
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier: fCB/aJ7gughMama+3MDACWV2kcYdAOGrEsiISVDms10=
Subject key identifier: B8:D7:C7:72:EB:A4:D9:97:5D:1C:57:E9:CC:C9:7A:B7:2B:E3:5F:57
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number: 012C
Signing time: Wed 13 May 2026 05:40:44 +0000
Manifest this update: Wed 13 May 2026 05:40:43 +0000
Manifest next update: Wed 20 May 2026 05:40:43 +0000
Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: On/ap1CuwtJmh8fcQHH714cBJZjslJmjhMSl9FeFTEA=)
2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Validity
Not Before: May 13 05:40:43 2026 GMT
Not After : May 20 05:40:43 2026 GMT
Subject: CN=6a040edb-2d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:b3:a7:61:ae:2f:e1:eb:7d:9f:10:e5:8b:
a0:8f:55:ae:49:0a:40:d8:d6:03:88:53:2a:2e:38:
07:4f:72:77:00:15:33:10:cc:3d:d9:6b:2b:c8:ba:
55:bf:26:8b:f2:40:e8:2e:fb:56:73:e2:82:54:6d:
eb:b0:6b:90:4b:9d:59:76:5d:d7:c1:bb:05:3c:79:
8e:1a:d4:03:f1:12:fc:e4:c1:2a:12:11:1d:e9:49:
a2:f5:a9:45:cf:93:f0:df:64:66:18:1a:7d:d2:88:
7e:8a:b2:c7:1d:8f:9c:65:0d:c9:1a:ff:39:24:51:
84:ee:c7:69:84:cd:39:65:f8:5d:a3:74:8d:e1:1e:
bf:58:ef:fe:db:3f:b0:55:32:5c:78:b1:a6:ec:54:
c0:bf:aa:22:52:a2:c8:35:00:cd:61:1f:b1:ed:17:
11:2a:1d:03:f4:d4:d8:2c:3d:7c:11:ad:40:e7:8d:
9c:27:59:3d:10:07:96:35:05:0c:d3:49:58:47:5a:
bb:b8:0e:46:0d:7a:7c:c7:81:7c:01:e2:92:00:64:
61:d4:72:d3:59:86:cc:75:52:68:03:53:2c:74:6d:
88:06:fd:83:6b:ba:fb:7f:fa:10:5e:e1:b5:0d:d4:
9a:c4:f3:1d:34:1e:c1:26:81:ec:c4:e4:d4:4d:71:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D7:C7:72:EB:A4:D9:97:5D:1C:57:E9:CC:C9:7A:B7:2B:E3:5F:57
X509v3 Authority Key Identifier:
keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:45:a6:c4:8c:42:30:74:aa:fa:f2:b4:99:7e:43:7b:af:12:
e6:e4:92:d4:32:f5:77:c0:ed:6f:d7:e9:d1:e3:5e:4f:6f:7f:
76:c8:88:f8:b2:84:25:a1:77:0c:b2:e9:42:1b:9d:a3:62:58:
c0:6d:bd:f5:57:eb:91:77:5b:99:38:81:e7:b6:c4:d5:97:66:
51:f3:c6:5b:42:37:a1:03:46:ea:d2:ac:c3:6e:1d:56:65:d4:
6d:13:73:8a:64:0d:26:2c:47:88:26:bf:b1:d5:14:7a:40:4b:
b9:8f:4b:fe:55:4c:d1:f7:7d:ca:56:a9:dd:25:9a:62:96:35:
d3:de:28:90:a2:0e:19:be:ae:bc:45:d9:73:4b:78:4e:6e:45:
26:b6:8d:5b:f5:55:3d:78:a2:90:55:c3:db:e5:0a:d7:1b:ee:
be:e7:44:98:7f:47:b2:cb:72:fc:71:72:d9:fc:28:23:0f:41:
d0:b2:3b:84:60:cc:42:67:9e:df:21:c9:c8:dc:6d:5c:c3:e3:
3b:8b:29:75:e6:d9:4b:3b:dc:22:22:06:e0:c3:8c:8b:40:98:
c6:07:99:1d:60:16:6b:05:66:89:60:79:3f:30:f6:72:4a:3e:
a5:d9:6e:47:17:b2:97:b4:5a:5c:36:78:4f:41:d9:e8:bb:78:
5b:d1:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:25 2026 by rpki-client