
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier: OwceVRNZ8HOmQ5G6qSZWl6yDMMvUkaA2NEnt/rpy+mI=
Subject key identifier: 9F:A3:C1:03:32:B4:30:E3:CF:A9:50:18:6A:39:07:E8:8D:4E:B4:25
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial: 075A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number: 073E
Signing time: Tue 24 Mar 2026 21:29:27 +0000
Manifest this update: Tue 24 Mar 2026 21:29:27 +0000
Manifest next update: Tue 31 Mar 2026 21:29:27 +0000
Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: kVKLJfiz/R950UPPGB3bXaYldwF6a03egE3Buz3uUMs=)
2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: XPvB+vFL16oisT/9uSlsAmizDeWHyhaJXzNkKeUA27M=)
3: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: +jvdYVRVCKb9nHFb/a4hVukxgRDPU2GYfvLDSqD8lQ4=)
4: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Validity
Not Before: Mar 24 21:29:27 2026 GMT
Not After : Mar 31 21:29:27 2026 GMT
Subject: CN=69c30237-9dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:0f:d5:93:b1:94:c6:44:04:56:74:50:ed:
80:4b:52:ac:c7:a4:e0:c5:b4:52:0c:d6:21:02:ed:
74:b7:84:3c:0a:19:fe:3c:7e:7b:59:cf:33:d1:ac:
c3:05:6e:2d:30:33:4a:ef:19:78:29:5a:62:2c:ff:
e4:e1:6c:47:7f:be:97:fa:1f:f8:05:d7:5b:71:33:
4b:09:97:28:f2:f9:04:77:a0:6a:a3:98:0f:cb:f1:
07:64:ca:e3:d2:15:24:da:e3:fe:f0:9a:c7:6b:ee:
95:7b:24:70:f3:73:18:88:99:fa:8b:a4:f9:29:bd:
ab:da:0f:f1:21:be:43:fb:1e:4d:69:a0:b7:28:fb:
c7:fb:04:19:fb:1c:c8:67:18:f2:91:f5:ce:39:0c:
b4:0f:5d:05:0d:8b:92:67:25:8d:53:b1:56:66:93:
7e:be:3d:e8:89:71:00:a2:ab:4a:ca:2b:a8:de:64:
95:c2:f4:4c:70:93:13:94:0e:13:c2:bf:9b:67:d2:
53:0d:e2:54:c6:bd:37:7e:46:34:0d:0a:fa:41:2c:
67:db:aa:c9:00:f2:93:db:36:06:9e:23:03:60:0b:
50:9c:9a:b3:e0:ce:80:4a:16:4d:c4:cf:ed:e4:5e:
00:c1:ab:8d:a9:b0:e9:c4:b6:76:61:70:c3:4b:a9:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A3:C1:03:32:B4:30:E3:CF:A9:50:18:6A:39:07:E8:8D:4E:B4:25
X509v3 Authority Key Identifier:
keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:d2:f0:4a:04:4a:40:7a:4f:36:d2:0c:44:87:ec:ef:cf:1d:
45:eb:8f:b3:5a:ae:50:07:d5:06:78:af:59:c2:98:ec:eb:a0:
7f:07:48:0c:d8:80:f2:27:a0:0a:c4:47:39:a4:54:94:1b:c6:
b5:9d:81:68:82:ef:71:cf:98:8a:7a:20:9c:c3:fe:2b:ff:00:
57:45:ce:ab:e3:58:86:e5:29:e7:fa:f8:9f:30:be:47:d3:e8:
eb:d1:1e:ce:48:3a:31:9a:f4:7e:6a:b0:e9:04:01:5a:d4:87:
0c:15:5a:5a:c7:42:db:67:fb:72:cf:db:56:c3:b5:0d:4f:37:
4d:c0:d7:8c:79:8d:25:5d:1e:d0:4e:24:1b:7b:20:d1:38:7e:
e6:13:96:fd:db:d9:d7:71:46:44:ee:c5:be:34:4e:4b:58:95:
f7:d0:20:6d:5a:e5:41:37:eb:55:71:0c:3e:ab:f4:06:8b:dd:
fd:12:e9:08:59:ac:2f:7d:28:51:fd:05:f8:32:6c:84:5b:82:
8d:76:b2:34:a8:99:0d:92:38:b3:c6:93:05:f1:ef:b0:49:37:
8e:8b:04:8a:5a:5e:46:e5:43:e7:b4:d3:5a:19:92:2c:bb:95:
46:0f:f8:12:12:79:9e:e0:eb:7c:31:ca:43:a9:47:43:e0:ef:
ef:b5:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:38 2026 by rpki-client