
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier: /b4FmnUthN/pYAMnzbQ/7P/1GopMOX4QAoR1nFgmsCI=
Subject key identifier: 78:2F:4F:C6:41:B8:C9:29:E4:F2:E8:1B:B0:C9:34:CE:36:4F:7A:1B
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number: E9
Signing time: Tue 13 Oct 2026 07:11:19 +0000
Manifest this update: Tue 13 Oct 2026 07:11:19 +0000
Manifest next update: Tue 20 Oct 2026 07:11:19 +0000
Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: KznzG2Eav9xM2SWIhPmPLDQbLchEx7wRMjBNNR4TDEQ=)
2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 05:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Validity
Not Before: Oct 13 07:11:19 2026 GMT
Not After : Oct 20 07:11:19 2026 GMT
Subject: CN=6acdd997-e151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:68:02:e4:07:1c:69:9b:f0:45:dd:8e:ff:
d8:c6:bc:26:f1:a3:33:f6:76:05:d3:60:cf:16:e6:
69:d0:ed:9d:9d:07:98:0b:30:eb:50:8d:f1:ef:8b:
60:6f:40:2b:ea:2a:71:3d:73:70:e9:b1:eb:df:70:
60:f6:95:8b:3f:9f:04:9c:8b:d1:dd:6d:27:72:1b:
7f:6a:bb:fe:33:ff:80:96:88:7a:1f:c5:f1:78:71:
52:4f:39:d2:3b:bd:a5:79:0c:8c:fb:7c:68:8f:5b:
d9:60:1f:5b:ba:c8:b8:50:14:51:96:1e:0c:a8:f2:
11:37:82:a4:8f:52:dc:47:00:91:b3:e8:12:33:9d:
fe:93:5b:5d:44:4e:27:4f:4a:53:a0:6e:a4:3a:6b:
21:23:c9:83:e8:2c:c7:4c:b5:04:39:a6:7f:73:24:
00:2d:f1:be:17:4c:95:a8:27:fd:1c:4c:73:34:89:
f2:83:10:b8:4e:cc:c9:3e:07:fd:12:52:12:a1:2f:
8c:a5:5f:a7:7d:f5:e4:3a:19:ab:40:6d:e4:e0:6e:
4c:ed:95:dd:d6:0d:9e:64:dd:88:cc:c0:ee:b0:fb:
28:ba:4e:b5:e2:32:fb:b6:f5:09:b0:d2:d9:0c:e8:
b1:e6:83:73:cf:af:ec:2a:08:88:3e:66:62:05:53:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:4F:C6:41:B8:C9:29:E4:F2:E8:1B:B0:C9:34:CE:36:4F:7A:1B
X509v3 Authority Key Identifier:
keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:15:3f:e7:68:21:a5:bc:9b:17:a3:d3:41:0d:2f:d1:61:84:
21:d9:56:06:1e:4e:7a:22:4f:95:ce:bc:61:bc:48:db:a6:6a:
c9:1c:6f:88:b4:2a:ba:f7:b9:96:12:18:dc:b6:bb:56:9e:63:
7a:23:2f:80:b5:08:1b:d0:5b:ab:e4:0a:be:b1:02:a4:f0:a8:
7a:3a:bf:50:e3:8a:f8:36:57:bd:35:f9:22:29:74:8a:26:db:
00:ec:6e:ac:d4:7e:f9:15:8d:f3:0d:63:a2:58:13:11:d4:8c:
fd:af:94:ea:7f:f9:59:a6:79:c8:9c:29:a4:a3:73:fd:23:8e:
af:51:d6:f1:2e:56:a4:53:a2:d2:ed:40:45:20:b3:3a:ee:37:
82:98:36:2c:ce:d0:81:10:02:60:b7:66:8d:4c:d8:3e:79:c0:
3d:28:50:4c:f9:d6:20:7a:d3:55:38:2d:c9:d8:a3:00:5f:2f:
e2:a6:e0:e3:0f:60:b9:44:1c:8b:09:4a:16:f8:0b:1c:84:70:
ac:04:ef:d6:f3:c9:5f:0d:68:d8:43:d4:3d:fb:ed:b9:4b:7b:
8f:57:bf:c5:25:d2:15:08:30:75:b4:bb:1b:76:35:29:3f:e4:
bc:86:37:e1:1c:70:18:6d:e3:94:6d:84:3b:6f:2c:e7:bb:a5:
30:08:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:13:51 2026 by rpki-client