
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier: uzhLXdkYAfBcnJW0YjTdYXFRd4PWR5e2RahRMRnZKVI=
Subject key identifier: 03:3E:81:1E:A3:7E:39:13:18:EB:32:2A:C9:C0:81:2F:E5:83:F4:01
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number: 018B
Signing time: Wed 25 Mar 2026 03:45:48 +0000
Manifest this update: Wed 25 Mar 2026 03:45:47 +0000
Manifest next update: Wed 01 Apr 2026 03:45:47 +0000
Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: K0UjAVc5Dz3Mh7gxpvawQE3XsKahN9oqI+Pm9uwL9sM=)
2: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
3: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Mar 25 03:45:47 2026 GMT
Not After : Apr 1 03:45:47 2026 GMT
Subject: CN=69c35a6b-e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:17:85:e1:b3:d6:f6:d3:15:8d:18:14:52:
c6:f9:a4:9b:55:da:0b:1f:fd:88:9e:8a:45:e1:ae:
cd:ee:76:3f:7d:da:8f:5f:6a:0f:1c:de:b7:b9:14:
a0:f2:e0:59:a4:c6:6f:56:e6:a0:3d:f4:44:76:ad:
f6:50:95:90:54:ac:fd:bd:4b:0d:c3:22:de:94:9b:
3d:f8:e8:b7:7c:70:91:6a:83:5c:ef:d5:54:91:aa:
06:a9:c0:92:82:79:b6:45:2f:8a:d9:1f:48:3f:c8:
f6:d0:46:15:49:25:18:9f:68:d7:0d:e8:e9:25:d9:
5d:bb:33:1b:98:e1:88:42:a8:16:ab:28:f7:7f:dc:
86:78:8a:70:fe:16:ee:92:89:76:e0:16:bd:b8:44:
0a:ba:12:9e:eb:1b:a0:d8:1a:a9:3c:ec:76:96:37:
81:7c:c4:d1:a7:21:48:1c:13:fd:ec:e6:10:f2:68:
b6:d3:c0:ba:fe:ee:77:22:3e:a0:0b:54:42:d6:d2:
44:8b:1d:c0:83:ac:a5:d2:be:54:68:af:e5:7f:8c:
89:0b:37:74:97:8c:da:30:0c:48:26:b4:1d:d9:56:
77:79:e3:c6:c7:89:53:58:47:96:67:a4:5c:66:d6:
e8:92:6e:53:46:b8:59:25:df:fd:87:65:b9:7a:86:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3E:81:1E:A3:7E:39:13:18:EB:32:2A:C9:C0:81:2F:E5:83:F4:01
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:33:f2:36:75:38:a6:d4:03:5e:29:e4:c4:09:0e:3f:50:9c:
34:c8:1f:70:c9:99:f0:d1:ea:5a:64:07:28:69:76:df:9b:cd:
27:a5:ec:5c:9e:6a:50:a6:24:2f:a3:48:3c:64:b5:ea:46:44:
df:ff:7d:a9:a6:73:80:83:30:c0:8e:25:f1:4f:6a:9d:af:79:
67:0d:20:bb:c9:a4:b2:bf:03:46:e2:77:f3:d1:d6:ed:2b:57:
42:5b:69:35:f0:87:cb:06:fe:d2:a0:c7:c8:ad:d9:60:10:19:
3d:f9:5c:5d:c8:ab:d2:45:cb:df:40:8a:ba:5c:49:77:8f:74:
f3:48:6e:8f:74:8f:b8:96:cb:b4:96:a2:43:c4:e8:b9:f4:a8:
cb:fe:c8:df:bb:6b:b6:cc:d3:5f:c5:c9:d5:50:be:07:a4:87:
9a:31:4f:3e:ee:b2:71:a7:4f:d1:bb:9b:e2:5c:28:3d:6f:cd:
85:6f:48:14:66:54:98:65:85:a3:2f:0f:bc:af:77:d8:04:5c:
73:b1:4b:f7:88:b0:db:fd:e1:af:e6:8d:f6:1d:d7:24:93:5b:
c7:57:66:17:9e:47:e5:76:0b:f3:9e:18:23:99:87:25:f1:bf:
81:81:f0:95:4f:a3:e0:62:f9:71:a3:3b:3a:19:2e:a3:24:6e:
3e:10:7a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:03:06 2026 by rpki-client