
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier: 0Zf4+biorLLG82viVr7IJAvzNwqiYn1vasLtwECQIgM=
Subject key identifier: 40:3C:F4:E7:C0:23:BA:DE:DE:0D:93:47:1A:62:8B:08:C2:B0:9C:A0
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number: 0227
Signing time: Fri 25 Sep 2026 02:48:41 +0000
Manifest this update: Fri 25 Sep 2026 02:48:40 +0000
Manifest next update: Fri 02 Oct 2026 02:48:40 +0000
Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: OTQVnbnYxzcxEbdfOdWh1D2WQfsSjjCQldJQKz6T5WU=)
2: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: q+XSi1s238dMGhuwUgaHufUBQNrf/5iPlR0JXsxUO7Y=)
3: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: P99mvWZlY8P1geIzs7ku9n4rnRGbQWllNHbE+mokqck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Validity
Not Before: Sep 25 02:48:40 2026 GMT
Not After : Oct 2 02:48:40 2026 GMT
Subject: CN=6ab5e109-0177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:9a:b6:ea:43:0a:dd:75:17:02:ce:64:38:
e3:15:d3:81:fb:ae:90:43:56:e6:6f:f4:a6:50:b6:
f3:d5:87:d1:03:0c:6f:36:67:b9:15:b9:89:fc:bd:
e7:9b:0e:cc:3c:ad:65:4f:4f:20:9b:9c:19:40:20:
d8:88:81:72:00:aa:82:5e:cc:68:8a:94:f6:a5:2a:
73:79:b8:92:7b:75:df:3b:77:ca:16:98:96:ca:88:
51:ae:08:6d:84:49:39:29:1a:9c:50:35:ba:a4:13:
83:09:ec:9f:9a:b1:07:a5:ce:67:8e:f7:dd:ea:7b:
b6:fc:46:4f:de:6f:72:dc:34:c3:06:1e:95:85:6b:
5b:dc:7b:ee:f7:e6:69:49:ff:2f:1e:78:67:ec:c0:
39:cf:e6:e4:b4:a6:1f:28:8b:bb:69:c2:75:c6:21:
d8:de:57:8c:f3:46:fa:e2:19:36:fb:fd:bb:2a:dd:
bb:e8:5a:2c:02:5b:22:02:d3:25:4d:15:55:64:ef:
ea:a8:2f:00:49:c9:28:0a:70:f8:38:09:23:0c:96:
a2:1b:56:c3:dc:b4:ee:cd:cc:b7:14:19:60:ed:3b:
a0:11:be:c4:60:b3:2f:07:34:53:34:f5:26:b9:41:
f5:84:ce:66:58:37:33:01:e6:bc:b1:09:27:44:3b:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3C:F4:E7:C0:23:BA:DE:DE:0D:93:47:1A:62:8B:08:C2:B0:9C:A0
X509v3 Authority Key Identifier:
keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:64:18:ce:e7:b2:4d:48:3f:6a:60:bf:7b:17:91:ca:bd:52:
92:94:d6:39:8c:34:23:ba:b2:ab:a7:15:bd:2f:3c:c0:95:a4:
8c:2a:7a:8d:44:a8:f0:eb:e5:46:96:d7:f0:00:fe:9f:7f:13:
4e:06:f5:fd:61:37:c8:c5:07:1c:73:f4:83:73:67:41:4d:1a:
bd:ca:7b:c6:b1:ad:bc:95:1b:6e:48:66:6e:cc:42:68:da:fe:
1c:39:6a:f9:70:7c:7a:65:e5:83:25:cc:9c:54:ce:25:d4:96:
55:c7:76:62:41:1a:1e:23:29:c9:89:54:97:ab:2d:84:63:c3:
52:54:43:7e:9e:9b:4b:24:d1:46:f7:be:c3:4a:24:39:ee:47:
81:6d:e8:cf:87:41:9d:72:fd:d0:d8:29:23:d3:a4:c6:e7:9c:
be:5f:81:a2:0e:f2:02:a5:f6:69:ca:91:f8:05:a3:a8:43:12:
4c:9c:0c:44:ae:ff:68:6c:0c:d8:a1:ca:85:c5:bb:1b:80:4b:
30:ae:a9:68:a6:c1:d6:f2:d5:ef:c6:6e:90:d2:b9:bc:94:d8:
23:8f:3e:ab:9c:e6:79:28:ff:ad:8e:10:dc:a9:93:9d:11:03:
b7:0a:9d:b7:31:5b:c9:37:f9:22:04:a6:c4:61:6f:9e:7a:65:
76:a0:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:08:54 2026 by rpki-client