
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier: SsqAgbB8GfozOcpjPp6d+r3a/QKHKU5OWyKb0whvVnc=
Subject key identifier: A5:45:F0:71:F6:4D:0A:39:B5:4E:C6:08:DF:53:35:92:07:2E:2C:75
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial: 030A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number: 0305
Signing time: Fri 17 Apr 2026 01:08:07 +0000
Manifest this update: Fri 17 Apr 2026 01:08:06 +0000
Manifest next update: Fri 24 Apr 2026 01:08:06 +0000
Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: v8jJm12rE+5juEJqOxPOXqzAIFb20A7FcKCbsNEzIKo=)
2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: DPKmCzo8hJ9V5Pt+bf8wNdW3775xVd0a/v/XhzNF8ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Validity
Not Before: Apr 17 01:08:06 2026 GMT
Not After : Apr 24 01:08:06 2026 GMT
Subject: CN=69e187f7-f0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:74:70:19:ad:03:7d:9e:18:4a:1c:db:74:
cd:5a:23:f2:4b:99:79:ff:3b:83:5b:24:31:ef:c3:
85:7e:8a:74:50:77:3a:cb:b3:09:00:35:4f:23:2e:
d0:44:6c:c8:a3:60:b8:4d:b7:57:21:1b:b0:a3:30:
b8:00:5b:96:73:3a:aa:c3:43:c3:aa:a3:03:3e:c6:
1c:c3:b9:f4:ff:d2:4c:83:59:e1:58:bd:f5:fe:d0:
59:59:fe:17:70:f7:cc:53:63:91:ff:37:7e:b3:93:
c9:b8:a0:0e:5d:46:91:cd:f0:29:83:29:48:4c:d8:
cd:19:38:db:8e:62:ac:ee:16:e2:b7:e4:6e:3b:b8:
d8:88:57:7a:70:bf:58:c0:b2:47:a3:13:00:a6:5a:
de:38:8a:5c:35:fc:b7:4e:05:fe:6e:03:7a:0c:40:
d4:79:9f:49:6d:94:65:c5:7d:6a:6e:3c:a2:88:38:
ae:da:d5:02:df:22:2f:90:25:91:eb:a2:5d:1a:60:
e7:83:61:e9:cd:e4:bb:53:33:b5:37:58:0a:a3:c0:
0a:2b:74:46:0d:af:93:89:32:83:8b:4d:38:91:53:
3a:e8:9f:63:3e:3a:8d:77:89:ae:16:c3:97:2c:01:
8d:2d:94:48:b2:7a:66:88:2f:67:f2:26:cc:7a:97:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:45:F0:71:F6:4D:0A:39:B5:4E:C6:08:DF:53:35:92:07:2E:2C:75
X509v3 Authority Key Identifier:
keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:48:46:e9:30:97:1d:1e:ad:d5:94:ff:1e:ff:1f:93:f1:
44:11:06:de:77:b6:dd:04:4c:ff:22:e1:ed:55:8f:b0:17:33:
ab:05:d9:c1:a8:1b:00:05:d4:dc:01:6f:1d:b4:40:74:30:2d:
ac:5c:8b:6f:87:48:d5:7c:66:6b:c5:4e:70:d5:02:3e:4b:67:
29:15:e7:e6:c4:94:aa:4b:24:a2:dc:c7:ab:ff:f3:72:15:0a:
eb:11:e4:69:b0:01:d0:55:d5:33:cf:de:6f:19:e9:2a:cb:ab:
e6:5d:b7:37:eb:20:94:9e:12:84:f0:35:ee:ba:14:db:63:a5:
8c:6b:d3:7d:17:fc:72:a4:e5:e2:5f:8c:e0:27:1f:3c:b1:00:
47:c4:01:3c:7f:b6:a4:97:f7:f2:2e:51:c1:f9:56:df:7b:c2:
b8:c7:44:6b:4b:14:82:7f:18:03:e2:18:2b:2b:c8:76:4c:a6:
42:c4:0d:71:4f:b6:92:51:b0:45:65:77:08:3f:af:d8:ad:75:
b3:8a:27:fb:61:13:d0:07:77:62:39:67:cc:0f:b4:36:14:bf:
28:ba:7a:c2:23:10:33:bf:dd:9b:18:7f:45:19:66:c3:01:ac:
e2:45:f5:ce:6b:b3:a1:24:25:a6:8a:d0:0c:61:be:19:6a:c4:
8a:b7:ec:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRFQUYxMTAvBgNVBAUTKDdBMTMwNDRBMTExODU4NkMwRkRBMTM4QkIzRUJERDQ4
NDg5MTRFMzcwHhcNMjYwNDE3MDEwODA2WhcNMjYwNDI0MDEwODA2WjAYMRYwFAYD
VQQDEw02OWUxODdmNy1mMGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzKR0cBmtA32eGEoc23TNWiPyS5l5/zuDWyQx78OFfop0UHc6y7MJADVPIy7Q
RGzIo2C4TbdXIRuwozC4AFuWczqqw0PDqqMDPsYcw7n0/9JMg1nhWL31/tBZWf4X
cPfMU2OR/zd+s5PJuKAOXUaRzfApgylITNjNGTjbjmKs7hbit+RuO7jYiFd6cL9Y
wLJHoxMAplreOIpcNfy3TgX+bgN6DEDUeZ9JbZRlxX1qbjyiiDiu2tUC3yIvkCWR
66JdGmDng2HpzeS7UzO1N1gKo8AKK3RGDa+TiTKDi004kVM66J9jPjqNd4muFsOX
LAGNLZRIsnpmiC9n8ibMepdgOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVF8HH2
TQo5tU7GCN9TNZIHLix1MB8GA1UdIwQYMBaAFHoTBEoRGFhsD9oTi7Pr3UhIkU43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVBRi80N0Q1QTdFMDE2
QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdHd1AyaE9Mcy12ZFNFaVJU
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VoTUVTaEVZV0d3UDJoT0xzLXZkU0VpUlRqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEVBRi80N0Q1QTdFMDE2QzMxMUVEQUU3RUI5NTVDNEY5QUUwMi9laE1FU2hFWVdH
d1AyaE9Mcy12ZFNFaVJUamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIThIRukwlx0erdWU/x7/H5PxRBEG3ne23QRM/yLh7VWPsBczqwXZwagbAAXU
3AFvHbRAdDAtrFyLb4dI1Xxma8VOcNUCPktnKRXn5sSUqkskotzHq//zchUK6xHk
abAB0FXVM8/ebxnpKsur5l23N+sglJ4ShPA17roU22OljGvTfRf8cqTl4l+M4Ccf
PLEAR8QBPH+2pJf38i5RwflW33vCuMdEa0sUgn8YA+IYKyvIdkymQsQNcU+2klGw
RWV3CD+v2K11s4on+2ET0Ad3YjlnzA+0NhS/KLp6wiMQM7/dmxh/RRlmwwGs4kX1
zmuzoSQlporQDGG+GWrEirfsZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:08 2026 by rpki-client