
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json)
Hash identifier: 7H0LwNEREjT63ctkqGlABXQX1So9AweWyGVhh6MN648=
Subject key identifier: 82:27:8E:E7:47:0E:0F:6D:70:2E:CC:0B:98:93:6F:34:F5:EA:09:BA
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
Manifest number: E2
Signing time: Wed 15 Apr 2026 06:06:59 +0000
Manifest this update: Wed 15 Apr 2026 06:06:59 +0000
Manifest next update: Wed 22 Apr 2026 06:06:59 +0000
Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: Uq6uIPZhvMf7ElXCr86W6xpZ/IDMGwuCIt+72aJfK80=)
2: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: 7q1pfdm13OOPKdMhFRZESc6pMqjQGZzOaS0jydIIjHM=)
3: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: UMPqKlbNgq/NCSI3t3UTm/r8MXA+qd0WY7ZlbRUGxiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Validity
Not Before: Apr 15 06:06:59 2026 GMT
Not After : Apr 22 06:06:59 2026 GMT
Subject: CN=69df2b03-894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:60:d7:af:6c:63:ac:35:d6:cd:ed:34:2a:6f:
d3:1b:c3:26:99:2c:0a:0a:b0:54:59:6a:85:f0:35:
60:cb:3b:94:6c:54:cc:7b:f4:ae:4f:45:9d:51:31:
69:a3:00:e6:f2:b5:a0:35:91:34:9d:2a:e2:5a:48:
b7:31:3f:f3:e8:7f:61:e8:e8:61:cf:f1:bd:df:02:
59:c6:53:7c:6b:10:16:da:0c:49:40:48:82:31:7c:
c8:16:18:24:e7:a1:3d:e4:fe:49:6d:c4:00:46:72:
78:fd:91:66:04:cc:ff:f0:b7:68:c0:5d:64:55:a4:
4e:b8:49:67:9d:05:4b:91:1d:6e:41:70:33:1d:2d:
16:0d:28:4e:7f:e9:ed:86:fd:37:0b:85:85:a9:e9:
89:c7:41:7e:4f:8f:27:a9:6e:e3:65:49:81:23:d5:
c1:32:27:18:9f:83:0f:a8:f0:b2:8a:60:85:b5:f8:
9d:81:9c:93:c7:35:cb:fe:fa:67:69:a5:c3:25:39:
17:53:5a:9d:2d:f2:a8:54:ee:ef:6f:be:18:f4:8c:
ed:1b:ad:aa:a0:b4:92:b0:97:c4:a9:9f:f7:c2:5f:
b2:e7:ad:fb:60:02:9c:da:db:ad:18:a3:15:23:35:
af:bd:3e:f2:87:c1:3c:ba:6b:80:a6:8e:63:da:b5:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:27:8E:E7:47:0E:0F:6D:70:2E:CC:0B:98:93:6F:34:F5:EA:09:BA
X509v3 Authority Key Identifier:
keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c7:98:d5:d2:57:d7:ae:e2:9a:13:f4:7f:0c:00:d1:75:e7:
c8:b7:eb:7e:60:26:57:05:1c:c0:3c:61:7e:ad:0a:c6:52:77:
24:6a:e2:f0:42:9b:d6:62:c4:a2:1e:76:66:89:94:fc:75:fb:
29:fa:89:f7:10:e5:56:24:4c:b6:87:ce:30:3c:b8:69:cf:6a:
02:bc:b7:5f:74:da:83:3b:96:3b:77:f3:b3:63:92:0c:da:cb:
25:9c:a9:c8:94:17:55:55:bd:34:14:b5:c4:c2:49:cf:c3:20:
73:ce:1e:91:18:14:79:57:43:eb:10:cb:ac:a1:f3:8a:23:f8:
ae:6c:c1:7e:ca:59:5f:47:d4:5a:ce:e7:c8:0e:10:fe:9a:37:
d7:cf:49:95:cd:1b:7f:da:a7:2f:26:6c:6f:8e:a5:0a:38:10:
27:e4:25:06:d1:de:c8:8d:f0:96:ff:d9:d3:d5:fb:e4:32:9c:
74:ed:58:88:c5:35:0f:71:09:77:d4:9f:b6:3a:0e:2c:ed:ef:
ae:32:cd:0b:92:b6:64:2c:21:26:f4:81:6c:9b:59:5b:fa:04:
b0:1b:4f:05:14:59:b0:64:12:28:22:74:43:da:b0:6f:03:89:
a6:23:8e:1d:14:3d:4a:8d:92:94:6b:92:8d:f2:8b:1b:a7:9e:
fd:ef:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:29 2026 by rpki-client