
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier: UpJA8x+3AUvz/NGaJA8uhnMBvkfAFRrkvep+/xXMMr0=
Subject key identifier: 8D:46:C4:82:13:C2:EE:38:6C:2A:78:5F:53:58:77:69:97:4C:A1:56
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number: 0195
Signing time: Wed 25 Mar 2026 03:37:12 +0000
Manifest this update: Wed 25 Mar 2026 03:37:11 +0000
Manifest next update: Wed 01 Apr 2026 03:37:11 +0000
Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: Ng/cr0SMWsj7UnHdEEmkJ29jEr2E9CfSLj490IuzmE4=)
2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: hdm5NSSq5sJFtyZvDEbZoDanmDdY91BFML+/UHmDt8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Validity
Not Before: Mar 25 03:37:11 2026 GMT
Not After : Apr 1 03:37:11 2026 GMT
Subject: CN=69c35868-7210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:6a:a9:e5:6e:fd:74:bf:d9:32:24:a8:fe:
f6:fc:31:0f:05:b1:ed:b3:45:33:5c:a0:51:a5:13:
2c:98:7c:b3:01:09:77:93:4f:85:61:24:31:8a:6d:
81:02:41:6f:e5:16:75:be:0a:e7:d6:f8:c7:ef:a9:
71:3f:a3:ff:54:3f:74:3b:13:45:17:dd:a2:3d:80:
59:f7:40:74:1a:63:5f:11:fa:a9:07:9a:6a:78:e7:
46:1e:b6:1d:70:2d:cf:10:d2:82:d5:52:f4:ca:cb:
14:42:46:6b:20:ec:c2:21:46:cd:b0:78:24:f3:a8:
27:57:67:60:45:9e:53:bb:cc:b0:c8:86:5c:49:82:
20:49:70:82:2f:78:f3:6f:72:25:06:ea:6a:59:bc:
59:39:7d:7a:1e:9c:67:4c:dd:63:41:7e:e3:38:3f:
0d:75:76:92:4b:60:65:69:fe:2f:75:43:aa:29:68:
47:0b:20:ae:c2:a2:1c:dd:1b:20:55:82:b7:e4:7f:
cb:d8:c3:9d:5d:09:8a:31:93:1a:f1:fa:79:e3:db:
40:e5:86:05:6a:a5:44:d1:eb:88:23:f8:5b:e3:ad:
8a:53:e3:a5:27:77:47:8f:66:1c:bf:50:0a:de:ed:
b1:76:56:5b:0c:ce:60:a7:7f:fd:76:ef:b3:43:61:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:C4:82:13:C2:EE:38:6C:2A:78:5F:53:58:77:69:97:4C:A1:56
X509v3 Authority Key Identifier:
keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:9d:45:12:c4:a3:67:92:c7:31:b0:e0:04:16:cf:68:60:
1a:59:5a:38:3a:82:62:f0:52:87:a6:1e:1c:30:cb:29:fb:ff:
eb:c0:3d:43:c9:47:41:87:19:55:2a:79:3a:c2:1c:dd:64:3f:
7d:70:c9:c4:50:e6:84:bb:06:f5:02:63:4b:d7:39:61:87:04:
88:a3:80:7c:c4:04:9d:76:be:7d:bb:d7:37:06:1d:36:c6:e0:
da:15:5c:45:26:ab:5a:61:be:f4:fb:d0:92:d3:c6:d3:a9:4b:
50:ce:f2:1b:0d:95:d0:e5:79:48:61:8f:37:a7:8b:72:97:5f:
e5:35:14:8e:da:54:6a:24:06:8f:fe:32:df:8a:b2:46:1e:f1:
c7:ae:cd:21:64:a9:c9:34:7b:a2:d1:01:77:c2:43:81:f2:9c:
62:f9:7f:84:79:da:a5:38:92:c5:0c:ca:ea:91:f8:4d:50:fe:
b1:f6:f9:81:7b:29:36:92:da:b4:e7:cc:b8:31:78:48:30:8d:
e3:41:a9:6a:38:c4:c0:90:69:01:7e:22:60:94:ad:62:19:7f:
cc:43:e9:fa:2b:14:83:e6:43:6c:88:7d:40:a5:9f:59:09:c5:
11:75:1a:47:6a:c5:98:48:0d:9a:f0:79:06:5b:03:57:f7:b4:
1d:1d:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:08 2026 by rpki-client