
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier: 4Lv8QiH647S9qJB3oSbt3K93YjIc0e4fI3h4FTcfsgk=
Subject key identifier: 74:FE:BE:69:B7:42:C7:06:DB:1D:9A:CD:B8:D1:C2:B7:08:79:54:37
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number: BF
Signing time: Thu 23 Jul 2026 08:52:00 +0000
Manifest this update: Thu 23 Jul 2026 08:51:59 +0000
Manifest next update: Thu 30 Jul 2026 08:51:59 +0000
Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: mZDMgJfPBrMH27fEt5NqSCRu3BHnojnxK9sQfW83vTs=)
2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Validity
Not Before: Jul 23 08:51:59 2026 GMT
Not After : Jul 30 08:51:59 2026 GMT
Subject: CN=6a61d62f-c4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:9b:ba:9b:88:a4:00:60:c4:02:91:e3:b5:
4f:e9:d1:53:be:8f:74:72:5c:5d:75:ed:21:82:28:
7f:5a:e1:81:e3:ef:b1:1f:fc:3b:b1:0f:52:35:f1:
e8:68:07:18:79:f8:2c:eb:67:4d:f0:92:24:cd:96:
03:ad:0e:86:7d:33:7b:8d:be:4f:6f:fc:46:72:e6:
e7:bd:b4:b5:fc:ac:ae:b7:7a:2b:3f:65:13:9c:6a:
8b:95:94:0f:df:36:b7:d3:45:23:77:da:5d:39:e3:
4f:56:50:5b:60:8f:47:bd:e0:69:4c:36:f1:23:65:
89:cf:29:e4:d4:b1:46:da:a6:43:6f:91:b5:33:53:
b9:a9:ec:9e:ec:05:86:91:80:35:60:35:63:fa:95:
24:c9:0a:90:cf:ad:34:da:08:5b:e5:f5:31:03:be:
4f:03:ab:85:1e:f0:1a:a8:d7:60:46:ac:9f:8c:48:
b3:55:62:77:7d:ca:89:9c:8f:43:d5:aa:fc:be:5c:
84:e8:40:34:17:4e:6a:f6:c1:eb:57:88:03:f3:f5:
38:7b:72:2d:a8:4a:e7:38:19:ef:9d:0a:0b:cd:43:
74:d9:77:f8:75:df:c7:be:80:de:0b:45:e1:d8:21:
ed:89:83:8d:61:01:52:aa:e6:49:1b:fe:ec:ca:4a:
d3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:BE:69:B7:42:C7:06:DB:1D:9A:CD:B8:D1:C2:B7:08:79:54:37
X509v3 Authority Key Identifier:
keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:e3:a6:2a:70:22:98:34:74:d7:bf:2f:b0:27:96:89:4a:49:
c0:28:c0:05:b6:ae:dd:7a:f4:73:96:1a:e6:9c:89:c0:dd:d9:
5c:1e:3e:b1:5d:92:8f:13:4c:ac:67:a6:73:ef:d3:e0:9d:76:
54:84:4e:ba:12:4a:a5:9a:68:8d:5b:dc:45:ef:56:39:49:57:
9a:a6:8e:04:c8:0b:17:f0:9d:e5:53:33:34:25:a9:36:42:31:
1e:ca:91:9d:72:e4:79:16:92:3d:ea:50:9c:67:b3:2f:8f:71:
32:5a:ee:23:65:2c:37:94:f7:05:f9:c6:d8:45:5d:c3:ba:77:
c3:c6:b2:32:66:73:f9:b2:56:db:16:e6:66:fb:0f:b8:58:3a:
95:97:6f:e1:9b:c8:2a:92:a4:dd:c6:04:88:c0:84:9c:82:1d:
1b:7f:3e:97:39:ce:9a:24:09:3b:73:43:30:f9:e6:3c:25:6e:
c7:c3:5f:46:42:b3:9f:08:7e:ba:bf:f2:3e:4c:ab:d3:79:f3:
48:bf:b9:c8:0a:64:4a:85:10:fa:2f:18:82:0d:e4:28:8e:10:
3f:3e:f9:9c:68:75:b6:c3:83:07:60:30:18:00:39:5d:ce:10:
06:f5:fb:5e:11:af:58:9b:be:0d:c9:47:df:2d:7f:c0:cb:48:
13:a3:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:33:44 2026 by rpki-client