
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json)
Hash identifier: T5vd2VnGUs0sGpPfIEv/JX4DuJyoBicONI3x/8u4Vm4=
Subject key identifier: 1D:D7:52:C1:C0:34:5D:D5:52:3A:3D:62:AA:1A:79:83:65:93:C8:E9
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
Manifest number: F1
Signing time: Wed 25 Mar 2026 05:43:04 +0000
Manifest this update: Wed 25 Mar 2026 05:43:03 +0000
Manifest next update: Wed 01 Apr 2026 05:43:03 +0000
Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: cypqkuXlThNJL5P06WnMMrgskirdqKks5tR1WCiR77k=)
2: 40D442EAE8AB11F0A6A9087C576F56BC.roa (hash: tzLlHJukcx5JOovy2IfMsqt8PmmqcmCex92jH5vGw5c=)
3: 6DB991F222A311F195E5C95EB3833773.roa (hash: TsyRSdpcyqdq/9uv13YmYRvIQSMzrZWYt0RWLEVXB0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Validity
Not Before: Mar 25 05:43:03 2026 GMT
Not After : Apr 1 05:43:03 2026 GMT
Subject: CN=69c375e7-e944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:72:52:ec:67:12:1d:4d:98:e5:b1:05:e7:
63:10:84:14:2e:ac:1d:5a:f8:e0:a1:cb:1f:2c:d1:
25:41:d9:68:6f:bc:1a:3f:c4:f6:ec:5e:32:f7:80:
ad:fd:e1:67:a4:af:6e:db:30:b4:9c:05:5d:4d:82:
75:c3:21:0a:59:64:0f:a2:7d:52:62:2e:28:ee:2e:
fe:cd:3b:f9:f8:d3:f8:ac:cd:e4:88:a2:6c:27:12:
39:06:fc:34:f5:83:6b:81:7c:77:d9:1c:c4:cf:1c:
21:ec:c4:67:5f:3c:d8:7b:cb:2a:5e:db:5a:a3:b3:
06:85:9c:4c:be:7e:a7:84:6d:ed:42:5f:ab:36:02:
c7:d7:e4:36:5c:5e:1e:8d:ff:77:63:24:8e:29:0a:
0c:69:82:33:9f:12:60:77:bc:c6:22:fe:bc:20:89:
d4:fc:dc:cd:01:ac:a1:02:04:8b:79:04:4a:31:e3:
ff:2c:32:04:4b:48:8b:25:30:bf:0f:40:b0:d6:20:
fd:e9:60:7c:e0:5a:5f:16:8a:1f:ae:7d:2f:d6:d6:
cb:4f:60:a1:2e:42:6a:45:32:71:5d:56:7a:9a:7a:
fb:ff:f8:d1:98:f8:aa:a1:40:b0:ba:bd:47:7e:d7:
14:b7:b0:d4:7c:6a:5f:5c:1f:d0:8a:e3:6f:10:c5:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D7:52:C1:C0:34:5D:D5:52:3A:3D:62:AA:1A:79:83:65:93:C8:E9
X509v3 Authority Key Identifier:
keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:7d:43:db:fe:19:53:04:09:f9:8b:5f:fc:93:82:8f:9a:
3d:0e:c3:2f:7c:a5:78:e9:7c:d6:4b:00:34:61:c5:8a:5c:90:
1b:07:59:d9:80:99:45:78:ba:4d:e8:d4:b5:2d:81:c3:1a:44:
6a:4f:86:40:8e:66:d0:c1:82:c3:39:5b:92:d0:a4:f9:c8:16:
6c:e1:eb:28:e7:42:2d:57:58:2b:bf:37:a0:e9:25:a2:f7:ec:
31:28:f5:72:9b:2d:ad:7c:22:e8:48:cd:cc:d4:ac:1d:a3:21:
78:a3:7e:1a:e3:37:8d:2d:f7:b9:ea:73:72:61:5f:98:22:c4:
5f:ae:a9:3e:24:5d:98:f6:76:33:3d:b1:61:f4:21:78:21:89:
1d:53:2f:15:d8:98:c3:58:60:33:c7:c4:2f:34:90:7a:89:c7:
65:26:8d:7b:f0:0b:70:7d:25:3b:94:37:8c:13:43:37:b3:17:
65:b3:7a:9f:ef:18:3f:42:64:c6:be:66:a7:bf:9f:c2:87:d1:
96:58:d9:21:4e:c3:eb:55:ae:a5:31:e2:60:09:f3:55:d2:df:
23:2b:0b:b8:bd:17:f9:30:f3:4b:25:e9:ed:99:b2:1d:a4:1a:
9d:e7:f3:7c:d8:25:b7:b0:a4:66:db:f8:02:0f:ee:f4:f6:39:
26:42:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:38:37 2026 by rpki-client