
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier: jCAU3G5luUyNNGgbx3SRmBNHnA6rdqnZ2ZPJaQirKBk=
Subject key identifier: 8A:1F:EA:E1:04:A2:46:F2:71:6B:F4:1D:6B:30:7C:11:02:F5:91:C3
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial: 032A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number: 0324
Signing time: Sat 13 Jun 2026 01:09:22 +0000
Manifest this update: Sat 13 Jun 2026 01:09:22 +0000
Manifest next update: Sat 20 Jun 2026 01:09:22 +0000
Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: eZp13gIYjkGWwH9Duh+miMQTdc+zawLILWK6tsw8VdU=)
2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: kTT7eEgt9uaGhMCIrcNR40b0329psOBKWZcG/FsxbWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Validity
Not Before: Jun 13 01:09:22 2026 GMT
Not After : Jun 20 01:09:22 2026 GMT
Subject: CN=6a2cadc2-c8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:cd:db:8f:94:7d:d4:1f:a8:cf:13:df:d0:
0f:f5:56:f6:8e:c8:7b:4f:52:7a:65:aa:6c:6a:3d:
b1:3f:51:77:30:ef:3b:68:e6:c5:8e:40:99:af:4d:
14:52:73:54:ad:db:6e:9e:74:61:dc:b3:99:ae:2f:
43:d4:74:ec:a9:0f:ab:5a:4e:cd:e7:d1:ef:48:6a:
40:50:b4:9a:85:09:f2:cf:07:77:6e:93:52:b6:b3:
4b:64:38:b3:66:64:d4:f9:a7:32:63:a3:97:fd:72:
5c:ab:a0:96:92:00:a8:45:a3:b6:52:30:af:b3:88:
9c:df:bb:67:c0:31:06:35:bd:97:db:8e:e0:ba:fb:
33:fd:56:2c:02:5e:0e:0e:94:3a:9b:55:c6:65:16:
38:68:b8:b1:16:cb:e3:ea:ae:bc:82:16:fe:52:f5:
96:20:a7:ff:83:75:16:3c:6b:00:2b:5a:d5:3e:2a:
2c:43:22:1b:36:4c:ae:97:bc:94:5e:c7:ab:fc:76:
ee:36:6d:e9:f6:ca:18:53:ce:40:e8:c0:1e:95:5f:
71:2a:17:f9:18:1f:23:19:03:3b:94:c4:47:96:b2:
d0:27:40:8f:3c:9c:9f:5c:51:8b:d6:dd:af:15:4a:
ff:53:d0:24:8a:37:19:c0:eb:4f:7d:5e:3b:23:51:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:EA:E1:04:A2:46:F2:71:6B:F4:1D:6B:30:7C:11:02:F5:91:C3
X509v3 Authority Key Identifier:
keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cf:5f:73:25:1c:d0:c9:78:fc:68:8a:79:e0:df:16:ad:81:
f7:a5:e3:57:29:33:13:4f:9b:76:8b:5c:0a:67:d7:86:f9:ac:
ed:60:c5:b7:b3:6d:22:3c:fe:f5:d4:aa:63:20:db:e1:1c:5f:
27:76:28:37:c7:5d:0a:e4:16:46:75:b2:31:df:4f:eb:66:ab:
23:dc:b5:59:10:5c:97:65:56:13:60:a2:41:0d:2a:df:82:33:
64:7b:ed:39:c1:01:66:ae:ff:45:56:a8:24:c5:e3:2d:b3:27:
82:55:99:1a:9a:73:ac:83:02:be:ec:ac:bf:9e:22:3e:ab:ba:
27:b6:38:7e:32:b4:57:bf:8d:de:e8:2d:38:6a:07:94:2d:3b:
06:87:80:88:03:4b:33:aa:76:85:02:13:a1:ed:61:40:3c:56:
60:50:af:00:86:11:59:d4:dd:c8:f1:03:b9:56:a5:ce:1b:c9:
4e:83:e9:64:06:cb:c9:36:7c:a7:ce:90:58:82:cc:c7:cc:19:
ca:4c:9e:3a:e2:66:04:75:e9:72:53:c7:4d:23:74:7d:25:ef:
62:63:bb:dc:53:47:1c:fe:52:2e:82:a8:ac:88:9f:b4:9f:64:
1e:da:93:4b:f7:67:be:ad:4a:6f:74:1e:4e:8f:04:41:78:2f:
97:b9:1f:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRFQUYxMTAvBgNVBAUTKDdBMTMwNDRBMTExODU4NkMwRkRBMTM4QkIzRUJERDQ4
NDg5MTRFMzcwHhcNMjYwNjEzMDEwOTIyWhcNMjYwNjIwMDEwOTIyWjAYMRYwFAYD
VQQDEw02YTJjYWRjMi1jOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJvN24+UfdQfqM8T39AP9Vb2jsh7T1J6Zapsaj2xP1F3MO87aObFjkCZr00U
UnNUrdtunnRh3LOZri9D1HTsqQ+rWk7N59HvSGpAULSahQnyzwd3bpNStrNLZDiz
ZmTU+acyY6OX/XJcq6CWkgCoRaO2UjCvs4ic37tnwDEGNb2X247guvsz/VYsAl4O
DpQ6m1XGZRY4aLixFsvj6q68ghb+UvWWIKf/g3UWPGsAK1rVPiosQyIbNkyul7yU
Xser/HbuNm3p9soYU85A6MAelV9xKhf5GB8jGQM7lMRHlrLQJ0CPPJyfXFGL1t2v
FUr/U9AkijcZwOtPfV47I1FzswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIof6uEE
okbycWv0HWswfBEC9ZHDMB8GA1UdIwQYMBaAFHoTBEoRGFhsD9oTi7Pr3UhIkU43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVBRi80N0Q1QTdFMDE2
QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdHd1AyaE9Mcy12ZFNFaVJU
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VoTUVTaEVZV0d3UDJoT0xzLXZkU0VpUlRqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEVBRi80N0Q1QTdFMDE2QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdH
d1AyaE9Mcy12ZFNFaVJUamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa89fcyUc0Ml4/GiKeeDfFq2B96XjVykzE0+bdotcCmfXhvms7WDFt7NtIjz+
9dSqYyDb4RxfJ3YoN8ddCuQWRnWyMd9P62arI9y1WRBcl2VWE2CiQQ0q34IzZHvt
OcEBZq7/RVaoJMXjLbMnglWZGppzrIMCvuysv54iPqu6J7Y4fjK0V7+N3ugtOGoH
lC07BoeAiANLM6p2hQIToe1hQDxWYFCvAIYRWdTdyPEDuValzhvJToPpZAbLyTZ8
p86QWILMx8wZykyeOuJmBHXpclPHTSN0fSXvYmO73FNHHP5SLoKorIiftJ9kHtqT
S/dnvq1Kb3QeTo8EQXgvl7kf4g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:19 2026 by rpki-client