
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
File: Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft (raw, json)
Hash identifier: Q2Mk9DQ4zpoF7nt8A/KrBSrKRuqcAhu3/SlCDyFilRM=
Subject key identifier: 7F:AE:8F:C8:AF:39:A5:6E:A5:4D:6D:B7:66:CD:76:4D:78:08:3E:FC
Authority key identifier: 12:3E:FB:1D:D0:55:24:59:1E:01:1F:00:62:56:54:DD:8E:95:B0:7E
Certificate issuer: /CN=A9166D4A/serialNumber=123EFB1DD05524591E011F00625654DD8E95B07E
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
Manifest number: 1F
Signing time: Thu 23 Jul 2026 11:00:34 +0000
Manifest this update: Thu 23 Jul 2026 11:00:33 +0000
Manifest next update: Thu 30 Jul 2026 11:00:33 +0000
Files and hashes: 1: Ej77HdBVJFkeAR8AYlZU3Y6VsH4.crl (hash: m7EQagA0xWWTiLi1tnH0q9JeBEZY8wXP33kJgs09U/k=)
2: 0D9753385C0811F18768733790833773.roa (hash: XsipbiBiNNSReaao381J1GUc+kBTumYcFrVSdsCJQEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.crl
rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D4A, serialNumber=123EFB1DD05524591E011F00625654DD8E95B07E
Validity
Not Before: Jul 23 11:00:33 2026 GMT
Not After : Jul 30 11:00:33 2026 GMT
Subject: CN=6a61f452-f180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:4f:45:d7:a1:34:30:ff:dc:f8:4f:06:40:
4e:95:62:3f:a5:eb:f9:14:7e:8d:00:31:a4:98:23:
a3:9f:cf:c9:c0:79:0a:90:dd:28:9f:2a:0a:3e:c6:
0f:9e:48:df:b0:23:55:78:b0:b2:8a:6c:c0:89:6d:
4a:1d:71:30:2a:65:d0:cb:93:b3:36:6e:2b:a9:21:
c6:d0:84:15:eb:ec:37:e6:f7:a9:b6:08:ff:0c:8b:
ac:92:17:f5:9a:9f:a3:ac:ae:7b:db:ed:8a:3d:c1:
47:1c:cf:35:3a:f3:89:e6:06:02:de:9f:63:18:95:
f5:e9:a0:67:ed:d1:47:3d:25:86:f8:02:9a:84:c1:
a6:73:5a:15:07:1d:e2:8e:e6:c0:6e:17:8a:ff:0c:
0e:1b:41:0b:1b:c5:e1:ad:db:99:a7:70:f0:1c:2a:
17:df:9b:4f:5f:2e:8b:ff:e9:3d:37:8f:8c:79:29:
77:75:34:df:30:32:56:99:68:69:b5:e0:27:93:0a:
25:ae:ab:5f:9a:a9:b0:33:bb:13:c2:38:af:51:01:
9a:47:b8:3d:19:42:91:b5:a0:ee:d7:c3:86:d8:96:
c1:9f:08:05:3a:e1:9b:7b:a2:b1:09:cc:c3:7e:04:
e1:6c:7b:77:1e:fb:89:6d:c6:68:15:cd:4f:b1:15:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:8F:C8:AF:39:A5:6E:A5:4D:6D:B7:66:CD:76:4D:78:08:3E:FC
X509v3 Authority Key Identifier:
keyid:12:3E:FB:1D:D0:55:24:59:1E:01:1F:00:62:56:54:DD:8E:95:B0:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1b:a9:6b:82:6e:0f:d4:57:cf:55:5b:9b:7c:f9:85:34:1b:
6c:c3:6a:6e:ce:b8:a6:98:6d:84:62:2c:70:60:94:08:dc:77:
a5:22:cc:0a:55:27:ca:48:58:5e:e2:2e:9e:98:59:02:30:62:
30:d9:e6:8f:37:c8:c4:be:d1:95:c2:30:12:81:a1:dc:21:48:
d0:6c:a9:cb:8a:6a:7f:4c:1f:3e:62:92:6f:33:80:d1:cd:86:
5e:85:f3:c0:01:b2:79:05:e8:54:99:d0:f8:69:14:35:40:24:
8f:6f:ce:d4:24:ee:e0:4c:c1:3c:51:b7:78:c6:31:d2:c1:d0:
ed:0e:3d:e4:f3:4e:e9:2b:b8:8a:68:cc:2b:e5:3b:63:bd:1a:
52:98:c2:26:5f:73:a1:fb:77:a0:96:21:b3:95:c5:a9:bb:54:
45:1c:90:b6:ed:60:79:90:54:12:dc:48:1b:df:55:a6:66:93:
03:5f:cd:a3:3f:15:71:2c:3a:b9:1f:e7:b6:16:46:f3:ff:61:
ec:6e:f4:cc:7e:b3:95:13:fd:20:d2:f8:3e:c3:d8:38:12:73:
19:54:8a:16:de:18:53:2b:0e:5b:d0:53:2e:ec:0f:cd:db:9f:
42:e5:cf:6e:b9:09:7d:ab:d0:f1:7c:26:ea:99:a4:52:c0:c8:
44:8e:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:24 2026 by rpki-client