
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier: OzIBck4QEX2+XO1Q2LvQmWyshwcF3bN/NI9HLIMZdSs=
Subject key identifier: 4F:02:AB:D6:50:EA:69:12:98:1C:D5:26:EC:28:67:9E:A7:A6:9A:09
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number: 01C7
Signing time: Thu 23 Jul 2026 05:10:46 +0000
Manifest this update: Thu 23 Jul 2026 05:10:45 +0000
Manifest next update: Thu 30 Jul 2026 05:10:45 +0000
Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: piZKiejEQbgDEMngh0hSXYVYqG1vbPxNXAJnVcXeG3M=)
2: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
3: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Jul 23 05:10:45 2026 GMT
Not After : Jul 30 05:10:45 2026 GMT
Subject: CN=6a61a256-0433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:88:61:fa:64:8b:14:da:d1:f8:ef:49:a5:51:
b6:22:46:07:7f:67:4f:23:f1:7e:39:db:93:44:5f:
91:6a:2e:29:31:a7:4f:21:1c:43:61:22:db:a4:7e:
fe:cb:d2:63:67:97:46:b3:4e:13:e7:e5:e5:c6:6f:
9f:4a:a0:9c:18:ea:fe:cc:0d:19:ab:f3:97:d0:8b:
de:c4:10:46:10:7c:23:3f:10:15:8a:03:10:f3:37:
d3:d1:90:c4:54:d1:a4:49:cc:f7:1c:21:64:41:f7:
50:ca:54:23:0e:64:72:d6:bf:d0:53:c7:5b:54:4d:
51:2b:b3:74:b2:c8:13:8b:c2:99:e7:21:61:e0:50:
68:f4:97:99:b5:59:7f:0d:ed:9d:24:15:51:98:74:
8d:0e:6f:fa:9a:44:f4:73:5a:60:2c:54:02:84:51:
33:e5:e8:9e:48:ec:ba:a9:c5:2e:c1:07:02:28:1c:
0a:9f:12:22:99:83:33:2a:cc:7d:e0:b6:07:4f:f1:
33:b0:fd:50:55:07:c8:21:ae:e5:96:76:de:71:dc:
a3:f8:70:5b:ef:34:f9:f8:c9:7a:35:54:4b:f1:a3:
5c:f2:d7:f3:a0:63:d3:cf:c4:2a:46:3c:e7:8a:e9:
79:78:ac:78:a2:11:74:8a:9d:ad:dd:7f:1d:97:cb:
61:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:02:AB:D6:50:EA:69:12:98:1C:D5:26:EC:28:67:9E:A7:A6:9A:09
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:81:be:c3:98:8c:38:61:f4:cd:ef:0d:d0:9b:b4:21:31:92:
e0:33:f9:59:42:ce:15:8b:64:5a:de:97:6e:97:4c:ab:2a:f2:
73:05:bf:4f:fc:fb:9c:6a:f8:c8:ec:a5:41:0d:4f:cd:13:bf:
a3:fd:a1:fa:7b:9d:96:2b:f8:73:ae:cc:c9:44:50:4a:b9:78:
dd:2e:7d:62:42:a9:5e:68:f4:91:01:d7:f0:11:2e:0d:dd:62:
e0:b3:7c:81:83:c8:07:9e:12:19:00:89:c1:7d:04:39:1f:2d:
8a:11:c2:b0:a7:8b:66:99:6b:89:22:d0:19:43:8e:23:b1:dd:
8f:9b:6d:be:5e:fb:17:4a:7f:4c:34:03:b7:fe:1c:fd:c2:23:
68:5e:96:ab:85:ad:93:f1:72:5e:c6:72:9d:c1:f8:ca:5d:a7:
ce:4a:fc:d9:0b:ce:7f:46:86:b5:01:a6:90:0d:d9:28:2c:a5:
18:21:14:3e:60:6f:39:30:20:eb:e1:1b:18:80:8b:f9:82:fb:
02:56:b8:2c:4e:31:65:b8:c8:41:3b:2a:54:1b:c9:fc:45:f4:
24:77:be:22:fe:9e:3c:17:a2:20:43:f2:4e:ce:f4:ff:65:90:
83:18:7b:44:24:f5:73:86:ce:c3:05:4a:e8:6b:ad:c0:14:fa:
cf:a2:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:37 2026 by rpki-client