:da:5f:fc:
80:32:19:5c:f3:82:7c:6b:d0:cd:35:cc:62:df:63:
c7:29:d7:eb:8c:ee:51:dc:8f:f6:85:54:c5:89:47:
ab:21:d0:ab:18:98:a1:ba:25:09:95:b1:e2:98:e9:
3a:8c:4e:33:24:60:1e:61:58:94:dc:a3:8f:76:7b:
76:4a:ac:86:ff:75:d5:4c:5d:e8:e3:03:62:42:5d:
66:46:50:69:15:57:46:7f:aa:83:bd:8a:3f:4a:41:
06:13:c7:61:f3:5d:dd:d2:3d:cf:f4:13:b9:6e:da:
a9:bc:73:21:c8:10:31:15:8e:92:57:04:84:3c:b2:
24:b5:2c:c2:6b:d4:4e:ea:46:31:64:25:44:50:ba:
fd:53:d7:60:ce:84:86:75:1c:b3:af:fa:b2:e2:e9:
89:47:0d:de:a1:ef:3f:a3:d7:3a:5f:36:8d:2d:41:
d1:43:af:09:3f:59:e9:96:38:9d:d8:53:53:6b:45:
3e:a2:55:46:71:75:c0:92:19:3d:7b:82:ef:03:02:
6b:98:00:8e:b4:17:f1:4e:b0:c1:15:25:d9:64:e5:
e7:d3:b9:c9:76:a8:bc:e1:bb:18:55:31:d4:a4:1e:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B4:97:D7:D2:67:E1:2D:E7:16:B9:D5:A0:C9:B8:93:46:C1:17:26
X509v3 Authority Key Identifier:
keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:2e:f4:26:a2:16:ed:e2:64:67:ee:c6:69:24:2a:fc:07:a2:
03:a0:fe:7d:d7:6b:61:51:f0:66:c8:48:1a:e0:73:02:40:ba:
61:af:bf:4c:7d:f0:63:c1:6d:eb:94:63:4c:7b:cf:eb:7c:a4:
5e:26:40:22:90:58:f3:a5:82:b5:f8:69:8c:20:7a:09:d9:06:
d3:dd:e1:95:e4:29:3e:0b:12:cc:ac:d7:38:48:4b:21:d0:4d:
06:9d:51:e0:a0:6f:79:4f:e5:98:bc:ca:98:b3:a5:ec:2d:e4:
ac:40:01:24:8e:60:80:26:54:20:0c:24:78:95:82:ff:70:a3:
dd:60:c0:5f:ad:14:1c:c3:e9:84:74:10:07:69:e4:02:de:13:
f1:cf:32:69:64:68:d8:db:35:8d:d7:e3:0c:7f:85:0e:24:73:
db:5c:f9:f1:a5:a9:77:2f:de:df:68:d6:d2:9a:ce:5d:d3:e5:
33:c4:3d:c0:58:6a:04:00:04:24:be:e4:63:ee:6c:ed:80:55:
ce:61:9b:84:5c:94:ba:e7:3d:6c:ba:97:4d:26:b7:55:47:88:
bb:4b:33:7e:a5:73:1c:8b:08:b0:c4:c1:e8:91:22:d4:4d:62:
cd:e0:cc:33:5c:f7:c9:59:f4:60:43:3e:62:1a:30:e8:15:43:
43:a6:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:50 2026 by rpki-client