
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier: k3DySGxFqyblVOYkbgRc24Z3GM7pSrtbsIwr53omsbw=
Subject key identifier: 97:61:59:A4:CA:AB:AD:78:14:07:FC:C6:42:7D:A2:94:04:09:31:37
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial: 011B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number: 0113
Signing time: Wed 25 Mar 2026 05:06:30 +0000
Manifest this update: Wed 25 Mar 2026 05:06:29 +0000
Manifest next update: Wed 01 Apr 2026 05:06:29 +0000
Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: 4gszHE4l4/gJV+DZaAV0i5coDcQge+EWIG0i7wTfDek=)
2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Validity
Not Before: Mar 25 05:06:29 2026 GMT
Not After : Apr 1 05:06:29 2026 GMT
Subject: CN=69c36d56-8f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:41:29:de:a3:f5:ec:1f:ff:9d:62:6e:76:
c4:f7:e0:6a:9e:93:be:94:17:c8:b0:95:67:be:2d:
e4:de:3f:81:48:ae:ff:fa:72:fc:08:55:2d:8f:83:
62:c1:07:48:34:20:38:cf:90:6a:a7:80:67:81:c3:
29:5a:88:60:db:ae:9e:04:59:83:ba:db:2e:53:fb:
7f:d0:9e:32:d7:b6:0b:76:c0:85:1f:19:7a:37:cc:
2c:30:65:60:90:d7:2e:d2:0a:fc:c3:6b:5a:77:1e:
b5:5b:09:9f:d6:89:5b:c2:04:cb:3c:59:01:12:46:
7f:33:23:21:13:a7:dd:49:b8:07:60:c6:9c:8a:17:
3b:0f:be:bf:d7:93:86:37:fb:6e:8f:8e:52:fd:8d:
dd:47:6d:68:77:aa:fa:cb:8c:8c:a9:07:e8:95:19:
e4:7c:5c:ff:77:81:1c:97:8c:7c:cd:a4:94:ce:01:
41:78:b8:cf:66:a1:5f:f3:d9:34:55:e0:26:87:76:
e5:f8:0f:e3:fb:65:bc:72:cb:1d:80:94:85:d3:c6:
9a:e3:3f:f5:3d:4b:12:50:9e:da:0b:2c:1e:a2:75:
00:9c:14:fc:77:ee:8c:56:5a:eb:d3:cd:36:f0:3c:
d6:46:e6:0c:a7:ad:c8:73:91:01:0c:bf:bd:03:61:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:59:A4:CA:AB:AD:78:14:07:FC:C6:42:7D:A2:94:04:09:31:37
X509v3 Authority Key Identifier:
keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:2c:8c:ef:0e:a6:6b:93:ea:2e:d1:a8:b2:1a:51:9a:cf:
6e:42:8c:3c:36:38:6e:82:5f:2e:56:94:3e:bd:a8:67:d5:53:
84:a4:0e:2b:da:64:b5:55:6a:97:e4:72:cc:c2:d1:65:79:56:
d1:ef:98:2d:73:20:52:f8:9e:e9:5e:6a:0c:9e:1b:a7:7e:9e:
ef:12:f3:4e:c9:33:a7:7d:cd:7b:34:c7:63:14:1d:59:f4:5e:
38:0b:f6:88:a3:f8:ed:ea:dc:ac:f5:95:92:5a:a0:c1:b4:99:
7b:99:3d:5b:9c:8d:af:31:fd:9f:ca:81:cd:9c:c8:94:6f:35:
24:36:b8:44:d4:09:ff:ad:e8:bd:64:b2:93:1b:c0:c3:a6:16:
42:bb:55:2d:4c:c0:b9:31:cf:67:fa:88:c1:8f:9f:b1:1e:ee:
64:54:58:39:2d:4d:9d:07:5f:e7:fd:af:26:3a:7d:fb:85:f6:
0d:17:f1:43:45:4c:fe:86:ad:1d:9c:6a:18:ae:66:5a:35:8f:
97:58:e7:ab:0f:b9:92:12:57:3b:e0:11:71:4f:f9:f2:2f:7a:
cc:64:87:da:4a:e7:e4:44:24:29:b8:b5:98:e1:67:7d:b9:d4:
b7:c5:2a:71:99:1d:42:26:ff:fa:c6:40:1b:f8:97:95:c8:a9:
17:58:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:55 2026 by rpki-client