
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json)
Hash identifier: wmv5/27jJNUhCM4ybMvaufiDh4b4W1G6umswvY5IgpM=
Subject key identifier: 37:9E:7D:5D:00:ED:47:C4:E1:0E:33:3A:32:EE:49:BD:C8:53:DC:3D
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
Manifest number: FF
Signing time: Sat 13 Jun 2026 06:17:34 +0000
Manifest this update: Sat 13 Jun 2026 06:17:33 +0000
Manifest next update: Sat 20 Jun 2026 06:17:33 +0000
Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: fYGTRvqLONm5rfuBWdA60/FKaRX3OK3NRgl4HlYwm4c=)
2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: UMPqKlbNgq/NCSI3t3UTm/r8MXA+qd0WY7ZlbRUGxiU=)
3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: 7q1pfdm13OOPKdMhFRZESc6pMqjQGZzOaS0jydIIjHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Validity
Not Before: Jun 13 06:17:33 2026 GMT
Not After : Jun 20 06:17:33 2026 GMT
Subject: CN=6a2cf5fe-10a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fb:58:54:75:b3:bc:3f:72:ea:12:41:70:5e:
cf:75:71:99:6a:10:05:b7:0b:ce:f3:82:0d:46:ad:
be:a8:0b:a1:f6:08:e4:6d:cb:fa:16:33:ef:32:17:
83:c3:77:cc:43:af:71:80:4c:2f:8c:b2:da:e1:98:
b7:a1:10:3e:f9:9d:e8:ae:53:d0:0a:bf:c1:d0:22:
28:3c:88:da:fa:c7:53:9f:bf:d1:3b:21:2a:33:89:
a0:10:47:6a:d4:ea:64:30:72:ee:73:63:22:9b:c6:
eb:f5:0d:72:0e:97:92:cf:33:42:29:e6:d5:f9:6c:
8a:e1:b1:ba:de:7b:7b:95:32:c2:82:03:06:98:f2:
49:0c:5e:ca:89:d8:b4:f6:a0:0f:de:50:94:11:47:
6c:47:6f:04:3c:7d:5d:4f:5b:ba:54:a9:0a:99:e1:
36:db:76:71:8f:6f:f9:ff:26:ab:74:aa:51:17:81:
3a:a9:8c:df:d1:99:46:25:16:c2:50:d5:f1:1f:d1:
41:00:df:5c:01:a7:db:60:ef:99:26:c5:81:8d:dc:
be:06:40:dc:9c:a7:5e:3d:19:8e:07:ca:d4:bf:57:
9f:88:5e:a7:9d:4f:86:0f:23:e9:f9:de:29:bb:42:
26:26:41:29:58:e2:55:d6:a9:06:70:6b:bb:ef:88:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9E:7D:5D:00:ED:47:C4:E1:0E:33:3A:32:EE:49:BD:C8:53:DC:3D
X509v3 Authority Key Identifier:
keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:85:7c:b2:b2:71:41:ea:b7:8a:e9:a1:1f:64:f5:3b:e4:6a:
b8:a9:f9:60:fc:b2:77:7f:78:9f:b8:e0:df:21:71:91:df:12:
52:75:12:8e:bd:35:2d:48:df:5b:6e:b8:78:1e:13:e5:c9:7c:
b9:66:1f:5c:db:e1:6b:c6:6b:1e:a6:14:c1:9d:e5:d8:db:d7:
13:ac:a0:6f:c5:ba:95:b7:13:7c:c2:7a:b9:68:c6:0b:79:de:
da:d7:6d:d9:14:f0:54:eb:79:48:7e:2e:65:fc:3b:48:02:9a:
5d:b1:77:f8:40:9d:e0:2f:12:35:e2:0f:d9:ee:86:a8:f8:ab:
b9:66:4c:52:36:2d:cf:21:30:fe:96:2a:54:b1:30:43:c9:74:
5b:f5:a7:23:74:dc:ae:4a:87:33:a6:76:e4:bf:e7:61:aa:c2:
99:31:6f:95:0a:42:4e:4e:d1:8f:0f:0c:08:46:c0:34:a7:ba:
4d:1a:8f:3d:9a:8f:52:82:4b:ec:59:b0:ba:b4:bb:87:f2:eb:
90:b4:17:c8:ab:5a:ec:6b:a9:9c:d0:d8:c7:91:29:0f:5d:b9:
39:82:b9:c5:d4:ec:e5:12:5a:ad:0b:fd:1c:d4:42:44:4f:d5:
31:7b:56:a6:04:93:ea:a5:46:c8:ef:92:af:22:85:e4:68:c1:
8f:35:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:45:36 2026 by rpki-client