
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier: GPuyhTJoTo0mufy5OLa/PiX71YSze5vjrcfV8Fjffpk=
Subject key identifier: FC:22:E6:F0:07:A6:8C:B9:E0:35:9E:7F:1C:FB:75:02:81:41:EE:13
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number: 0197
Signing time: Fri 17 Apr 2026 04:03:45 +0000
Manifest this update: Fri 17 Apr 2026 04:03:45 +0000
Manifest next update: Fri 24 Apr 2026 04:03:45 +0000
Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: 5bMLXrpGtRa6GO+L0y7cXIar+WEbvymZPJAvSxq4KBg=)
2: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
3: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Apr 17 04:03:45 2026 GMT
Not After : Apr 24 04:03:45 2026 GMT
Subject: CN=69e1b121-9082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:a5:ed:a9:54:d7:72:ad:08:64:7e:82:ea:
e5:7e:ce:29:f4:b4:68:d9:ec:5c:21:a5:2f:56:af:
25:e1:49:28:14:72:9e:55:62:fd:eb:85:bc:7d:22:
e8:64:e4:2a:e6:3d:fb:e0:0f:79:d5:98:14:5c:05:
9b:80:18:44:f9:09:70:b2:d7:e1:cf:12:ed:20:71:
f5:c5:1a:66:4e:73:f2:6a:68:3f:78:20:1b:c1:62:
d8:70:86:3e:51:78:6f:fb:b4:a3:80:c9:40:fa:fb:
81:4a:5f:d8:24:66:fb:fa:1b:d9:07:98:70:7a:92:
45:75:5f:7e:9a:f6:87:17:06:8f:f1:c0:6a:2f:65:
ea:53:1b:be:3b:0b:c5:8a:64:5c:b1:75:42:ff:1b:
aa:b9:ae:3c:67:c6:c1:c3:d7:d3:64:c2:76:4e:57:
df:43:d3:b7:68:d1:5e:a1:9c:20:25:67:c7:88:2c:
54:dc:11:ff:f9:25:f9:64:fc:f4:0a:37:03:ce:ec:
51:6d:b1:9f:22:1f:80:9d:12:63:d7:5c:7b:c4:33:
62:26:18:e6:4d:7f:9b:26:c4:f9:6d:19:30:3c:e5:
32:b5:4f:02:a5:00:d0:3e:55:05:52:53:0b:53:0a:
ed:03:1b:ce:b8:05:08:6e:bb:96:8c:62:36:4e:d9:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:E6:F0:07:A6:8C:B9:E0:35:9E:7F:1C:FB:75:02:81:41:EE:13
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:85:5f:85:45:8d:05:dd:80:db:1a:08:f3:e5:95:5f:e3:9c:
c1:37:b0:74:77:f5:8a:c5:cf:84:63:79:18:2f:51:3a:86:15:
ae:b9:c5:c0:a0:d1:77:b5:65:94:f0:9b:b2:61:5b:05:16:f9:
81:6f:08:f4:39:dc:7b:1f:cf:55:74:e1:49:72:d5:fd:30:f1:
ec:98:96:b4:1c:1f:cf:68:4a:b2:fb:df:0d:1f:5a:49:42:94:
2f:c0:f7:fb:d9:68:ca:9d:fe:da:a3:6b:a2:92:75:9b:9e:95:
7d:44:0e:f9:0a:04:d2:4f:00:36:6c:4a:87:45:23:0d:f8:00:
4f:32:bf:66:63:4a:d1:50:c4:a1:be:7b:3f:fe:14:b8:26:c8:
d5:70:53:0f:aa:d1:76:6e:06:8c:02:9a:79:42:3d:68:53:8f:
13:56:a3:cc:83:be:a2:8b:e2:9c:60:6e:4d:0a:2f:9f:e0:d7:
84:d8:dd:4c:f6:ad:e8:b8:cb:b4:48:d8:3a:f8:16:e8:50:45:
d8:98:b8:47:ee:ad:c3:fe:e9:15:8a:6f:73:c4:bc:13:28:c4:
14:44:27:2c:60:a4:9e:0d:d2:c0:6a:da:0f:9e:98:58:97:66:
9f:b0:81:f6:8d:32:79:85:58:de:bb:e8:d1:97:6c:87:f7:65:
a6:d3:58:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD
NDA0OEFFNTEwHhcNMjYwNDE3MDQwMzQ1WhcNMjYwNDI0MDQwMzQ1WjAYMRYwFAYD
VQQDEw02OWUxYjEyMS05MDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGul7alU13KtCGR+gurlfs4p9LRo2excIaUvVq8l4UkoFHKeVWL964W8fSLo
ZOQq5j374A951ZgUXAWbgBhE+QlwstfhzxLtIHH1xRpmTnPyamg/eCAbwWLYcIY+
UXhv+7SjgMlA+vuBSl/YJGb7+hvZB5hwepJFdV9+mvaHFwaP8cBqL2XqUxu+OwvF
imRcsXVC/xuqua48Z8bBw9fTZMJ2TlffQ9O3aNFeoZwgJWfHiCxU3BH/+SX5ZPz0
CjcDzuxRbbGfIh+AnRJj11x7xDNiJhjmTX+bJsT5bRkwPOUytU8CpQDQPlUFUlML
UwrtAxvOuAUIbruWjGI2TtkI6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwi5vAH
poy54DWefxz7dQKBQe4TMB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw
NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh
V0F5d0M4TWlJSW5FQklybEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ4VfhUWNBd2A2xoI8+WVX+OcwTewdHf1isXPhGN5GC9ROoYVrrnFwKDRd7Vl
lPCbsmFbBRb5gW8I9Dncex/PVXThSXLV/TDx7JiWtBwfz2hKsvvfDR9aSUKUL8D3
+9loyp3+2qNropJ1m56VfUQO+QoE0k8ANmxKh0UjDfgATzK/ZmNK0VDEob57P/4U
uCbI1XBTD6rRdm4GjAKaeUI9aFOPE1ajzIO+oovinGBuTQovn+DXhNjdTPat6LjL
tEjYOvgW6FBF2Ji4R+6tw/7pFYpvc8S8EyjEFEQnLGCkng3SwGraD56YWJdmn7CB
9o0yeYVY3rvo0Zdsh/dlptNYlg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:38 2026 by rpki-client