
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier: TuzCGX9n+Qx54gwHdn6urJf87gr7iEmNKW1X1ahXdvg=
Subject key identifier: B7:39:1A:A5:EA:1D:52:AA:68:42:5B:7E:4A:8F:59:22:29:DD:8A:49
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial: 0362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number: 035C
Signing time: Thu 01 Oct 2026 01:19:38 +0000
Manifest this update: Thu 01 Oct 2026 01:19:37 +0000
Manifest next update: Thu 08 Oct 2026 01:19:37 +0000
Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: H2q9w3IGd9mUlCVGRWr1OFJxcNvSfP385Bai7c2HLxE=)
2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: kTT7eEgt9uaGhMCIrcNR40b0329psOBKWZcG/FsxbWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 01:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Validity
Not Before: Oct 1 01:19:37 2026 GMT
Not After : Oct 8 01:19:37 2026 GMT
Subject: CN=6abdb529-af92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:f3:03:a7:54:74:ed:37:d9:7e:5b:53:af:
25:5f:a1:b5:d7:14:94:d6:2f:9b:ec:38:74:d5:1a:
86:26:0a:d6:28:1f:17:73:02:10:cf:e0:fb:e8:18:
fe:46:8f:a8:d4:fa:1f:a7:18:c5:f9:62:87:5f:e2:
3c:3d:22:57:b8:2f:4e:2f:cc:8a:c1:c7:08:7a:64:
28:ee:48:8c:2f:f2:9f:5e:ed:c7:14:92:09:90:cd:
8c:c3:3a:53:db:13:b1:e5:4b:05:72:ea:4c:da:7c:
73:f4:2c:37:0f:b5:f6:83:39:b0:a0:64:6a:3c:f4:
48:71:79:cc:96:d9:e6:12:84:a9:f4:70:e4:83:c3:
e9:63:88:e8:45:86:19:35:1e:1b:8a:58:3b:ef:b3:
4c:5c:68:01:41:f0:4d:e9:c6:db:d0:b3:07:46:88:
79:ca:ac:13:75:b9:81:96:27:d8:a6:08:6b:d3:34:
5e:97:40:6e:7d:c3:95:b7:69:d9:ed:0c:9d:b2:0a:
c2:83:48:17:d1:db:48:46:64:aa:77:5f:b0:5a:d4:
b6:43:55:d6:52:d8:f2:d2:70:aa:45:74:d0:76:d2:
4c:64:86:fd:ea:a6:6f:6a:7e:17:82:6f:fe:28:17:
3f:11:5f:38:69:46:da:ed:d1:c9:f6:b2:52:6d:75:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:1A:A5:EA:1D:52:AA:68:42:5B:7E:4A:8F:59:22:29:DD:8A:49
X509v3 Authority Key Identifier:
keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:78:37:19:73:b8:84:18:b7:b1:58:fb:da:3b:b7:8f:73:b2:
44:b7:28:17:0c:da:15:ed:44:37:81:53:f7:29:51:d2:d3:28:
6f:1f:c6:65:c6:9a:4a:72:19:bf:52:a6:a5:f9:dd:19:16:10:
fa:88:3d:bb:a5:b3:5e:fd:39:ac:a4:16:a5:fb:4b:f1:ae:62:
33:e4:3e:f9:fd:fb:63:ea:fa:d6:61:69:7e:08:52:64:96:ab:
64:3d:92:37:0d:e9:f9:c1:cd:ff:76:77:b6:f8:0b:d9:25:46:
b5:d4:5f:40:df:a4:24:06:5a:b5:cc:89:2d:d6:2e:3c:33:08:
2a:11:e1:00:63:d6:1d:52:d5:9f:bd:ce:24:fc:2d:b1:09:d5:
5b:e7:af:15:db:1b:1b:87:b7:3d:e3:24:cd:55:36:01:a1:66:
2a:5f:d3:c1:bd:72:3c:f0:94:fe:2a:ae:35:f6:1c:c9:6e:f1:
4f:95:bd:95:28:b7:b9:e0:ac:f9:d1:63:bc:d9:9c:10:d0:90:
3b:a7:d5:dc:ae:40:07:1d:a0:aa:37:00:bd:2b:a4:6a:d1:f4:
81:7a:dc:26:08:28:40:f4:29:b0:ae:41:08:11:c5:2b:07:e0:
d2:db:fa:5b:95:b6:6e:32:af:6a:23:a6:24:95:79:89:52:34:
4f:45:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:40:19 2026 by rpki-client