
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier: BxcSwwrXPOI5Zap/UUZJKNzaark3xtfiGsUTLectgwc=
Subject key identifier: 7A:F4:A5:49:6A:8E:63:FD:3D:53:59:53:17:52:17:04:47:D0:C5:FB
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number: EB
Signing time: Sun 01 Mar 2026 07:35:54 +0000
Manifest this update: Sun 01 Mar 2026 07:35:53 +0000
Manifest next update: Sun 08 Mar 2026 07:35:53 +0000
Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: x5BI1MFxO3YDEZhcQ1qwe4Hc34Bwa0LRRqXvfp3dpn8=)
2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: OH16X8GEk+h/u670xpKDKmtIszx6M9DvNarlNlVqoko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Validity
Not Before: Mar 1 07:35:53 2026 GMT
Not After : Mar 8 07:35:53 2026 GMT
Subject: CN=69a3ec59-19a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:23:1d:c9:93:c4:82:05:ae:7b:7f:13:cb:
14:47:14:c2:af:eb:0d:53:bb:95:5c:b7:ae:12:e5:
ee:b1:70:68:e6:50:03:c8:93:d0:ce:0c:05:1d:cc:
da:27:cc:e7:48:cd:52:39:1c:05:c1:6d:d4:af:b2:
4c:45:59:02:de:38:7b:65:d9:f2:83:e2:ce:1c:21:
30:93:89:7f:2e:d8:f0:e7:e5:59:f8:dc:cc:70:9c:
cf:5b:7f:a9:c7:fc:83:06:2b:8d:d6:67:89:56:22:
d7:f6:55:c1:fa:a4:f2:59:f9:32:6f:54:92:f8:99:
57:a9:f7:36:34:2f:30:5f:2d:35:ec:61:34:bb:05:
92:06:e7:36:98:01:1d:5b:52:1f:8c:23:15:53:38:
65:04:d6:78:e9:7d:5a:89:d8:12:99:9f:55:db:5b:
0f:d9:d0:21:b7:06:ad:2a:c2:ab:dc:7a:10:f3:6f:
02:60:9c:91:72:5a:47:ea:59:de:d8:8f:20:ae:d7:
33:74:01:f5:d1:37:f2:3d:21:7a:85:89:46:c6:39:
dd:f9:15:dd:d4:56:27:74:c8:61:05:0a:bc:70:6f:
97:36:5c:8d:13:75:0b:23:b6:5a:b7:4b:60:34:0c:
e1:c1:e7:7e:0f:f0:f4:98:23:f6:1f:b8:c3:6d:86:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:A5:49:6A:8E:63:FD:3D:53:59:53:17:52:17:04:47:D0:C5:FB
X509v3 Authority Key Identifier:
keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e6:c0:0c:a7:e4:fa:6e:ef:a1:e2:1e:05:6e:38:bd:51:f1:
10:8e:7e:51:16:42:5a:bb:81:5f:3a:30:cb:55:a3:80:ee:14:
b0:46:8f:ff:82:e6:3f:bf:c0:5a:98:74:ef:64:00:6f:4d:ae:
b2:3e:07:31:8c:c4:65:29:00:8d:e9:c5:d4:51:33:d1:69:da:
bb:09:91:dc:9f:b3:cc:e2:54:81:2f:e1:3e:8d:39:0e:7f:3c:
6b:ef:19:12:c2:bc:7c:4e:d5:7d:3f:8c:27:b1:06:18:e8:cf:
92:36:d9:15:1b:b9:26:0c:4e:5d:dc:59:95:4b:3d:03:a5:26:
64:34:fc:ca:0f:81:b6:bf:0b:84:5e:6b:f1:0a:27:6d:a4:e6:
83:5c:d8:bb:b0:58:7a:b5:3c:4a:42:75:a8:8d:46:df:52:68:
c2:4d:e8:b1:bc:28:95:44:a6:fc:02:6c:38:c5:3b:b8:49:e5:
57:ad:cd:0d:a6:02:c1:b7:15:ca:db:18:88:50:ea:a4:b7:66:
7d:99:87:3f:08:f9:70:ae:2d:05:8c:14:b7:ce:14:90:43:bb:
00:d6:07:a9:0d:62:a2:96:d5:97:b8:df:0b:36:09:26:60:ce:
46:86:b3:17:7d:10:7d:50:28:f1:f3:29:dd:b5:ef:9f:b2:ca:
dc:47:b5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:32 2026 by rpki-client