
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier: mtbIPfvQP4D/3zsQnAt14OZJ1hdHxIoXpP/zdTrUxKs=
Subject key identifier: FA:4D:52:AA:F2:37:15:BD:CB:D2:C7:63:BA:85:BB:41:FD:BB:A0:8F
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial: 0773
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number: 0757
Signing time: Tue 12 May 2026 21:46:39 +0000
Manifest this update: Tue 12 May 2026 21:46:38 +0000
Manifest next update: Tue 19 May 2026 21:46:38 +0000
Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: bhVJwwFgVo77/fYvGwhyB1HWw+7z2e6cU2OXYYC0trY=)
2: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=)
3: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: +jvdYVRVCKb9nHFb/a4hVukxgRDPU2GYfvLDSqD8lQ4=)
4: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: XPvB+vFL16oisT/9uSlsAmizDeWHyhaJXzNkKeUA27M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1907 (0x773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Validity
Not Before: May 12 21:46:38 2026 GMT
Not After : May 19 21:46:38 2026 GMT
Subject: CN=6a039fbf-78db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:1f:0b:51:85:be:fd:e2:cc:ef:a7:0e:72:
89:58:df:dc:9e:28:c2:48:9c:87:9b:f1:ea:c8:a0:
bc:5d:35:89:1f:18:cf:17:0d:e0:fa:fa:b8:65:51:
a1:eb:e0:a1:42:a4:80:a3:67:84:f4:79:64:58:e1:
7a:c7:3d:c6:d1:78:71:60:18:cb:ea:84:94:61:29:
45:8d:69:4e:6a:f4:f8:3d:8b:c3:95:81:66:08:06:
7f:26:15:47:f5:a1:56:b4:0e:2b:da:cc:53:18:1c:
d3:57:df:bf:74:26:de:f9:59:04:4e:98:9b:d3:b6:
97:85:47:72:a4:dc:ad:46:1d:18:92:e0:a2:1d:21:
b6:d3:c9:e7:ab:b0:0f:d1:7e:e4:9f:7f:08:3f:af:
71:db:cf:a3:44:db:cd:3f:d1:1f:4c:ca:bc:a0:01:
d7:9c:a0:83:f0:9b:7d:85:a4:32:8d:15:0e:6e:4b:
53:32:ad:69:1c:a1:92:65:6d:0d:4d:6b:10:aa:11:
4c:a5:16:a9:c2:b9:35:3c:62:69:41:2f:72:a5:5b:
00:86:45:29:77:44:5a:17:f3:5e:84:3f:a8:03:97:
4f:47:26:87:3e:8e:4e:32:d6:73:56:0e:30:89:a0:
f5:e9:7b:3d:d5:8e:c7:93:7c:0d:a5:90:0c:57:42:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:52:AA:F2:37:15:BD:CB:D2:C7:63:BA:85:BB:41:FD:BB:A0:8F
X509v3 Authority Key Identifier:
keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:50:2a:5b:ca:00:bb:66:e1:9f:d8:71:ad:13:8f:32:9d:82:
38:5b:08:20:97:b4:7e:c6:07:a3:2f:3c:33:ec:04:8e:2f:cb:
06:b5:fd:65:a8:ca:f8:82:41:f2:67:55:54:dd:59:70:94:08:
26:2d:0d:6f:c7:94:3d:47:72:f2:e9:41:63:fc:d8:db:fb:8d:
3b:12:6b:28:9c:2c:82:82:2b:e4:2f:66:4b:0f:74:47:1c:ad:
97:ea:43:2b:8b:9c:63:47:ff:51:d7:cb:e1:4a:c5:5a:70:c3:
af:34:ff:95:31:9e:e7:22:7a:50:ae:f8:56:a5:f7:43:b9:2b:
85:48:94:bf:38:2d:b8:de:e9:a1:5f:fd:f7:72:a5:47:ea:1a:
22:b8:17:79:5f:b7:73:65:ce:ec:6c:06:2c:a9:88:83:a6:ae:
82:44:ff:e0:56:e5:b5:3a:c5:59:8e:83:af:eb:35:88:64:ca:
d8:a3:a1:f9:56:d9:c4:2b:24:13:ce:3e:10:4c:50:64:c1:34:
77:62:16:cd:83:57:94:39:aa:7c:60:65:c7:69:ce:e1:e2:ca:
64:0f:c1:36:29:4a:a9:e4:c4:b2:2d:53:43:19:2e:b4:49:f3:
4c:9d:e2:d3:40:81:7e:46:db:6a:e9:1a:89:04:27:34:41:09:
a8:e2:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:12 2026 by rpki-client