
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json)
Hash identifier: /nEi0Z4J+ODZTw7rCNAmcDKbXfiN73m6JpNuC9vBMr8=
Subject key identifier: 06:F9:45:96:EB:0E:66:85:F1:C2:9B:4D:00:5E:36:4C:D7:F0:CE:42
Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
Manifest number: 0D3E
Signing time: Sat 10 Oct 2026 22:15:32 +0000
Manifest this update: Sat 10 Oct 2026 22:15:32 +0000
Manifest next update: Sat 17 Oct 2026 22:15:32 +0000
Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: yHHkSD90dCnXgdFziSlh/LkwKxAHBJfzs/EPY94yXmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 22:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Validity
Not Before: Oct 10 22:15:32 2026 GMT
Not After : Oct 17 22:15:32 2026 GMT
Subject: CN=6acab904-25da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:6d:da:6e:eb:0f:fe:4d:38:13:d4:39:90:
d7:65:fa:45:0c:d1:59:9d:4b:0f:b3:c7:fa:0a:0d:
8b:66:59:2b:03:91:50:3a:d3:47:41:99:28:60:7e:
10:48:14:61:f4:eb:2c:ae:95:9e:a9:5d:4d:d0:16:
28:c5:5c:99:fd:fd:31:21:9c:cd:84:75:26:c7:96:
b0:fb:a1:8c:84:77:a8:4d:e3:17:d9:2c:a4:76:60:
32:72:5e:08:2d:a9:79:4d:2c:25:83:b0:d2:1f:3f:
c2:53:a1:ab:2d:9f:81:5a:6d:e3:08:5a:a9:28:08:
3c:ed:34:aa:78:25:a4:99:c7:29:a3:82:ec:fc:93:
8e:36:47:14:c7:7d:3f:06:be:f5:ad:c9:70:72:40:
e1:dc:98:04:b4:2a:4f:f9:b7:59:bf:c5:3b:f4:34:
da:08:02:f5:3d:31:c1:cc:15:67:80:0f:6b:b6:ef:
59:cc:9a:cb:8e:d6:ce:fe:55:5b:40:81:31:bc:df:
9d:05:68:d4:a6:3c:60:41:6b:25:98:06:5a:ba:18:
d5:03:de:92:7c:8e:16:fe:d1:d3:5c:bf:6e:a9:88:
a3:0b:f0:88:36:c9:c4:3f:40:c6:bb:b5:43:c9:5b:
91:fe:96:b1:66:1e:7a:38:bc:92:a8:ae:b9:60:60:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F9:45:96:EB:0E:66:85:F1:C2:9B:4D:00:5E:36:4C:D7:F0:CE:42
X509v3 Authority Key Identifier:
keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:6b:e3:e9:e9:d5:bf:70:63:60:a7:3d:06:fc:34:79:26:e9:
86:41:20:12:ae:6c:bc:c2:1d:c1:0c:6e:23:74:18:d7:13:73:
27:1c:45:52:ba:2c:be:f7:36:c4:a2:40:94:dc:69:d6:d9:fb:
68:fe:82:fd:74:6b:06:2f:d1:5b:5e:15:02:f3:9a:7f:b3:c7:
9c:f6:2c:29:27:d8:7c:3a:2a:ee:25:bd:b0:31:1f:dd:71:23:
97:c1:31:af:0b:c8:4d:26:24:a8:f3:5f:70:59:b7:31:53:5e:
9e:d7:2e:cd:b8:1e:d6:99:3e:91:88:7f:a8:d5:04:be:8a:0c:
ac:35:1d:5c:9e:70:39:83:9d:6b:3e:b4:4e:b0:ae:ee:83:3c:
26:c2:d8:26:4e:45:52:b8:4f:77:db:1b:95:4c:2a:b4:d8:98:
79:50:77:de:97:66:09:29:82:92:91:56:2e:32:76:f9:d3:ad:
e0:6e:7c:b3:19:38:1c:ad:cd:42:e1:dc:f8:e8:cd:76:b7:71:
b9:be:3d:a3:6b:b0:0d:75:68:cc:e2:d5:c9:c5:61:ec:49:6e:
65:ac:fb:00:28:b3:c3:e4:35:ba:53:13:e9:24:4f:91:bf:f5:
11:04:3b:ed:ab:73:e3:69:96:06:39:cb:ab:2b:29:21:93:33:
9d:f1:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:16:23 2026 by rpki-client