
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json)
Hash identifier: 2a4jUK392heN0mtfD3Zn7f6qXqBL3rGWp34yBqt+//g=
Subject key identifier: D8:88:53:D2:D9:0E:3D:45:F0:9E:36:A5:26:90:8B:20:65:A5:BA:86
Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
Manifest number: 018D
Signing time: Wed 23 Sep 2026 04:41:56 +0000
Manifest this update: Wed 23 Sep 2026 04:41:55 +0000
Manifest next update: Wed 30 Sep 2026 04:41:55 +0000
Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: x47yx0uh6rjRctCuLVQG5v/+LmuAuQ6U6ONkiNcOHhg=)
2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: 9p5HLgmT1CdIHAjr4jafHOekxC05g0RlL/udgHGc7xY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl
rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Validity
Not Before: Sep 23 04:41:55 2026 GMT
Not After : Sep 30 04:41:55 2026 GMT
Subject: CN=6ab35893-1b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:67:c5:29:52:8a:4a:1c:68:ea:e6:c2:b6:
70:cc:a1:ba:af:d6:54:7c:a3:7a:d1:9c:03:23:0c:
fe:cd:b3:2f:f2:d6:8d:76:6e:2d:5f:35:81:99:cf:
c1:29:e5:93:ee:07:f3:ab:cf:c2:3f:50:6a:ab:46:
58:ff:51:0c:d9:63:73:1e:ba:07:22:b1:18:4e:3f:
c0:c6:fb:dd:61:aa:47:1c:5e:34:5c:0b:0a:b7:c3:
fb:e9:22:39:5a:64:e2:d6:56:34:a8:38:54:25:33:
b9:7e:18:bd:57:70:e2:9c:82:58:97:17:6b:50:06:
7e:70:0e:f2:71:88:76:e1:f2:8f:ce:4b:ad:98:7e:
88:a0:0a:a9:8d:25:6c:6f:48:43:b0:3e:68:2f:a6:
09:b7:96:29:49:a8:e2:ac:21:37:87:e8:e7:b3:17:
82:84:a5:82:5a:28:b0:b0:12:69:d7:91:10:41:55:
45:4b:af:3d:fa:19:29:7b:8d:4a:fd:0c:ac:b3:41:
71:aa:90:62:31:84:c3:2f:a2:54:e7:2c:8b:17:de:
1b:d7:0e:6c:55:6e:a8:8d:0d:0f:34:d4:b7:f0:c0:
90:16:9d:ae:8a:45:31:1a:12:bc:01:dd:e1:c8:e5:
84:db:fa:c6:37:be:6b:8a:99:46:47:d2:00:8a:a5:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:53:D2:D9:0E:3D:45:F0:9E:36:A5:26:90:8B:20:65:A5:BA:86
X509v3 Authority Key Identifier:
keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:d3:14:ab:51:ac:12:74:b7:e2:f8:b3:0b:12:ad:e9:30:
11:0d:02:e8:bd:79:5a:67:db:9a:d9:20:60:b2:8d:7b:9e:58:
ad:69:38:dd:b0:38:46:61:e4:d2:48:a2:ab:fc:41:d3:55:71:
1c:8e:cb:85:6c:90:2b:a7:72:15:0b:06:08:33:7e:df:9a:29:
83:4a:e8:aa:6e:10:c4:69:f8:fc:96:8f:8a:cc:d3:b0:ad:76:
e4:f7:f2:37:e6:27:8a:dc:e1:3c:39:62:01:b6:78:5d:66:78:
6c:b4:18:84:a6:9c:1f:46:27:a7:87:a0:c7:46:c9:41:33:1d:
03:6e:d8:8e:d9:ec:b5:9e:71:ea:93:6e:4c:07:f2:cc:2a:97:
a1:9e:ec:24:1d:ea:e8:06:7c:4b:f6:eb:c5:8e:e3:b5:de:fc:
ed:ff:bf:20:0b:26:71:ff:ca:4b:c2:8c:00:fd:e8:94:a0:0c:
a9:88:39:b0:1d:9a:e5:67:52:72:2b:10:10:b3:e0:b2:f0:73:
36:fd:ef:e0:a9:2b:28:ed:e1:5d:06:c0:ab:9a:f8:e9:35:17:
23:59:7b:76:c5:20:37:3f:d2:38:ac:a2:3c:6a:36:f1:87:8e:
0f:8a:2b:ef:56:2c:34:9a:13:93:1d:61:3d:cf:99:e7:e0:13:
f6:87:39:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3
RDhDRkE4RUUwHhcNMjYwOTIzMDQ0MTU1WhcNMjYwOTMwMDQ0MTU1WjAYMRYwFAYD
VQQDEw02YWIzNTg5My0xYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmnFnxSlSikocaOrmwrZwzKG6r9ZUfKN60ZwDIwz+zbMv8taNdm4tXzWBmc/B
KeWT7gfzq8/CP1Bqq0ZY/1EM2WNzHroHIrEYTj/AxvvdYapHHF40XAsKt8P76SI5
WmTi1lY0qDhUJTO5fhi9V3DinIJYlxdrUAZ+cA7ycYh24fKPzkutmH6IoAqpjSVs
b0hDsD5oL6YJt5YpSajirCE3h+jnsxeChKWCWiiwsBJp15EQQVVFS689+hkpe41K
/Qyss0FxqpBiMYTDL6JU5yyLF94b1w5sVW6ojQ0PNNS38MCQFp2uikUxGhK8Ad3h
yOWE2/rGN75riplGR9IAiqV9TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNiIU9LZ
Dj1F8J42pSaQiyBlpbqGMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC
Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf
NUhXVFR5bDR3MkY5alBxTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKYTTFKtRrBJ0t+L4swsSrekwEQ0C6L15WmfbmtkgYLKNe55YrWk43bA4RmHk
0kiiq/xB01VxHI7LhWyQK6dyFQsGCDN+35opg0roqm4QxGn4/JaPiszTsK125Pfy
N+YnitzhPDliAbZ4XWZ4bLQYhKacH0Ynp4egx0bJQTMdA27YjtnstZ5x6pNuTAfy
zCqXoZ7sJB3q6AZ8S/brxY7jtd787f+/IAsmcf/KS8KMAP3olKAMqYg5sB2a5WdS
cisQELPgsvBzNv3v4KkrKO3hXQbAq5r46TUXI1l7dsUgNz/SOKyiPGo28YeOD4or
71YsNJoTkx1hPc+Z5+AT9oc5HQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:52:33 2026 by rpki-client