
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json)
Hash identifier: bHrRWU83tr+d2+9LaLJ1YXtAGfxz25pun5QP3LZpqb8=
Subject key identifier: 90:02:79:14:8F:17:22:47:E5:52:9A:68:E0:2E:12:62:8D:FF:29:01
Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
Manifest number: 0242
Signing time: Fri 25 Sep 2026 02:34:10 +0000
Manifest this update: Fri 25 Sep 2026 02:34:10 +0000
Manifest next update: Fri 02 Oct 2026 02:34:10 +0000
Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: kYER3W8rittxS9zhs/LGiJZzlHza/0r9/UE4mh/tiKw=)
2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: hqi4EfEByf7DRDdVKKEhuybFmu2vxbKyTHgj9BM/DRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Validity
Not Before: Sep 25 02:34:10 2026 GMT
Not After : Oct 2 02:34:10 2026 GMT
Subject: CN=6ab5dda2-8927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:21:8c:21:ce:83:9a:31:a5:0f:2f:07:cc:
08:8e:7d:0d:ed:4b:78:79:9e:91:64:f3:01:a2:cd:
31:de:3d:b6:13:72:09:b0:66:1f:a2:af:1c:74:a7:
6d:02:fb:0c:6f:b5:f5:cc:af:57:f9:c6:b4:64:f4:
91:03:ee:0d:50:b3:20:46:31:3f:15:32:cb:15:26:
81:09:fa:93:29:d9:be:af:fb:c9:e8:ca:db:2f:e6:
b1:28:81:f3:b1:18:68:b1:a5:5f:31:ce:da:7f:42:
7e:db:d1:af:77:43:b7:54:f5:66:1e:21:15:18:87:
06:67:7d:4f:0d:a1:b2:f9:b3:71:f2:f8:6d:85:05:
b9:8d:9b:65:c2:e9:d0:2d:09:6a:6c:13:1b:da:1a:
9b:49:79:59:1d:e8:ea:15:83:39:78:20:4d:06:ec:
d7:5b:e3:2f:d6:ff:4b:c0:83:36:e1:90:24:05:5c:
46:e5:9c:a5:c7:01:35:b2:d9:91:8d:cf:af:f9:02:
62:95:79:83:b0:33:29:3a:8a:7d:7f:5f:84:9f:d9:
02:c1:4b:86:35:4e:7b:d0:7a:39:65:a7:e9:39:03:
0f:d4:6f:c9:ba:7e:d5:20:01:98:d6:86:f4:55:bc:
fc:c6:fd:e5:02:88:90:4a:d9:52:c7:23:9c:7e:14:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:79:14:8F:17:22:47:E5:52:9A:68:E0:2E:12:62:8D:FF:29:01
X509v3 Authority Key Identifier:
keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:02:c3:b0:5c:a7:35:18:51:e1:68:7d:53:46:fa:e6:7f:7d:
93:33:b8:2f:79:90:d0:a8:22:ac:f2:25:0b:1b:03:48:bd:d1:
f0:32:33:2b:83:ba:54:59:e2:6e:75:c6:1b:d0:3b:dd:21:a4:
6e:2a:44:95:6e:66:0b:81:3d:cc:98:aa:1a:51:6a:ea:c4:22:
05:27:bb:f7:23:f9:bc:0f:ba:e4:a8:00:0a:4e:35:fa:7f:b2:
eb:eb:89:18:9f:d6:09:40:02:65:1e:89:09:e6:31:26:c5:37:
90:f3:45:2e:89:db:d6:04:7e:84:c1:c3:75:28:96:ba:a7:a6:
e8:ea:4e:a6:bc:db:06:1f:51:6c:92:8f:06:db:f1:bd:46:fa:
00:d1:59:ba:6b:ee:78:b6:09:4d:a5:2f:cb:87:f3:2c:30:d0:
34:64:35:2b:18:8a:2d:a8:b0:6f:70:39:d7:43:aa:05:a8:ae:
0f:61:eb:ca:44:7f:c7:fb:e4:b0:08:b5:bf:36:02:82:03:98:
e3:c0:ba:09:e1:a5:c7:44:52:ba:23:02:33:51:82:9d:68:e0:
87:24:de:8e:73:21:cf:b0:23:50:f0:97:4f:9d:e9:22:1d:d7:
8d:85:27:09:23:34:3b:f1:b8:a8:d8:bf:55:f5:4e:13:a8:d3:
fd:58:bc:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE
MTAxOUY4QTMwHhcNMjYwOTI1MDIzNDEwWhcNMjYxMDAyMDIzNDEwWjAYMRYwFAYD
VQQDEw02YWI1ZGRhMi04OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAorchjCHOg5oxpQ8vB8wIjn0N7Ut4eZ6RZPMBos0x3j22E3IJsGYfoq8cdKdt
AvsMb7X1zK9X+ca0ZPSRA+4NULMgRjE/FTLLFSaBCfqTKdm+r/vJ6MrbL+axKIHz
sRhosaVfMc7af0J+29Gvd0O3VPVmHiEVGIcGZ31PDaGy+bNx8vhthQW5jZtlwunQ
LQlqbBMb2hqbSXlZHejqFYM5eCBNBuzXW+Mv1v9LwIM24ZAkBVxG5ZylxwE1stmR
jc+v+QJilXmDsDMpOop9f1+En9kCwUuGNU570Ho5ZafpOQMP1G/Jun7VIAGY1ob0
Vbz8xv3lAoiQStlSxyOcfhQriQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJACeRSP
FyJH5VKaaOAuEmKN/ykBMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF
MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot
S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D
bG5GTVU2V2hLQV9SQVotS00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYgLDsFynNRhR4Wh9U0b65n99kzO4L3mQ0KgirPIlCxsDSL3R8DIzK4O6VFni
bnXGG9A73SGkbipElW5mC4E9zJiqGlFq6sQiBSe79yP5vA+65KgACk41+n+y6+uJ
GJ/WCUACZR6JCeYxJsU3kPNFLonb1gR+hMHDdSiWuqem6OpOprzbBh9RbJKPBtvx
vUb6ANFZumvueLYJTaUvy4fzLDDQNGQ1KxiKLaiwb3A510OqBaiuD2HrykR/x/vk
sAi1vzYCggOY48C6CeGlx0RSuiMCM1GCnWjghyTejnMhz7AjUPCXT53pIh3XjYUn
CSM0O/G4qNi/VfVOE6jT/Vi8Xw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:19:48 2026 by rpki-client