
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json)
Hash identifier: O/6FSdbOYFQbEGNbE2Jx+TniP1J7SRdd+RsLf0EBdbM=
Subject key identifier: 01:72:23:77:0F:6A:CA:7F:D5:8B:47:A2:2A:FE:D6:6B:AA:F7:2A:C0
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
Manifest number: 0116
Signing time: Wed 29 Jul 2026 07:16:57 +0000
Manifest this update: Wed 29 Jul 2026 07:16:57 +0000
Manifest next update: Wed 05 Aug 2026 07:16:57 +0000
Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: /LNFWdxMt9gL6phMY3P6p9dMOUlbP6EYzSp1G6OPWp0=)
2: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: 7q1pfdm13OOPKdMhFRZESc6pMqjQGZzOaS0jydIIjHM=)
3: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: UMPqKlbNgq/NCSI3t3UTm/r8MXA+qd0WY7ZlbRUGxiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Validity
Not Before: Jul 29 07:16:57 2026 GMT
Not After : Aug 5 07:16:57 2026 GMT
Subject: CN=6a69a8e9-a97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7e:66:2e:eb:87:54:85:09:28:3c:08:cc:63:
15:3b:a2:0b:33:65:21:b7:28:b2:04:1b:6c:3b:4b:
2c:89:15:91:b9:c2:e6:a2:b4:bd:54:57:97:31:1b:
a1:39:dd:42:3d:6f:47:3d:b3:0b:24:b8:58:b0:5c:
c6:7f:38:c4:ce:d4:41:67:f5:a6:4b:d6:bb:6d:c7:
bb:53:7f:2a:ff:b7:c3:3a:06:a6:6e:0f:e2:74:ae:
b1:75:20:51:fe:ca:2f:61:c2:fc:0d:5e:90:37:12:
97:69:a0:d5:3a:18:63:0e:32:60:67:83:d1:fb:80:
8e:44:ce:ff:24:1d:e2:b9:f9:e9:0f:62:0a:cf:18:
e1:7d:47:20:14:fb:18:67:54:d1:0d:f9:51:ab:d4:
28:31:ae:a0:98:1e:c8:3d:bf:94:b6:cd:8e:69:be:
38:fe:b1:12:0a:51:9f:f3:8a:83:fc:99:b9:b4:dd:
21:11:21:04:25:97:ab:dc:80:56:60:24:e4:e4:74:
4c:24:12:3a:3a:9a:b3:5d:7e:19:60:f2:e6:af:5e:
b2:91:a0:22:e0:95:f1:b3:72:cc:78:7a:b3:d8:78:
d7:2f:f0:f8:51:6d:e4:8b:aa:22:73:37:86:67:b7:
50:b7:e0:ae:77:2d:48:5a:26:d6:9e:a5:f0:9d:44:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:72:23:77:0F:6A:CA:7F:D5:8B:47:A2:2A:FE:D6:6B:AA:F7:2A:C0
X509v3 Authority Key Identifier:
keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ed:9f:98:e3:6a:d6:4f:9d:66:ae:8c:e0:2e:0a:c7:7c:b6:
99:4c:5c:72:4b:f2:37:5d:8b:10:03:07:77:18:b4:79:9c:1e:
80:3c:88:6b:6d:d9:5a:c0:c4:66:90:8f:82:c1:2a:e8:da:5e:
03:14:18:16:a0:76:71:90:d1:3a:9a:e3:70:c6:04:77:3b:46:
a7:18:15:74:28:1e:57:d4:55:2e:3e:fc:cf:28:10:df:f0:90:
40:82:dc:22:67:f9:84:06:bc:d2:84:1b:72:8d:d7:e2:b1:f1:
77:a6:6b:c6:eb:c8:19:a7:b0:99:49:06:7e:e8:14:33:f0:62:
bc:26:22:83:64:e8:af:fa:8f:2a:48:fc:2b:9c:6c:a9:c0:8e:
bc:cb:b9:ab:49:18:37:c1:18:34:e8:4e:fa:34:ef:3f:3d:34:
be:8d:c7:83:8e:3c:f6:51:ab:85:0f:7e:f0:e6:f6:90:3a:b7:
ea:2b:60:4f:ac:60:56:dc:e9:04:9f:c8:78:f1:2e:08:80:ae:
93:af:24:e0:6f:9e:20:ce:d5:a2:5a:d8:44:60:47:88:bd:ab:
83:b9:f6:66:4c:5a:82:c3:22:33:31:cf:72:6f:a5:3e:09:15:
83:2e:05:c9:66:83:6e:ec:67:4f:0b:22:eb:75:2a:6f:ff:7d:
e6:33:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:21 2026 by rpki-client