
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json)
Hash identifier: vXxsashQvlDyeVPEMm/UTuA3TzJZ6VicRxAh4AfRl4c=
Subject key identifier: 2A:79:AD:6D:00:E7:DB:5D:FB:4B:F2:9C:58:34:4E:1F:E8:F4:81:FF
Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
Manifest number: 0D16
Signing time: Thu 24 Sep 2026 22:05:57 +0000
Manifest this update: Thu 24 Sep 2026 22:05:56 +0000
Manifest next update: Thu 01 Oct 2026 22:05:56 +0000
Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: bkbNbKyBp96U6aEe+8NY52Pi94VWUkLx3NQuOUZSBPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 22:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Validity
Not Before: Sep 24 22:05:56 2026 GMT
Not After : Oct 1 22:05:56 2026 GMT
Subject: CN=6ab59ec5-5711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:ad:d8:dc:a2:63:06:7f:f0:0a:54:03:c6:
5e:45:44:7e:4b:c4:fc:47:9c:c5:ec:06:94:60:ac:
c9:62:c9:86:e1:75:ad:7b:78:51:49:ea:41:95:82:
c6:20:84:97:34:2c:91:6d:fe:54:80:bc:43:f2:ec:
92:8b:3b:4d:b0:ac:26:3d:3a:62:29:8f:da:3a:f8:
02:39:95:97:b0:d1:4e:c3:92:f1:0b:c9:d7:f2:b9:
04:97:aa:76:ed:04:d6:1d:27:fe:0c:38:ac:d6:a0:
20:18:ed:94:3c:26:47:cc:20:d0:97:bd:8a:b0:38:
a9:df:50:ba:61:f3:7f:c6:36:41:ad:df:cc:28:a6:
44:4a:0a:46:44:2d:f1:27:fe:7b:15:42:f5:dc:d6:
66:61:bb:3f:bf:63:fd:88:1c:af:b0:60:5a:ad:ff:
3a:64:b7:ed:c7:f0:eb:fb:bd:31:6d:e9:08:25:63:
ed:ea:a7:04:3a:e7:8d:fb:f7:c9:1e:8f:de:73:4a:
af:bc:e5:f0:6c:23:ff:eb:2a:77:33:a8:2d:42:83:
63:d2:89:b8:43:11:ae:20:5b:e0:72:11:a1:9b:11:
eb:e4:e0:9f:22:ef:8d:28:b2:5c:c5:6e:27:ac:e5:
5c:32:18:2c:7c:d0:0b:0e:08:a9:bf:80:cb:d4:42:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:79:AD:6D:00:E7:DB:5D:FB:4B:F2:9C:58:34:4E:1F:E8:F4:81:FF
X509v3 Authority Key Identifier:
keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:8d:1f:73:b6:a8:8e:08:6b:90:1d:8e:47:19:42:4c:71:5f:
34:f6:b1:8a:f0:65:2b:03:0a:01:a8:da:ef:66:f4:37:62:d5:
81:73:c4:ef:9e:64:29:db:fc:51:c0:20:53:e7:b4:d5:41:de:
ab:18:ed:27:ef:b2:8e:c5:10:1d:b4:fd:58:0c:40:9d:5b:b2:
fe:8b:00:7d:9e:43:eb:92:39:71:79:ee:2e:d5:f9:cd:ef:fa:
c1:f3:77:b0:d4:d9:05:07:95:06:d6:96:2d:06:d1:7b:b3:a1:
df:9e:75:cf:42:16:17:a3:bd:34:a9:64:0e:c9:a7:54:58:1c:
e6:d1:42:fd:9d:c1:0c:0c:de:5b:f7:6a:20:89:8d:f7:8a:de:
77:20:ac:6e:65:54:7e:af:0a:d0:98:6c:d9:d7:3e:3b:1b:50:
42:54:3c:8c:0f:c6:45:4b:67:8f:87:1e:d0:19:e3:3e:dd:50:
b2:9d:95:b2:37:bf:61:7a:dd:87:7b:b6:b0:07:c3:fc:a8:ab:
9b:9a:d2:09:fb:13:da:71:3b:2a:55:a1:ad:4b:aa:98:27:f2:
3d:b8:a5:a5:5e:41:39:bd:1a:6f:07:42:86:f6:f9:76:74:6b:
a2:74:90:61:56:fe:38:14:1a:c2:09:a7:1c:e3:bb:f8:0a:00:
63:7f:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:46:54 2026 by rpki-client