
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json)
Hash identifier: bM7su7QVNeB2Hg94XWPYSkrj1zpX3IpgySsioNUY5c4=
Subject key identifier: CA:8C:DF:26:53:E1:A9:2B:A8:E2:5A:2C:64:F0:C6:97:A4:F5:DA:EF
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
Manifest number: EF
Signing time: Mon 11 May 2026 06:29:21 +0000
Manifest this update: Mon 11 May 2026 06:29:20 +0000
Manifest next update: Mon 18 May 2026 06:29:20 +0000
Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: RoXkgUaB5gtDqK+szQubfdkARSBkUyqwtpVmj40ljE8=)
2: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: 7q1pfdm13OOPKdMhFRZESc6pMqjQGZzOaS0jydIIjHM=)
3: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: UMPqKlbNgq/NCSI3t3UTm/r8MXA+qd0WY7ZlbRUGxiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Validity
Not Before: May 11 06:29:20 2026 GMT
Not After : May 18 06:29:20 2026 GMT
Subject: CN=6a017741-fc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:07:65:98:14:5c:3e:27:70:fb:c7:bb:44:
a9:1a:8c:a1:16:e4:a1:9c:74:12:6b:35:6f:be:24:
cc:6b:fc:fb:e6:83:59:6b:c5:a4:6c:f4:ed:f0:07:
c3:ea:9b:de:3a:a3:10:45:2b:e2:db:50:f7:d3:cb:
dc:13:ca:59:f3:0a:73:bc:ff:f1:2a:64:2b:91:c2:
9f:6f:03:a4:ea:54:6f:d9:7a:6c:91:ea:51:41:24:
e4:bf:4f:7b:7f:31:86:61:37:39:a0:ea:54:9f:c4:
43:4d:2a:43:5b:30:02:5f:37:fe:1f:f7:52:e2:6e:
b5:c4:9c:cf:5d:8e:50:a8:38:86:7a:81:e8:b6:cf:
3c:50:cd:b9:12:18:07:32:a3:a5:0d:31:97:85:bd:
ef:c3:47:78:a3:1e:10:82:cd:f8:56:85:01:87:4b:
41:eb:a4:3e:d8:73:99:2a:53:e7:e9:dd:29:f0:dc:
87:41:43:7f:43:19:30:46:e6:8e:6e:8d:51:38:41:
fc:92:ec:78:e8:b9:f8:96:d3:b3:87:dc:b3:6d:32:
7b:ee:7b:8a:08:45:9f:8b:f1:a6:25:27:61:2e:b9:
b9:cb:46:9e:ff:64:e5:1c:9c:13:07:f4:97:c3:38:
83:19:6d:29:58:6a:92:15:15:50:1b:d7:e8:b5:48:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8C:DF:26:53:E1:A9:2B:A8:E2:5A:2C:64:F0:C6:97:A4:F5:DA:EF
X509v3 Authority Key Identifier:
keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:83:61:33:d5:21:33:66:93:3e:aa:0f:69:16:02:f8:22:d9:
2e:34:9f:45:b5:67:b0:5d:ba:c8:33:79:5c:47:ea:fa:25:35:
4f:47:7d:b6:fb:0a:e9:7f:87:6f:4a:c1:5e:f3:02:e2:77:9d:
a7:51:b6:82:65:5b:fe:98:b0:a9:a1:f0:ca:3c:31:48:76:35:
96:e0:79:b0:ac:36:46:6e:48:3d:ed:11:ec:48:5f:bf:7e:da:
2a:bb:73:2f:b1:17:36:1a:9e:6d:22:b6:b7:1d:e9:da:07:4d:
8d:84:28:cb:e4:75:3a:d6:1f:c8:0c:80:bf:14:47:59:4b:55:
8b:33:26:de:f8:90:7b:1a:1b:e7:93:c5:11:67:4f:ba:cd:26:
d4:d7:b9:a6:0e:bd:b4:f5:e0:6c:b8:7c:e9:a0:09:ff:75:be:
7b:2d:15:a8:d7:83:c7:7f:4b:cb:49:4f:7a:56:45:66:d6:dd:
8e:f0:59:36:25:95:c6:af:b2:5c:16:06:f9:61:57:ed:ce:57:
56:21:27:4a:c7:59:6e:f1:a1:b9:81:7c:35:05:04:d6:66:72:
fc:cf:e9:2d:2c:0f:bc:44:d1:d0:e5:cd:09:65:dd:f5:3a:44:
4e:c6:96:c2:9f:50:f0:67:ec:ff:83:bf:93:f1:3e:5a:d5:d8:
4f:f3:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:27 2026 by rpki-client