
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier: 3NqRCYmLfZM5Rd27OUfS5FHdlpg4igZoXFUBAsBF6ns=
Subject key identifier: 45:C5:1B:47:35:1D:50:E3:0E:B2:77:0D:90:37:AC:99:00:90:1D:F8
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number: 01BA
Signing time: Sun 01 Mar 2026 04:37:48 +0000
Manifest this update: Sun 01 Mar 2026 04:37:48 +0000
Manifest next update: Sun 08 Mar 2026 04:37:48 +0000
Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: PFX7PBjcKHsSsqE0b1/JGWhQjSDHIWTg44lLsLDYjww=)
2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: 9LMpSs1G6DRXbhafQQ/fnV5UTQZp+aLbxUXgbbTPxiU=)
3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: FqhwzXNHRNY+XCePlaMxiVUp2AFCJ34p2xGpiCoaVzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Validity
Not Before: Mar 1 04:37:48 2026 GMT
Not After : Mar 8 04:37:48 2026 GMT
Subject: CN=69a3c29c-c5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:27:d5:cc:d2:31:5f:a3:a3:97:b9:dc:a1:
24:fb:0e:a7:6e:ab:6b:f0:f5:11:51:a6:c6:96:ff:
a1:ec:bb:03:a5:d6:d1:fa:af:14:76:8c:13:6e:5b:
15:5e:79:e8:c6:fd:61:3b:f5:5a:90:b3:47:54:e2:
4c:5d:07:4c:21:dc:22:09:12:18:01:c4:5f:78:a5:
25:5f:fb:f4:98:10:3d:d7:4a:77:e2:36:3a:b4:0c:
5b:09:e8:66:95:ad:7d:42:a3:a0:66:98:c7:05:26:
d2:78:7f:27:d8:70:5e:f9:cd:45:a6:94:d8:22:eb:
24:43:68:ca:97:29:5b:6b:de:b5:51:0f:3f:b6:d4:
91:c4:e6:54:70:e2:ba:99:ec:14:fe:7b:38:4c:2c:
b6:02:b0:5c:5a:77:4a:69:90:85:ef:97:8f:37:db:
71:99:fa:43:f5:a6:de:64:f0:a6:5a:3e:22:dd:5a:
2d:d1:bb:52:b3:ae:4e:c4:18:d5:67:7a:f8:2d:4c:
64:c8:97:fc:cc:f5:59:81:3f:30:7a:63:81:fb:c6:
74:f6:55:9f:a0:7e:b2:0b:c2:dc:1e:50:23:c7:b3:
23:2c:40:90:a8:54:ed:b2:8f:e7:c7:f6:b3:8f:f0:
8d:70:df:c0:64:bd:ad:88:55:87:ca:8d:e0:34:84:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:1B:47:35:1D:50:E3:0E:B2:77:0D:90:37:AC:99:00:90:1D:F8
X509v3 Authority Key Identifier:
keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e2:e2:73:24:cf:0d:12:60:10:37:04:11:17:43:4d:11:4c:
ea:62:35:43:20:83:7e:8e:dd:3f:d4:1d:84:fe:b4:8d:7f:e2:
51:00:04:53:07:f4:7e:ec:33:ec:f1:ba:65:1b:0f:bf:40:22:
f2:01:4c:2c:94:62:5c:24:ed:be:31:dd:6e:4a:4c:60:77:fe:
03:84:5d:11:6c:5f:a3:58:11:e6:b7:a6:75:33:ca:79:a4:57:
4c:53:41:38:36:3c:4b:47:d0:43:9c:55:b3:bb:b6:50:ec:18:
0e:f5:9b:7b:71:c4:5d:1f:b3:d9:41:90:c8:c3:93:80:62:8e:
4f:5e:5d:a1:9e:11:06:88:aa:36:93:08:61:b1:0d:bb:d8:f2:
ad:7a:c2:0e:b9:6e:ef:87:62:c6:0e:df:68:84:d4:f1:88:6e:
51:82:fc:4b:5e:08:0b:45:6e:85:6f:d3:17:05:74:b3:b9:b0:
b3:06:fd:bc:06:2e:36:04:61:20:a0:3b:b4:b7:25:04:d0:41:
bd:30:2d:f4:2e:ff:f2:b3:41:57:06:02:88:31:74:50:32:9d:
69:80:b4:f9:90:7e:a2:14:63:b0:3e:9f:90:77:66:7f:cf:80:
6a:6b:f2:1b:ea:59:4d:87:96:13:77:e3:31:94:57:61:df:c2:
41:f5:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:42 2026 by rpki-client