
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier: ZtG3sV4wQAzENDdZT4azz99dGGoOEm7FlYWzjNUTObY=
Subject key identifier: F1:2F:7D:1E:58:77:48:31:CB:10:D5:35:13:37:CB:D7:4A:EA:8F:D2
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number: 0154
Signing time: Mon 21 Sep 2026 05:17:38 +0000
Manifest this update: Mon 21 Sep 2026 05:17:37 +0000
Manifest next update: Mon 28 Sep 2026 05:17:37 +0000
Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: NXXfRJtv51lnBlY6gzi8dlLMMxnkEkUrurhjc1skRMc=)
2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Validity
Not Before: Sep 21 05:17:37 2026 GMT
Not After : Sep 28 05:17:37 2026 GMT
Subject: CN=6ab0bdf2-a116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:36:c2:09:d2:db:64:64:07:c4:dc:ba:eb:
aa:a5:a5:47:ea:60:30:4c:21:da:8c:2d:c0:80:16:
d2:80:34:b8:92:89:cb:3f:32:ce:52:7c:1b:0c:1e:
c7:48:2a:17:f9:bc:dd:3e:33:b2:71:0a:c1:54:e6:
93:c8:fa:cf:79:cc:8e:6d:8b:5e:be:44:8d:14:79:
b9:d2:ef:cb:0d:15:46:a0:7a:bf:2f:a3:39:18:13:
45:04:78:01:65:8b:79:2d:0c:77:eb:53:7d:3c:45:
b1:25:5c:24:16:57:5b:e4:86:e7:03:de:e2:2c:ce:
98:06:42:98:5d:d8:3b:93:49:bc:4d:5e:f8:24:d0:
8f:b4:37:11:59:7d:c5:e6:55:5d:ed:fe:ce:08:20:
19:0e:41:31:ad:d9:1a:4e:1b:cd:dc:c3:8d:5f:18:
3e:3f:0f:29:a6:54:b3:6d:1f:c8:34:ed:9a:3b:32:
7b:f5:e8:23:c9:fc:62:e6:02:a8:60:5d:94:15:38:
83:06:66:d2:ed:96:79:70:8d:95:52:6b:47:05:80:
ae:4e:d2:06:c8:f4:02:d3:de:8c:4a:36:24:6f:ba:
14:b8:42:fe:49:6e:bd:fa:fa:56:5b:46:f6:5f:bc:
92:83:13:a7:cb:2f:dc:9f:8d:42:3d:07:60:ef:a5:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2F:7D:1E:58:77:48:31:CB:10:D5:35:13:37:CB:D7:4A:EA:8F:D2
X509v3 Authority Key Identifier:
keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6c:02:03:7c:06:12:ae:e0:52:2c:48:ef:27:63:a3:1a:cc:
9a:ef:64:75:05:e4:3a:c8:c4:0d:7c:d7:a3:0b:0e:fa:5b:34:
f4:f9:1b:5b:56:ed:df:6f:7c:93:08:e4:80:7c:ad:be:26:a5:
b6:c9:39:a9:54:79:6c:6e:00:9e:55:64:d3:e7:92:06:84:bd:
57:1e:d2:0a:35:32:eb:ca:ba:76:fc:fe:9c:c6:bd:e0:a4:c1:
c6:e1:23:01:81:ac:8e:74:a1:1c:13:f9:73:9a:02:da:6e:93:
ea:0e:76:dc:a8:37:6c:cb:9c:dd:13:c7:d1:ec:bc:41:d7:f6:
4a:34:bc:5a:a6:3d:b3:20:6b:75:08:b9:45:c9:df:52:57:40:
25:b0:a1:eb:53:2c:d2:31:21:fb:92:41:41:63:1c:84:33:ef:
fe:ec:d2:39:02:d3:2d:3b:26:9b:a1:5b:da:89:eb:29:0f:0c:
73:ee:cc:0d:84:f4:dd:b0:aa:0c:80:9c:fd:dc:07:13:09:58:
26:bb:f0:91:e4:6b:a5:51:8f:d1:bc:07:82:5b:6d:d7:f6:42:
c5:c5:1f:79:6d:96:a6:a9:d3:68:dd:f3:31:37:17:59:b3:32:
b7:3d:7d:45:0f:37:c2:a3:e7:e6:71:b7:40:33:13:ea:48:0f:
e8:55:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:08:21 2026 by rpki-client