
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier: DJIJlF1uYEkdfs/aIw8W0HAU7B74QCvC659WvzNPHfA=
Subject key identifier: 54:98:A9:F6:77:F7:A6:23:DD:1D:BB:E8:02:42:1C:BC:42:40:9C:C8
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number: 01E8
Signing time: Fri 25 Sep 2026 03:31:12 +0000
Manifest this update: Fri 25 Sep 2026 03:31:11 +0000
Manifest next update: Fri 02 Oct 2026 03:31:11 +0000
Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: 7viA3SJYhF5NL9QFN4C9JsVrq4uiA8pvnem497axql8=)
2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Sep 25 03:31:11 2026 GMT
Not After : Oct 2 03:31:11 2026 GMT
Subject: CN=6ab5eb00-febc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:43:17:ef:1f:65:f7:62:bc:33:0c:28:83:
09:e0:24:d3:a4:6f:43:34:ae:fd:0e:d2:2e:85:5f:
d1:14:09:b5:a4:a3:5e:19:0f:a6:ec:db:a6:89:f6:
5c:f6:d0:b9:b4:0c:b7:57:85:f1:5f:18:8e:a5:81:
c7:10:3b:25:0d:17:b1:c1:e3:e8:7b:40:40:85:ba:
a3:a5:63:48:56:32:51:56:99:ad:a8:6f:36:1b:00:
96:dc:03:8c:3a:62:a0:99:c9:27:18:df:a8:62:71:
ea:9d:c2:f7:ac:af:5d:26:74:42:24:cd:ad:23:8b:
5d:bc:1d:55:bc:4b:20:1e:c9:61:a4:8b:61:38:07:
d0:c2:37:2e:48:31:cf:e6:20:53:67:50:f7:45:e7:
40:c1:e4:58:d7:67:da:6e:0e:71:70:98:c5:df:6f:
cb:2e:8a:28:06:d9:50:4b:0b:71:38:84:c7:e3:2a:
09:ab:1f:22:ef:9c:e5:72:7e:23:bf:32:b2:a7:c3:
75:77:af:a4:ac:3c:2a:61:50:53:ca:70:34:ca:a7:
b4:c2:4f:fc:c5:61:c0:72:00:92:78:c7:f1:67:2d:
ad:40:cb:e8:01:1e:b9:c9:d3:7a:36:38:28:c9:0f:
16:70:bb:4a:bf:07:da:03:17:23:45:9b:da:56:18:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:98:A9:F6:77:F7:A6:23:DD:1D:BB:E8:02:42:1C:BC:42:40:9C:C8
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:9d:5d:ba:c5:b1:32:aa:22:ff:93:e1:a0:fa:99:c6:6b:e2:
a5:86:07:88:ae:c8:2c:74:0e:66:9b:d6:ee:d3:21:f0:76:97:
49:72:07:ee:c4:20:af:dd:09:70:40:66:6d:06:15:fb:b7:54:
ec:d2:58:39:83:bc:08:de:8d:77:e2:7c:dd:c9:52:7f:78:27:
d0:9b:90:e4:cd:0f:56:f2:7a:c6:13:d0:51:9b:49:99:e4:a4:
d4:9e:b0:16:86:4d:81:1f:e2:dc:64:de:b8:f6:42:a3:43:04:
b3:e0:8c:33:fd:c7:a1:28:74:c3:cd:4c:6d:d4:15:e7:34:39:
c8:f0:d4:cc:0c:98:a8:d6:99:d1:cf:ce:b1:e3:c0:0a:94:4e:
1d:46:28:20:ae:ba:83:b6:70:17:81:4e:3a:8e:32:33:54:d8:
2d:c2:d2:8f:e0:1f:b1:ef:a2:22:34:dd:4f:11:7f:d6:0c:cd:
92:e4:af:42:da:28:60:4e:c5:a3:39:54:7e:7e:6a:32:10:bc:
03:83:c9:1b:4c:12:7f:76:20:fc:37:a7:db:f4:31:43:b9:91:
c8:ac:74:29:65:67:9e:66:13:03:cd:2a:c0:89:e3:c4:b4:93:
85:e7:13:4f:99:c6:06:de:04:0c:46:b4:10:34:70:b4:bc:1e:
f7:15:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:15:04 2026 by rpki-client