
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
File: erugrZ7I7WVe_HmVfQMV6veF-uw.mft (raw, json)
Hash identifier: k/m8rNQdbYhSuwWKnMnObKb4PbN0HNnmU5swuz5kdbI=
Subject key identifier: E2:A0:E0:0B:84:35:03:60:A0:EE:75:28:15:61:8D:06:48:67:FE:D2
Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
Certificate issuer: /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Certificate serial: 0125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
Manifest number: 0120
Signing time: Wed 23 Sep 2026 05:39:54 +0000
Manifest this update: Wed 23 Sep 2026 05:39:53 +0000
Manifest next update: Wed 30 Sep 2026 05:39:53 +0000
Files and hashes: 1: erugrZ7I7WVe_HmVfQMV6veF-uw.crl (hash: W/qTn3O+jbWmBfqs9WK0JMioW7qg8HtF4g0JddzHaT8=)
2: A85CC65C057211F090CABA0FC4F9AE02.roa (hash: ybr3vgzI83KwUfLSP7rdq0cCBpcoJ5VmuW2ttyOTFpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl
rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Validity
Not Before: Sep 23 05:39:53 2026 GMT
Not After : Sep 30 05:39:53 2026 GMT
Subject: CN=6ab3662a-54ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:e7:a2:86:82:be:b4:80:9a:69:b4:8c:cd:
10:d9:fb:9b:a4:fd:0c:97:34:9a:d9:5e:60:2d:b5:
4f:46:1e:44:cc:21:71:be:9e:18:b4:df:8c:63:ae:
08:35:8c:65:f9:f0:f5:4a:7b:30:9e:26:29:de:d9:
02:7f:15:05:5a:e5:b4:a9:1a:10:36:14:99:be:e1:
02:bd:fb:f0:ca:33:a8:8f:ea:cf:f5:e8:32:5a:38:
af:79:6e:2c:e8:5d:c6:8b:9d:83:34:54:73:42:ea:
5e:c0:6e:a9:03:ae:a9:74:98:b6:34:e2:6e:f0:99:
9e:ef:d8:e4:07:74:6a:2b:63:a2:a3:dc:57:af:5a:
0f:10:c7:be:34:36:f8:fa:ad:5c:9e:48:2f:f2:4d:
68:1b:fa:e2:b8:26:34:03:dc:7f:d8:91:0d:56:8a:
2b:92:c4:78:b5:4e:b3:69:13:03:98:72:c6:eb:c6:
36:af:cc:de:3a:3b:b3:cb:96:23:a2:92:e1:1c:32:
21:13:30:7e:da:c3:b2:5a:ff:65:89:ac:61:5e:34:
1f:ca:ac:e4:74:ad:6a:9e:ea:90:9c:5c:a9:a3:79:
a4:a0:15:e5:12:43:f5:b1:7d:67:85:8e:28:63:e5:
da:23:38:4f:d5:89:7f:6e:b1:16:38:d0:ad:64:e1:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:E0:0B:84:35:03:60:A0:EE:75:28:15:61:8D:06:48:67:FE:D2
X509v3 Authority Key Identifier:
keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:b3:95:e4:0e:39:38:d2:ba:76:2a:e0:c2:dd:fa:24:91:30:
e1:a3:ca:5a:cb:9a:f1:c4:d6:b4:e8:86:ee:32:0b:e1:ee:5e:
79:8e:f7:7b:fc:4f:89:3d:0c:2c:9c:3f:2b:7d:04:a8:74:22:
85:36:05:47:cb:55:9a:e8:bb:b1:3b:dd:bc:fa:ee:7a:d6:be:
8e:42:b5:8e:32:30:61:8d:8f:10:04:fb:5e:21:1b:bc:c5:59:
8d:6b:fa:64:14:4b:ed:6c:91:01:0f:5a:05:a0:63:2a:63:91:
0e:56:0b:5d:84:50:67:07:83:cc:79:93:6e:ed:81:f8:56:3e:
5f:84:0f:f8:3f:33:d1:21:93:39:59:d8:00:6c:0d:13:da:3d:
e3:17:df:ec:5e:d3:cf:79:51:8f:31:31:9a:16:3d:ca:af:d4:
22:c2:2b:a4:64:b9:79:c4:0a:2f:ab:1e:62:86:38:99:1f:83:
9d:78:31:c3:61:6f:c5:b8:3a:db:46:0d:f0:77:ce:b1:6f:8b:
15:3d:a0:6a:36:b0:b9:ee:78:97:6f:89:15:75:37:3e:2d:e5:
5e:49:09:98:80:67:8c:d0:31:f4:a5:95:04:88:76:61:5b:85:
a4:fa:ce:11:87:68:0a:aa:61:2f:6b:3e:50:54:1b:d6:af:1a:
71:54:48:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcyNDQxMTAvBgNVBAUTKDdBQkJBMEFEOUVDOEVENjU1RUZDNzk5NTdEMDMxNUVB
Rjc4NUZBRUMwHhcNMjYwOTIzMDUzOTUzWhcNMjYwOTMwMDUzOTUzWjAYMRYwFAYD
VQQDEw02YWIzNjYyYS01NGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8TfnooaCvrSAmmm0jM0Q2fubpP0MlzSa2V5gLbVPRh5EzCFxvp4YtN+MY64I
NYxl+fD1SnswniYp3tkCfxUFWuW0qRoQNhSZvuECvfvwyjOoj+rP9egyWjiveW4s
6F3Gi52DNFRzQupewG6pA66pdJi2NOJu8Jme79jkB3RqK2Oio9xXr1oPEMe+NDb4
+q1cnkgv8k1oG/riuCY0A9x/2JENVoorksR4tU6zaRMDmHLG68Y2r8zeOjuzy5Yj
opLhHDIhEzB+2sOyWv9liaxhXjQfyqzkdK1qnuqQnFypo3mkoBXlEkP1sX1nhY4o
Y+XaIzhP1Yl/brEWONCtZOHUiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKg4AuE
NQNgoO51KBVhjQZIZ/7SMB8GA1UdIwQYMBaAFHq7oK2eyO1lXvx5lX0DFer3hfrs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0NC9GMkYxMjNGODAz
QzMxMUYwODhGNDZEMUVDNEY5QUUwMi9lcnVnclo3STdXVmVfSG1WZlFNVjZ2ZUYt
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VydWdyWjdJN1dWZV9IbVZmUU1WNnZlRi11dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzI0NC9GMkYxMjNGODAzQzMxMUYwODhGNDZEMUVDNEY5QUUwMi9lcnVnclo3STdX
VmVfSG1WZlFNVjZ2ZUYtdXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ7OV5A45ONK6dirgwt36JJEw4aPKWsua8cTWtOiG7jIL4e5eeY73e/xPiT0M
LJw/K30EqHQihTYFR8tVmui7sTvdvPrueta+jkK1jjIwYY2PEAT7XiEbvMVZjWv6
ZBRL7WyRAQ9aBaBjKmORDlYLXYRQZweDzHmTbu2B+FY+X4QP+D8z0SGTOVnYAGwN
E9o94xff7F7Tz3lRjzExmhY9yq/UIsIrpGS5ecQKL6seYoY4mR+DnXgxw2Fvxbg6
20YN8HfOsW+LFT2gajawue54l2+JFXU3Pi3lXkkJmIBnjNAx9KWVBIh2YVuFpPrO
EYdoCqphL2s+UFQb1q8acVRIdw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:00:05 2026 by rpki-client