
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json)
Hash identifier: WZFApi5FgduUXKkz+0gtnH3r2BUzSgSbWU945hprmVc=
Subject key identifier: 4D:E8:E7:DE:FE:80:10:8C:FE:29:DB:B9:6D:28:8B:79:DD:E0:46:A5
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
Manifest number: 02AC
Signing time: Wed 23 Sep 2026 01:22:33 +0000
Manifest this update: Wed 23 Sep 2026 01:22:33 +0000
Manifest next update: Wed 30 Sep 2026 01:22:33 +0000
Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: 6Vu2ZndKSZi+0ynad85xZmGPDIBJWwHDNgyo5o+c4a0=)
2: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=)
3: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Validity
Not Before: Sep 23 01:22:33 2026 GMT
Not After : Sep 30 01:22:33 2026 GMT
Subject: CN=6ab329d9-7e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fe:53:93:23:54:cd:36:63:7e:5a:f4:7b:13:
6f:b6:d7:3a:6d:36:a9:d5:a3:c3:f8:07:7d:5c:7c:
35:70:15:e8:ca:44:37:9b:fc:fa:1d:7e:d7:5c:cf:
5f:64:11:23:1b:f6:21:e3:dc:35:87:ea:f1:78:92:
74:73:95:a8:03:44:91:2e:54:5f:33:15:d3:7f:af:
1a:7e:ab:04:2b:a7:c9:58:7f:42:e9:d4:c0:a4:ff:
f4:f1:d2:54:2e:a9:28:bf:41:2d:6e:dc:b8:92:a4:
e8:27:d4:9a:fd:db:62:51:53:3a:97:24:6b:8e:bc:
a5:88:04:2c:c0:16:78:ae:29:62:6b:fc:6c:9a:91:
cd:87:61:b4:4a:4d:56:14:22:19:34:d3:38:af:a2:
64:49:41:6a:c7:09:55:6b:7a:c5:90:a4:a9:d5:d2:
90:3b:ca:48:b9:77:61:6e:e9:83:b5:2d:1b:54:9f:
d5:be:27:1d:55:a2:98:8d:58:19:39:0d:af:2f:a3:
c0:48:cb:c5:e5:c4:0c:2f:a2:34:0b:c4:9f:b9:3c:
c8:d4:8a:71:25:15:99:31:c9:b6:7c:8c:16:dc:8d:
0c:4e:a2:ef:eb:86:c5:a2:15:ba:9a:ce:90:23:e8:
1a:6d:99:49:ae:a4:c2:08:b1:2e:ef:7e:c6:d6:2d:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:E7:DE:FE:80:10:8C:FE:29:DB:B9:6D:28:8B:79:DD:E0:46:A5
X509v3 Authority Key Identifier:
keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:90:a6:55:dd:14:d3:51:c3:3d:82:1f:e0:48:10:8e:a2:69:
84:e8:d8:e5:fc:36:dd:b3:f9:45:2b:cd:13:bb:65:35:4e:02:
66:35:7f:63:56:f8:3e:ea:29:eb:cd:84:24:64:7e:8a:a9:16:
11:48:c1:14:6f:4f:55:b8:18:9b:49:57:6c:13:e3:9a:c5:32:
3c:fb:85:95:51:f0:c6:6f:33:a5:19:49:59:ca:95:3c:81:21:
d3:2e:76:2c:d7:15:90:17:e5:59:9d:a2:80:10:6b:92:12:6a:
56:23:ca:4c:58:5d:ad:7c:58:26:57:cf:0c:27:79:81:ad:a8:
66:38:b3:db:2f:e2:9e:46:7b:25:b7:77:25:e0:d7:d6:d9:ec:
55:94:a1:08:f8:06:0b:35:79:d5:5a:81:6f:f3:0b:db:a2:32:
eb:c7:53:37:b2:2c:e1:5d:04:47:ea:2d:84:9d:4a:23:1a:53:
95:77:47:d7:53:0c:82:d8:fe:91:73:fc:a6:1d:16:0d:19:49:
20:2c:37:3d:84:f7:f7:f6:4a:17:42:63:df:5a:2b:e4:9c:d0:
8b:30:dc:cc:e1:51:95:ce:dc:66:f9:ad:f8:37:ab:3f:16:a5:
9a:a7:3a:70:de:48:68:26:02:33:28:d3:5c:62:b7:b3:9d:31:
bc:e2:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:49 2026 by rpki-client