
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier: RVXyQWQW8gvRMQbqpgzLb/3K3z9/c2jD3AAvDluZmtY=
Subject key identifier: F8:22:36:95:0B:26:CE:23:7D:0B:D7:75:FB:20:71:AA:67:B5:6E:A5
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number: 0206
Signing time: Mon 27 Jul 2026 04:38:28 +0000
Manifest this update: Mon 27 Jul 2026 04:38:27 +0000
Manifest next update: Mon 03 Aug 2026 04:38:27 +0000
Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: 5LkJc+n657pu+gswDOjRdOdF2Obkgi8vAqLR1qeqnsc=)
2: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: e7JyAV4y4Fpitct0PBwFzDuy1w2upP2xYQlut6RJaeU=)
3: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: FJ+repPrmYSlijYjI+MRSa3mhNIvAfvhuyQif/Z3/Zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Validity
Not Before: Jul 27 04:38:27 2026 GMT
Not After : Aug 3 04:38:27 2026 GMT
Subject: CN=6a66e0c4-b383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6d:6e:40:a0:1b:88:64:e7:fb:87:15:08:6b:
64:51:13:9e:b6:53:a5:b0:92:7e:3c:05:b1:1d:b1:
52:dc:07:b5:15:4b:17:62:d2:33:f0:7f:fc:5f:f1:
ab:d2:11:dd:bb:8e:1e:3e:20:88:f8:10:f8:5f:9c:
4a:82:c7:9c:30:82:17:bc:c6:4d:81:c8:3a:9b:46:
95:e5:45:c9:7e:2e:f4:d1:e1:d3:13:3e:f8:74:95:
75:f3:27:ba:75:68:ef:92:28:66:cf:73:e2:6a:24:
f5:ae:33:eb:32:f3:c5:c6:14:09:46:e3:03:8a:ab:
30:12:0b:44:9b:09:6e:78:e6:3a:18:a0:02:d0:58:
32:56:11:37:86:10:7d:e7:b1:8b:c4:30:40:06:1a:
0a:91:21:41:2e:f3:08:0a:47:72:b8:b7:f8:67:50:
eb:c6:9c:62:bf:72:2d:da:78:30:d5:d9:51:8c:d2:
19:ae:23:af:16:03:f7:bd:2b:09:95:d4:fd:eb:d2:
6b:81:61:a6:bd:e3:32:d7:2c:17:b5:e6:e8:0f:30:
dd:e7:9c:93:8f:3f:78:9a:bf:e4:c5:e9:5a:a9:b4:
2d:c2:cc:a0:da:ec:35:78:86:43:cd:4a:c5:e5:51:
78:96:4e:11:bf:cf:21:6c:c3:d0:66:a0:68:e5:2e:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:22:36:95:0B:26:CE:23:7D:0B:D7:75:FB:20:71:AA:67:B5:6E:A5
X509v3 Authority Key Identifier:
keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:9d:5b:07:54:bc:96:9b:f4:c2:3b:a1:8b:1c:ec:9a:d5:a2:
1c:9a:41:ac:1f:1b:f6:f3:b2:c0:a8:85:3f:ae:22:78:9a:c1:
2f:0e:38:ae:9c:4f:1d:37:c7:b6:ca:2a:64:71:47:62:02:5f:
2a:4a:48:77:da:7c:0a:88:d7:98:11:24:30:3e:56:ab:66:dc:
3d:de:74:6e:16:1d:a6:7f:78:e2:08:47:e8:67:04:50:8c:03:
09:b0:8a:97:81:f0:fb:36:eb:d9:bc:f2:f4:14:81:cf:92:48:
b5:ca:57:bf:53:0a:9c:87:68:cb:13:ec:ee:c0:79:2b:62:5b:
96:22:86:64:d5:c7:d2:d6:89:f3:84:80:c2:6d:12:6b:97:d7:
c0:8f:d3:ee:d0:b8:1c:75:41:79:1a:1d:f3:77:42:33:d0:64:
be:38:2b:76:a6:c1:55:68:f1:1c:e7:ed:2b:55:c3:84:ac:b4:
90:cd:2f:ee:71:4e:78:1e:f1:20:69:68:cd:a3:91:76:e1:55:
6b:6f:49:f2:23:ef:4d:7d:2e:3b:6d:75:ed:53:81:4c:c8:5b:
c5:16:61:8e:c1:84:eb:70:4c:1a:bb:52:5b:99:85:7b:c2:ad:
96:bf:7b:94:fa:5b:c1:f8:42:3c:92:c6:26:72:b0:58:52:83:
a5:69:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:46:54 2026 by rpki-client