
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
File: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json)
Hash identifier: AbvsC2w5jgkRd0Zk+uKrglVjD3y0bkeC6/8y52hfQss=
Subject key identifier: 2F:35:E5:91:2A:32:EF:9B:AC:42:50:0D:74:BC:F4:5C:10:D0:C6:2C
Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74
Certificate issuer: /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
Manifest number: AA
Signing time: Wed 25 Mar 2026 06:27:37 +0000
Manifest this update: Wed 25 Mar 2026 06:27:36 +0000
Manifest next update: Wed 01 Apr 2026 06:27:36 +0000
Files and hashes: 1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: xmE2zzgRvWiys2wb9SGKpuihuyRf1iqpJ4512sMkqdI=)
2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: eajz65t2ux1KR+OQcc3Av8hhywthwVBpIhR8Ie4nBYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl
rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
Validity
Not Before: Mar 25 06:27:36 2026 GMT
Not After : Apr 1 06:27:36 2026 GMT
Subject: CN=69c38059-4a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:89:1e:ef:c9:14:d8:71:a2:22:cf:0b:7b:
fa:2a:4f:66:e4:e1:8e:24:c8:ac:03:ab:7c:4d:67:
36:da:88:1c:ef:fb:d9:fa:00:7c:97:54:c5:9a:cc:
d7:43:3f:bd:95:b3:bb:05:d6:8c:1d:51:cf:c5:c4:
02:05:78:73:a1:b9:23:79:ff:12:dc:e3:47:68:a6:
55:38:81:f3:49:f9:ed:df:f6:dd:d5:73:7b:13:4b:
3f:48:e3:b7:a9:46:e5:0a:14:63:18:5a:cd:63:d4:
54:b6:c0:a0:49:ce:00:ef:6a:96:65:a7:c9:37:be:
12:97:5e:be:d4:1f:9f:4d:18:83:3c:2d:b9:bf:fa:
8e:08:77:7a:69:7e:22:9c:a2:00:b2:a5:df:86:ac:
e6:00:bc:92:f3:c6:94:9e:fc:d8:73:98:c4:5d:ef:
9e:78:9f:7f:26:16:f5:e4:d1:fe:80:41:9d:9b:ec:
ad:f6:81:fd:90:1f:2c:0b:f1:78:7b:ca:96:08:f0:
05:ad:44:a7:55:40:67:2c:ff:b9:d3:5a:70:5e:f2:
8c:16:38:65:9b:4c:4d:ae:08:0a:51:ac:cf:ee:12:
a1:90:23:30:a5:87:d4:21:a9:d1:04:d4:ec:46:4a:
e5:df:40:ee:5f:71:18:8f:8b:b6:f8:cb:7a:7e:41:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:E5:91:2A:32:EF:9B:AC:42:50:0D:74:BC:F4:5C:10:D0:C6:2C
X509v3 Authority Key Identifier:
keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:92:7e:a1:52:eb:2f:25:8c:ec:2a:c6:87:f1:7d:a2:77:d7:
d0:c8:6b:d8:28:a2:3f:ac:b8:3b:f9:38:3b:a2:81:ab:42:4a:
48:08:17:dc:ae:fe:20:8a:e5:45:50:9d:c6:97:eb:87:a1:17:
16:da:e8:0e:fd:dd:53:fb:76:6a:6b:b5:4d:2b:b2:63:83:71:
a8:57:e5:c3:ea:ac:3e:15:4a:82:54:9a:73:14:49:6d:99:63:
3d:c3:dd:65:27:56:4a:88:e4:60:d4:45:15:81:9e:1b:c1:34:
f2:78:39:40:3c:e7:5d:94:c6:b8:33:e7:3f:48:26:e3:f4:7d:
da:b0:89:f8:38:3a:82:c5:2c:ae:99:23:9b:1a:f5:a0:59:9c:
ce:dc:86:ed:29:64:d9:dd:6b:d5:65:48:e8:29:c9:77:4e:26:
93:3e:e6:9d:98:09:9d:e0:f9:d3:0a:f7:9c:5f:3d:50:da:b0:
43:3f:65:53:99:da:4c:77:ed:a1:c7:81:f1:d9:0c:22:82:fb:
91:ff:81:94:16:4d:a1:fd:1f:b6:bb:13:ff:71:79:d9:f0:b4:
dc:76:56:bc:84:c6:de:62:dc:61:07:a6:36:d0:72:56:bc:e6:
e4:53:5f:23:73:0c:99:80:8e:f2:7a:02:71:5b:41:11:9d:ee:
c4:19:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:25 2026 by rpki-client