
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier: 82QrljgqtJrljiL6RO7nkWMu+f5T5tQropt1mTuhoAQ=
Subject key identifier: 34:E7:C6:D3:DF:68:0C:A1:FE:83:53:5B:BB:11:66:36:22:35:26:F7
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number: 01CA
Signing time: Wed 29 Jul 2026 04:57:53 +0000
Manifest this update: Wed 29 Jul 2026 04:57:53 +0000
Manifest next update: Wed 05 Aug 2026 04:57:53 +0000
Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: pVSG9Fep9xeDtyxHlyNn6DqEfun7jx15mmbgFos/d54=)
2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Jul 29 04:57:53 2026 GMT
Not After : Aug 5 04:57:53 2026 GMT
Subject: CN=6a698851-8699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:c5:9d:13:6c:71:7c:c1:67:a9:f9:d2:3b:
ea:a4:6a:dd:08:53:1d:c2:87:73:87:f1:80:be:46:
a9:ae:ca:57:6e:fd:80:37:92:8f:a0:92:e8:ac:e8:
0d:65:23:10:25:87:1d:0d:ef:52:d5:59:25:b8:82:
82:3c:09:6d:a4:8c:40:70:31:9a:53:b8:5e:4f:0d:
43:e0:46:e7:68:0e:e2:34:b3:4d:c5:06:23:f5:c9:
94:3e:af:4c:a4:1a:c7:72:1c:d4:f9:9b:55:6a:0f:
eb:48:ad:a1:e7:58:87:90:df:82:09:05:26:11:cb:
30:83:c6:6a:69:e6:fb:1c:18:98:61:a1:ca:e4:9e:
4d:5a:3c:f7:8c:39:24:eb:64:6f:14:a3:c9:cb:82:
68:51:7e:c2:3d:58:bb:aa:9c:66:8b:aa:af:c9:87:
ec:8c:6c:fd:d8:0a:6c:c3:74:8b:22:53:08:a2:9b:
67:d9:e2:e1:69:9e:6d:ca:d8:05:44:c2:90:c1:23:
fa:d6:fc:3f:2a:12:a8:ab:a7:93:91:10:97:ad:e8:
16:c4:f0:ba:2c:a3:ce:54:7a:10:5f:dd:cf:f3:23:
9c:6c:0d:99:15:82:22:f0:8e:3a:0a:46:27:7f:aa:
af:5b:53:07:7f:14:56:db:eb:97:93:7f:07:e0:f5:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E7:C6:D3:DF:68:0C:A1:FE:83:53:5B:BB:11:66:36:22:35:26:F7
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9e:2f:fa:df:80:2b:57:42:17:1a:c6:cc:92:b8:21:8d:61:
f5:99:0a:ee:db:a6:9c:13:cd:ff:43:e9:9b:95:be:b1:1e:6a:
c1:b1:9c:61:e9:ee:5b:c3:f2:6f:86:3a:1a:ca:5e:af:40:66:
45:41:35:8c:2f:98:ee:9b:bf:54:00:cc:37:40:98:e7:40:c2:
c6:ce:56:64:8d:18:ce:18:83:53:af:c2:bf:17:05:fc:71:c8:
65:33:5b:d1:cd:78:09:e1:fb:13:02:59:f2:85:5a:75:f9:68:
90:2e:12:e5:96:af:c5:f7:0e:1b:98:40:c0:95:2f:a0:9c:3b:
d2:52:c0:17:5c:a3:90:fd:e5:5e:b2:a5:03:cd:bd:cf:26:19:
c4:59:f9:2c:b3:7f:bf:14:4d:09:76:ef:ae:fd:15:24:eb:dc:
ec:68:5b:81:a0:d4:d5:7f:eb:9a:ad:c1:c2:d0:3f:f2:d5:1c:
a3:29:ac:7e:33:3a:68:55:37:21:42:20:d5:87:2c:76:d0:40:
08:26:f4:08:da:86:3f:fc:ff:0d:ef:8e:0a:35:c4:8c:2f:d1:
eb:b5:13:68:63:e6:7f:ea:16:ac:ec:a3:9c:8a:1c:bd:78:0c:
d7:74:c8:85:63:ae:9b:ec:5e:ed:d0:58:06:bb:cd:f6:83:74:
14:3c:f3:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD
NDA0OEFFNTEwHhcNMjYwNzI5MDQ1NzUzWhcNMjYwODA1MDQ1NzUzWjAYMRYwFAYD
VQQDEw02YTY5ODg1MS04Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0aDFnRNscXzBZ6n50jvqpGrdCFMdwodzh/GAvkaprspXbv2AN5KPoJLorOgN
ZSMQJYcdDe9S1VkluIKCPAltpIxAcDGaU7heTw1D4EbnaA7iNLNNxQYj9cmUPq9M
pBrHchzU+ZtVag/rSK2h51iHkN+CCQUmEcswg8Zqaeb7HBiYYaHK5J5NWjz3jDkk
62RvFKPJy4JoUX7CPVi7qpxmi6qvyYfsjGz92Apsw3SLIlMIoptn2eLhaZ5tytgF
RMKQwSP61vw/KhKoq6eTkRCXregWxPC6LKPOVHoQX93P8yOcbA2ZFYIi8I46CkYn
f6qvW1MHfxRW2+uXk38H4PUahwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTnxtPf
aAyh/oNTW7sRZjYiNSb3MB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw
NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh
V0F5d0M4TWlJSW5FQklybEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALZ4v+t+AK1dCFxrGzJK4IY1h9ZkK7tumnBPN/0Ppm5W+sR5qwbGcYenuW8Py
b4Y6Gsper0BmRUE1jC+Y7pu/VADMN0CY50DCxs5WZI0YzhiDU6/CvxcF/HHIZTNb
0c14CeH7EwJZ8oVadflokC4S5ZavxfcOG5hAwJUvoJw70lLAF1yjkP3lXrKlA829
zyYZxFn5LLN/vxRNCXbvrv0VJOvc7GhbgaDU1X/rmq3BwtA/8tUcoymsfjM6aFU3
IUIg1YcsdtBACCb0CNqGP/z/De+OCjXEjC/R67UTaGPmf+oWrOyjnIocvXgM13TI
hWOum+xe7dBYBrvN9oN0FDzzuA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:36:46 2026 by rpki-client