
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json)
Hash identifier: N7UXOLgk4nciDkRtkCuxtHIFhkybn1R5PSRRDLLpUyY=
Subject key identifier: 33:37:C1:60:97:85:43:AC:AC:8D:9E:A9:79:36:0E:C7:97:D8:41:0F
Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
Manifest number: 0B10
Signing time: Sun 01 Mar 2026 23:31:36 +0000
Manifest this update: Sun 01 Mar 2026 23:31:34 +0000
Manifest next update: Sun 08 Mar 2026 23:31:34 +0000
Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: gQpw6aPzuJFDICkqWue1uSVIsUhp3mkfFQj/EUAIN0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Validity
Not Before: Mar 1 23:31:34 2026 GMT
Not After : Mar 8 23:31:34 2026 GMT
Subject: CN=69a4cc57-f529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:35:38:d8:f9:5f:69:da:52:86:3e:54:b0:
67:df:47:b1:91:8a:02:8f:68:f7:95:cb:b4:c9:b7:
70:98:70:69:d4:35:2a:f4:1d:1a:1e:ff:98:5e:51:
77:1a:44:c2:2c:d8:74:bf:0f:e0:07:c6:88:0e:78:
34:04:90:ce:be:52:96:bb:f3:5d:06:67:34:4d:c7:
42:cd:0a:4b:81:16:41:89:d6:fe:2c:77:6d:08:4f:
f0:63:46:25:d1:62:eb:4b:c4:e1:94:f1:39:c6:30:
1d:97:59:3a:35:0c:15:b1:19:5b:f4:63:e5:dd:13:
51:b6:d1:7b:6e:00:5f:03:33:a2:f0:90:3e:b8:94:
19:f6:f7:f1:c2:8f:cd:50:2b:b6:5b:55:97:56:23:
6c:b5:88:af:30:89:53:d8:a6:86:cc:d0:0a:12:73:
a3:35:76:f4:95:00:78:97:e0:5d:07:b5:96:3a:ca:
65:90:29:1a:8f:f6:bb:c2:0b:ed:93:c4:61:3d:68:
0d:94:9c:8f:a1:3e:4e:6e:1b:12:0e:2e:8b:4b:07:
89:f5:9b:36:d7:4e:bd:52:ad:b7:9a:65:2e:fd:ae:
0e:e8:eb:e0:6c:77:89:3e:77:d2:1d:55:45:2b:4c:
99:45:76:b5:b9:80:53:c9:3c:5f:80:c3:6b:9b:ba:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:C1:60:97:85:43:AC:AC:8D:9E:A9:79:36:0E:C7:97:D8:41:0F
X509v3 Authority Key Identifier:
keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:07:86:5d:2f:65:a1:22:f4:6c:0a:9c:2e:fb:cd:cb:33:4b:
83:89:b5:d8:55:4f:09:ad:8b:dc:bc:d9:bc:cd:a2:73:3f:79:
75:6d:7f:1c:bf:4a:51:3c:a6:d6:5f:d5:3c:3b:42:06:2d:b0:
12:78:4a:67:90:f4:ca:b7:48:60:d6:6a:49:c2:72:34:ee:e8:
ab:a1:82:06:14:58:86:5b:fe:ed:96:92:80:85:1a:0a:62:e9:
40:b5:1a:3a:e5:c7:e0:e3:fa:31:e7:00:89:8e:4e:15:93:d1:
b2:55:83:60:8a:78:c0:39:10:05:b8:93:cf:ad:da:2f:86:e4:
e9:d3:03:38:0d:01:f6:40:e2:d2:36:06:08:b8:47:6f:64:d2:
34:73:81:0a:e3:72:dd:5c:64:34:f5:5d:d7:cf:73:f0:d7:6f:
d3:74:d6:16:d5:55:6c:90:57:44:01:91:ae:41:ee:68:08:5a:
7a:bc:89:06:66:41:15:8d:f5:f1:61:3a:52:5e:8b:3d:7c:56:
14:a4:28:70:7c:25:23:1d:b6:f8:72:1a:d6:ee:14:69:bd:43:
6d:6d:36:45:de:4c:da:07:e3:6f:c5:34:a7:62:68:6d:98:61:
9b:3b:a9:d2:52:bb:ee:af:ba:a6:eb:99:2c:b7:b3:df:51:32:
89:54:ab:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz
NjlDQkEwQjAwHhcNMjYwMzAxMjMzMTM0WhcNMjYwMzA4MjMzMTM0WjAYMRYwFAYD
VQQDEw02OWE0Y2M1Ny1mNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApEk1ONj5X2naUoY+VLBn30exkYoCj2j3lcu0ybdwmHBp1DUq9B0aHv+YXlF3
GkTCLNh0vw/gB8aIDng0BJDOvlKWu/NdBmc0TcdCzQpLgRZBidb+LHdtCE/wY0Yl
0WLrS8ThlPE5xjAdl1k6NQwVsRlb9GPl3RNRttF7bgBfAzOi8JA+uJQZ9vfxwo/N
UCu2W1WXViNstYivMIlT2KaGzNAKEnOjNXb0lQB4l+BdB7WWOsplkCkaj/a7wgvt
k8RhPWgNlJyPoT5ObhsSDi6LSweJ9Zs21069Uq23mmUu/a4O6OvgbHeJPnfSHVVF
K0yZRXa1uYBTyTxfgMNrm7rSGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDM3wWCX
hUOsrI2eqXk2DseX2EEPMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE
QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY
Vl92TkFOM1IxMHcybkxvTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfweGXS9loSL0bAqcLvvNyzNLg4m12FVPCa2L3LzZvM2icz95dW1/HL9KUTym
1l/VPDtCBi2wEnhKZ5D0yrdIYNZqScJyNO7oq6GCBhRYhlv+7ZaSgIUaCmLpQLUa
OuXH4OP6MecAiY5OFZPRslWDYIp4wDkQBbiTz63aL4bk6dMDOA0B9kDi0jYGCLhH
b2TSNHOBCuNy3VxkNPVd189z8Ndv03TWFtVVbJBXRAGRrkHuaAhaeryJBmZBFY31
8WE6Ul6LPXxWFKQocHwlIx22+HIa1u4Uab1DbW02Rd5M2gfjb8U0p2JobZhhmzup
0lK77q+6puuZLLez31EyiVSroQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:36 2026 by rpki-client