
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier: 93OlW5YEQQ6J+m8ww1WglZyjal+PqcFcD0uT6+6Vs4g=
Subject key identifier: 54:38:72:C1:F5:74:CC:68:33:C8:64:44:B1:98:F7:55:C2:2E:18:25
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial: 033E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number: 0338
Signing time: Thu 23 Jul 2026 01:59:44 +0000
Manifest this update: Thu 23 Jul 2026 01:59:43 +0000
Manifest next update: Thu 30 Jul 2026 01:59:43 +0000
Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: JbDdTsyNcIzvwZ3+22s5YXgrtkjs9hyIFoKghZIngfE=)
2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: kTT7eEgt9uaGhMCIrcNR40b0329psOBKWZcG/FsxbWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830 (0x33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Validity
Not Before: Jul 23 01:59:43 2026 GMT
Not After : Jul 30 01:59:43 2026 GMT
Subject: CN=6a617590-3a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:e4:ce:1e:c8:13:d3:03:e4:37:6a:3b:3d:
cd:0f:7a:67:53:66:02:45:6a:fb:26:96:75:0d:2f:
e3:98:8e:26:a2:d3:f9:b1:1e:2d:3a:6d:d4:29:7b:
39:a7:00:f2:af:5f:cd:56:bf:b4:39:b2:ce:7f:72:
83:15:ba:9b:50:68:4d:fe:49:fe:b6:4d:0d:23:a0:
7d:64:80:fd:05:bb:d2:bf:ce:44:b8:02:25:8f:59:
9f:80:b1:f8:b3:ec:8b:2c:16:05:ae:de:7e:ff:31:
d4:12:74:d8:54:fd:cf:ce:dc:46:e6:9b:c1:91:61:
38:1a:b6:f3:80:f4:26:e3:42:ca:8a:16:e3:c6:13:
3d:0d:64:e1:4c:d0:2c:22:89:40:b7:62:67:c6:81:
37:8f:5e:c6:b1:dc:98:20:b0:93:01:13:36:3a:11:
c1:25:11:98:f3:c7:f7:04:ea:e7:fb:c2:ac:42:0c:
d8:4d:e7:a0:f0:e0:81:f4:93:1b:90:ef:d3:d7:53:
65:b3:3a:84:63:81:7d:7c:89:fc:5b:cc:d1:36:2a:
48:59:70:19:d8:a3:f5:ec:80:ba:af:6d:d8:e3:2e:
07:38:20:a2:53:09:d9:ff:83:e0:73:6e:65:46:63:
04:3e:ca:dc:5b:31:f9:a4:f5:8e:52:63:c4:48:99:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:38:72:C1:F5:74:CC:68:33:C8:64:44:B1:98:F7:55:C2:2E:18:25
X509v3 Authority Key Identifier:
keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:87:d4:40:8a:cd:cc:c5:6d:a2:79:01:c2:a5:68:5e:c5:
84:24:a4:c0:83:d7:66:a7:17:4b:06:53:27:9a:21:26:95:d8:
b2:a6:ca:7d:d4:5e:f8:ea:16:ea:77:ed:63:30:2a:37:47:0d:
ca:dd:f3:2f:33:0e:15:79:5c:d4:3d:1b:e6:cd:f8:0d:d5:02:
4d:4c:6e:c8:7e:8d:b0:21:0e:9f:53:03:cb:67:46:72:9e:ad:
7f:c6:16:8c:52:fd:0e:ff:45:c4:4e:73:f6:ce:5f:f3:3f:ee:
89:74:0a:71:36:26:4b:1b:6f:5e:a5:5f:08:a8:97:b6:35:f6:
18:da:a5:7e:e2:bc:fe:25:e8:8f:d7:59:58:bd:b2:e8:41:ff:
00:6a:c9:f7:56:7f:8c:f7:6a:55:70:73:bb:74:3c:42:00:d9:
45:2e:c2:77:bc:75:70:fa:2b:cc:fa:51:20:e8:5c:fb:33:17:
ed:89:fe:1e:60:7f:25:79:1b:53:68:d5:40:c8:cc:36:c4:b7:
d4:85:9b:17:a3:0d:d9:7d:41:3d:73:a2:39:31:1d:a8:d7:ca:
95:23:d8:3d:56:6f:d3:62:ce:81:ca:d5:3a:8a:05:49:9c:b5:
d7:63:f3:dd:e5:26:09:6a:f6:85:ec:c0:f8:d3:6b:a2:c0:d4:
99:8b:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:44 2026 by rpki-client