
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier: dnJMizVPW+83DDib7Koay8NQxJsVx8+V4A+hYR+XVwk=
Subject key identifier: C3:00:70:49:4D:E1:46:57:74:30:47:3F:2C:B4:4B:7B:F1:D0:F6:E6
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial: 01D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number: 01C8
Signing time: Wed 25 Mar 2026 03:01:45 +0000
Manifest this update: Wed 25 Mar 2026 03:01:44 +0000
Manifest next update: Wed 01 Apr 2026 03:01:44 +0000
Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: p9VgFCZ2sIFunn9ODWtUwpD7YbRa+M7TwXQHn24MD4k=)
2: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: e7JyAV4y4Fpitct0PBwFzDuy1w2upP2xYQlut6RJaeU=)
3: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: FJ+repPrmYSlijYjI+MRSa3mhNIvAfvhuyQif/Z3/Zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Validity
Not Before: Mar 25 03:01:44 2026 GMT
Not After : Apr 1 03:01:44 2026 GMT
Subject: CN=69c35018-f356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:72:53:ab:39:8d:30:d2:d0:a0:0f:b9:81:
fe:13:91:51:72:9b:9d:b7:70:6a:22:40:11:b2:e2:
3f:6e:f7:85:cf:c5:63:d5:a7:06:30:34:5a:6b:a9:
b4:ab:70:5c:05:6c:6e:62:aa:1e:b2:55:64:6a:ba:
b5:29:eb:cc:50:4b:ff:3c:14:18:b2:5d:90:d6:5c:
ee:14:2a:fa:c3:54:ba:dd:50:3a:78:38:43:bc:1e:
63:c8:9f:79:a2:8c:6b:37:30:1d:94:4c:f7:b5:34:
a1:dd:6b:03:af:51:bd:fa:cd:77:4a:62:1e:ac:db:
a2:e8:32:10:d6:9e:53:fc:88:bb:39:7e:b9:77:bf:
2a:b3:0e:bb:25:b8:ee:6e:66:82:4a:20:f2:fc:a2:
a1:be:96:83:b6:8a:73:fd:1e:bd:33:1e:2a:ee:80:
74:18:3f:20:5c:fd:52:d6:59:ce:e9:12:81:64:9d:
31:d7:8b:87:84:94:b2:d3:91:ca:89:cf:b9:30:a7:
c5:e4:61:7d:04:1f:5c:a7:7d:29:e9:97:1b:24:2f:
e5:cc:92:14:2d:99:09:31:89:1a:51:fd:8a:0f:bd:
e4:9a:dd:e5:42:a4:cc:8b:5f:fa:0e:c2:27:0b:0e:
e2:53:4f:61:ae:43:fe:84:1b:e8:8f:4b:ce:11:00:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:00:70:49:4D:E1:46:57:74:30:47:3F:2C:B4:4B:7B:F1:D0:F6:E6
X509v3 Authority Key Identifier:
keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:be:05:f1:2f:03:6f:04:8c:9c:0e:c0:70:1c:4b:24:91:54:
06:f6:76:ad:2a:4f:13:76:77:dc:05:dc:78:15:d4:b4:52:d8:
0c:82:72:4b:3b:2f:b6:97:4f:51:ac:d7:1a:c2:ba:34:09:68:
ac:5c:e7:2e:cf:56:d2:98:e3:d4:db:87:eb:f7:df:57:67:c4:
a8:59:ca:54:4c:64:b4:11:88:6d:91:1b:f6:2d:04:b2:53:66:
32:97:28:b4:72:e2:11:6a:a5:63:1d:e5:d6:08:21:6a:46:54:
18:ef:b1:a4:d7:65:0e:f8:3a:cf:c1:fc:f3:cc:7e:a5:9f:ac:
fa:99:ac:f5:9c:16:96:b4:53:e4:98:61:38:8e:ca:4c:55:78:
f0:73:2f:65:1e:83:a6:4f:4c:9d:6e:41:f1:44:6e:2e:05:09:
27:c5:3d:cc:72:d7:53:fd:51:e5:3d:08:69:bc:22:e8:da:55:
97:28:c4:48:95:d6:be:14:61:47:9e:e0:6d:71:64:75:70:c7:
3f:ff:72:04:9a:79:18:3b:63:3a:62:30:0f:37:c5:a6:e9:92:
da:c4:66:e9:31:31:6b:c3:30:51:34:8f:f6:00:af:ba:3c:54:
44:00:88:0c:0e:ec:d0:84:4d:3d:f7:0f:ea:21:08:a4:82:f9:
f1:cf:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:45 2026 by rpki-client