
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier: ocYreUVtIPM/AzYYqg0B5YSIgDHz8TWeecns3DZNDQQ=
Subject key identifier: 23:C2:1A:A0:38:3F:96:16:78:14:1A:EF:F2:FC:5D:4B:CE:10:4F:14
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number: 016C
Signing time: Thu 23 Jul 2026 06:19:59 +0000
Manifest this update: Thu 23 Jul 2026 06:19:59 +0000
Manifest next update: Thu 30 Jul 2026 06:19:59 +0000
Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: /KPUE1loGGsQ8/VV6ebYTjHWWnNnzx9KHjBi+HfQSA4=)
2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: sWmhw22xeirzBkTQzvvE9hJncBsWONWyuiN7pZYxdxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Validity
Not Before: Jul 23 06:19:59 2026 GMT
Not After : Jul 30 06:19:59 2026 GMT
Subject: CN=6a61b28f-0645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:f0:a6:25:52:8b:61:24:7c:e8:33:41:80:
5b:99:dc:4c:ea:b8:10:88:60:bc:bd:77:59:d8:c5:
aa:da:c6:7d:74:0a:60:d2:00:f0:80:b2:eb:0f:82:
71:94:ea:40:dc:e1:09:fe:18:3f:0c:7e:96:cc:1c:
56:e4:4c:38:bb:6d:37:57:f9:07:ef:53:06:39:8d:
dd:51:fb:54:ed:e7:84:7f:d0:76:8e:4f:94:c1:75:
70:07:5a:ef:4d:ed:e2:8e:6c:87:dd:41:f0:de:4b:
35:cb:9b:a4:2d:e0:be:8e:ae:fc:13:83:47:3c:ca:
6d:30:69:ca:e7:a4:f2:a2:a2:19:58:5d:76:0f:18:
02:06:07:7d:bd:17:4d:dd:6f:73:4a:f5:3f:fb:3f:
49:0a:62:8a:98:57:a9:f7:b1:a3:d7:f0:a9:da:27:
39:52:28:96:7f:c0:bb:27:c8:c1:25:5e:24:54:7c:
88:d1:1a:1a:92:c3:b4:ff:51:5d:2f:77:42:5a:84:
5a:60:44:e9:ea:32:74:66:5c:db:79:e2:a3:ca:a0:
5d:dc:20:1d:d2:89:ed:60:5d:36:34:fe:5a:d5:b0:
9c:2c:1e:c7:c7:4b:0d:26:df:73:f5:19:41:61:98:
ff:8e:dd:61:1a:fc:18:66:92:9f:66:aa:1f:bf:41:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:1A:A0:38:3F:96:16:78:14:1A:EF:F2:FC:5D:4B:CE:10:4F:14
X509v3 Authority Key Identifier:
keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:28:c1:cf:69:81:a9:57:13:ba:c3:58:e2:98:5a:ee:ab:c5:
9c:91:98:a8:1c:6e:7a:dc:10:cf:66:35:bb:08:cc:04:f5:9c:
34:7f:66:0d:9c:61:bd:24:43:f0:e5:4a:d4:1c:fc:dc:2c:93:
a3:65:4a:84:15:dc:75:ee:fb:a1:9b:93:bb:75:22:67:6b:1d:
f4:58:07:58:6e:c4:31:83:d0:1d:0f:70:30:03:ac:2a:17:f7:
b0:ad:e3:fc:04:30:3c:bb:4c:dc:fc:d5:48:3b:47:65:78:89:
db:76:17:f0:e2:0c:7c:82:a0:b6:7c:5f:ce:ac:6a:54:ce:61:
0e:1d:8e:5b:13:70:4d:9b:99:1e:e3:64:78:77:1c:d4:0e:33:
2e:f2:c3:80:43:ea:5a:2c:65:91:74:88:88:df:12:a7:d4:3e:
c3:da:8d:5c:be:d8:7c:9a:72:06:63:0c:e3:ef:3d:8d:d4:79:
51:1d:d8:78:d0:62:55:cd:9a:5e:0a:00:e6:54:c9:2f:7c:3e:
34:f6:7c:00:85:85:4a:7e:cc:06:c7:18:22:37:ab:b4:bb:bc:
6b:78:2d:1c:e9:d9:30:b1:29:ca:90:57:5e:14:a8:46:d3:8a:
8a:74:0f:a3:27:6f:af:3a:7f:60:93:02:15:c4:f6:c5:02:c1:
67:13:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:43 2026 by rpki-client