
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json)
Hash identifier: v9vO6gd7xRrp4qd1rn2iuzqptWbANOEH9lsCEeWUCyQ=
Subject key identifier: 18:8D:05:F9:F0:AF:CB:89:94:6C:A6:A3:C1:C6:CB:55:AF:29:23:47
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
Manifest number: 0113
Signing time: Thu 23 Jul 2026 07:39:30 +0000
Manifest this update: Thu 23 Jul 2026 07:39:30 +0000
Manifest next update: Thu 30 Jul 2026 07:39:30 +0000
Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: tdjxeTp4ga/jT90irPqHnFPlXMQXxuZBrhZ4U+ovd0k=)
2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: UMPqKlbNgq/NCSI3t3UTm/r8MXA+qd0WY7ZlbRUGxiU=)
3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: 7q1pfdm13OOPKdMhFRZESc6pMqjQGZzOaS0jydIIjHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Validity
Not Before: Jul 23 07:39:30 2026 GMT
Not After : Jul 30 07:39:30 2026 GMT
Subject: CN=6a61c532-2250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:5a:75:21:f9:b8:75:6d:ac:19:b0:62:6f:
e3:e6:19:8f:d4:d7:89:b6:e4:af:52:18:56:50:8b:
4c:93:de:3e:f8:be:f0:32:75:37:05:4f:4a:74:7a:
5d:fd:a3:2c:69:bf:48:7f:39:d7:5e:ac:46:f6:ed:
19:28:12:0f:01:72:cb:2e:29:03:19:8b:f3:a1:9d:
3c:91:a7:87:94:2d:60:b9:e3:86:86:50:2a:7e:a1:
f2:9c:d5:89:c4:e7:13:36:d7:c8:c7:c9:40:2a:58:
3d:42:63:23:9a:93:fa:ef:9e:8f:1f:55:a4:98:bb:
32:8e:13:6b:31:d5:c2:52:1d:3f:7c:46:ee:24:de:
75:d5:4c:12:d2:11:c8:6a:dd:da:54:bb:e5:f7:87:
50:53:20:a7:8b:5e:dd:2f:d4:f2:0c:13:08:0d:e5:
3f:72:47:28:25:b6:56:11:09:39:32:fe:65:21:05:
ad:4c:27:72:2f:be:d8:57:f1:4b:d6:c6:70:8a:39:
80:79:a7:ae:02:5f:cd:4f:60:00:66:9a:07:90:64:
9a:71:0b:e4:b1:67:11:aa:f2:b7:da:0c:df:8f:08:
ca:49:9d:20:8c:a1:1f:aa:e7:7c:72:be:95:56:66:
bd:84:7a:3a:1a:41:d5:dd:02:69:7f:10:41:fe:d5:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8D:05:F9:F0:AF:CB:89:94:6C:A6:A3:C1:C6:CB:55:AF:29:23:47
X509v3 Authority Key Identifier:
keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1e:86:6d:b0:a9:41:0a:2f:56:8b:03:3b:4f:a0:49:16:c5:
0b:cf:3c:db:30:6a:be:f5:1d:9f:c3:70:4d:46:d4:07:02:9d:
8e:8c:85:c8:9e:ed:b5:4a:da:19:a9:c6:cf:3e:78:11:aa:c4:
34:2d:5b:19:ea:73:6a:60:f6:59:fb:cf:05:54:8b:05:3d:96:
88:08:5a:e2:df:02:ba:a5:9b:75:74:16:78:ef:35:9c:fc:cc:
f7:f0:d9:f8:54:1e:e7:6d:f6:98:76:ca:34:86:54:57:e6:1a:
97:be:c3:09:79:0c:4e:39:fe:9f:39:bc:30:c0:7f:35:69:45:
c7:4e:60:fb:37:25:27:83:d8:6e:d7:7d:7b:99:60:f5:cc:29:
6c:c6:61:89:c6:05:f9:90:93:b9:cb:e7:a0:3b:5a:31:60:6e:
14:a2:43:88:1f:66:8f:9a:4c:aa:76:75:af:6c:9f:b2:49:cc:
da:ba:4b:a6:eb:13:21:70:ba:63:25:d8:32:5e:5a:98:50:30:
cb:5b:43:34:c1:80:4b:ed:6d:2e:4f:ec:38:3a:05:8f:a4:68:
cb:f0:0b:f5:df:e2:2c:95:be:81:c5:53:6e:ce:d5:7a:39:9f:
1d:2e:eb:b7:21:53:0d:2b:b8:64:76:8c:3b:da:8d:79:7c:23:
04:bf:d8:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIwMzcxMTAvBgNVBAUTKDM3NjEyMTJBMTY3MEE1NzE5QUI3MUZBMjAzQjkyRUM2
ODZGMjExNzcwHhcNMjYwNzIzMDczOTMwWhcNMjYwNzMwMDczOTMwWjAYMRYwFAYD
VQQDEw02YTYxYzUzMi0yMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPRadSH5uHVtrBmwYm/j5hmP1NeJtuSvUhhWUItMk94++L7wMnU3BU9KdHpd
/aMsab9IfznXXqxG9u0ZKBIPAXLLLikDGYvzoZ08kaeHlC1gueOGhlAqfqHynNWJ
xOcTNtfIx8lAKlg9QmMjmpP6756PH1WkmLsyjhNrMdXCUh0/fEbuJN511UwS0hHI
at3aVLvl94dQUyCni17dL9TyDBMIDeU/ckcoJbZWEQk5Mv5lIQWtTCdyL77YV/FL
1sZwijmAeaeuAl/NT2AAZpoHkGSacQvksWcRqvK32gzfjwjKSZ0gjKEfqud8cr6V
Vma9hHo6GkHV3QJpfxBB/tWEmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiNBfnw
r8uJlGymo8HGy1WvKSNHMB8GA1UdIwQYMBaAFDdhISoWcKVxmrcfogO5LsaG8hF3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjAzNy81QzA1QzBDOEU0
MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BYR2F0eC1pQTdrdXhvYnlF
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjAzNy81QzA1QzBDOEU0MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BY
R2F0eC1pQTdrdXhvYnlFWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfx6GbbCpQQovVosDO0+gSRbFC8882zBqvvUdn8NwTUbUBwKdjoyFyJ7ttUra
GanGzz54EarENC1bGepzamD2WfvPBVSLBT2WiAha4t8CuqWbdXQWeO81nPzM9/DZ
+FQe5232mHbKNIZUV+Yal77DCXkMTjn+nzm8MMB/NWlFx05g+zclJ4PYbtd9e5lg
9cwpbMZhicYF+ZCTucvnoDtaMWBuFKJDiB9mj5pMqnZ1r2yfsknM2rpLpusTIXC6
YyXYMl5amFAwy1tDNMGAS+1tLk/sODoFj6Roy/AL9d/iLJW+gcVTbs7VejmfHS7r
tyFTDSu4ZHaMO9qNeXwjBL/Ylg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:45 2026 by rpki-client