
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier: PUAnXE6kzHPikMi1cVwJqUu2HMc6KUFt/aAvlg8aGlw=
Subject key identifier: 80:0F:3C:87:EF:2E:A0:93:05:49:3E:F8:72:8D:DD:73:36:0B:99:A1
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number: 9C
Signing time: Wed 13 May 2026 07:34:18 +0000
Manifest this update: Wed 13 May 2026 07:34:17 +0000
Manifest next update: Wed 20 May 2026 07:34:17 +0000
Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: h071AeNvotGJ8Qd4SfElgw6cGJuZB1UlgRh37CmPaXQ=)
2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Validity
Not Before: May 13 07:34:17 2026 GMT
Not After : May 20 07:34:17 2026 GMT
Subject: CN=6a04297a-bc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:3c:9f:29:b7:c5:7e:ba:59:93:27:a4:06:
9e:cb:94:f7:d3:b1:39:1e:d8:4c:18:ea:af:27:ac:
07:d7:f1:9c:05:79:75:4c:7f:1a:0d:50:48:f2:ff:
4d:4d:90:b7:2d:de:8c:8f:3f:62:17:09:1f:a1:8c:
dc:bc:b9:1d:48:b5:a4:a2:e5:ab:6d:45:1a:be:e6:
7a:ce:77:de:52:fd:8c:a0:52:bf:59:94:0e:c9:7d:
1b:99:a6:30:2e:7b:86:4b:fa:0e:42:28:6f:04:49:
65:21:b2:d2:8e:e9:c2:15:c1:bb:06:5e:2e:b9:5c:
a6:c4:c8:55:3d:c6:5e:37:17:bf:ee:01:e1:20:27:
5d:d4:0d:0b:36:97:f1:db:55:73:b9:64:46:f4:fd:
83:6c:6f:87:9d:a8:eb:0e:8c:cd:7b:14:6b:3b:37:
45:fb:6b:44:68:b0:e5:af:a9:07:14:02:c2:46:8e:
0b:f5:b6:e8:61:de:9e:94:aa:6c:b9:94:f4:eb:c5:
74:73:ba:a4:7a:d9:93:50:e5:85:6e:a0:36:db:3c:
90:68:29:b0:f9:e5:48:01:4c:ea:a1:2b:34:50:a0:
58:9e:03:27:9e:20:c9:f4:bf:f1:46:cf:90:ad:cd:
fc:89:a4:cd:5e:fa:82:97:d2:76:fb:11:af:8f:4f:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0F:3C:87:EF:2E:A0:93:05:49:3E:F8:72:8D:DD:73:36:0B:99:A1
X509v3 Authority Key Identifier:
keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4e:fa:eb:f1:d5:b9:60:d3:cb:fa:d6:36:6d:5b:d5:2e:30:
50:94:00:33:cb:49:b9:57:6a:45:23:17:61:f3:ba:f5:2c:37:
ca:5d:52:44:51:64:6f:33:b3:a8:42:ce:f4:5d:75:2a:b6:b8:
32:4c:c1:e6:86:20:3b:a2:47:17:cd:8c:1f:bc:f5:c7:2d:42:
92:7c:6d:78:0c:8d:25:f5:44:d5:29:36:e1:22:dc:78:3d:e3:
fe:ca:30:ba:f8:9f:c8:23:48:f3:2b:ea:01:85:49:23:7b:e9:
64:4e:9b:d4:61:50:44:dc:97:e2:db:fc:07:8a:16:67:72:6f:
5b:ed:d8:c0:d1:67:4f:84:25:77:b6:95:58:d1:66:4f:ec:bc:
21:91:d1:00:5b:78:a7:57:e2:2a:64:f4:ab:4e:40:1d:6e:64:
d3:ba:54:4d:a5:f4:62:ad:ea:32:f2:e6:6e:25:3e:3a:aa:1d:
a5:81:9e:a1:52:14:a6:07:e6:a7:5b:46:ad:03:6d:20:22:c2:
33:9b:69:61:42:23:e4:96:ae:66:df:ed:5b:da:d9:e7:61:02:
58:a3:d4:5c:c6:12:27:f4:da:a7:24:5c:06:1e:4e:26:ae:4c:
db:cd:86:3d:be:f9:c9:9c:e5:42:5d:e4:b2:db:14:4c:f1:c6:
59:45:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:53 2026 by rpki-client