
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json)
Hash identifier: TuXth122ItpjEw9VKAM0++OmGF+rCpSl4MUIPciku94=
Subject key identifier: CE:B7:6E:68:DA:10:63:60:8C:BC:6D:ED:15:C6:44:37:79:1F:07:8F
Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
Manifest number: 01F1
Signing time: Fri 17 Apr 2026 03:03:40 +0000
Manifest this update: Fri 17 Apr 2026 03:03:40 +0000
Manifest next update: Fri 24 Apr 2026 03:03:40 +0000
Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: KSKbbP3lpGLSYS42lwzvIwalpF6/KxQYotekOlHRio8=)
2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: hqi4EfEByf7DRDdVKKEhuybFmu2vxbKyTHgj9BM/DRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Validity
Not Before: Apr 17 03:03:40 2026 GMT
Not After : Apr 24 03:03:40 2026 GMT
Subject: CN=69e1a30c-1721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:54:3d:c9:ae:2e:7e:2d:3f:a8:b6:18:af:
b8:5c:d7:77:ba:76:c6:80:9d:be:9c:41:c2:22:8a:
75:ad:37:a1:60:35:e2:45:a6:bf:f6:84:26:3f:c4:
0d:6f:b2:9e:4b:c2:85:3a:cf:89:45:fc:55:9b:c5:
bd:df:05:ad:26:7c:a8:6d:18:f2:61:ba:37:1b:9f:
a2:b7:d4:f6:58:04:05:d2:ef:66:b1:30:0e:65:c8:
c7:4a:de:4f:20:e0:23:e2:a4:7c:77:6c:4f:e6:a8:
e3:eb:45:82:c5:20:99:40:30:f1:27:fc:42:9f:8a:
22:1c:17:a2:ef:a3:cb:c5:74:21:40:e8:c0:1a:fc:
44:37:16:4d:85:0f:9a:e8:07:43:87:cf:00:4d:1a:
75:8d:a2:05:38:d2:11:9e:35:1d:b3:f7:b9:b9:77:
99:a9:da:14:98:53:9f:ff:f6:51:a1:3a:8f:4d:e9:
ba:37:c1:2a:8f:22:9b:cf:fa:25:96:21:c7:00:db:
a5:93:0c:3c:6d:79:a4:f7:0c:ad:ef:60:c8:e4:f9:
2c:53:e2:66:b5:49:f6:0e:14:07:54:bf:b0:91:d8:
27:46:1b:50:06:93:68:ab:5a:4b:ea:1a:76:a2:ba:
f4:db:98:d8:b5:cb:13:99:4b:42:93:e1:1b:37:e9:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B7:6E:68:DA:10:63:60:8C:BC:6D:ED:15:C6:44:37:79:1F:07:8F
X509v3 Authority Key Identifier:
keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:42:74:b4:57:9f:73:18:e6:24:66:d7:5b:22:5c:9f:00:77:
aa:6a:df:db:e8:b2:d9:e4:1a:cc:a3:cc:87:fd:51:e9:89:04:
6c:3e:bb:44:14:54:b2:31:2a:74:34:1d:de:93:a4:d5:05:b9:
ad:3b:9d:e1:35:6e:c8:a0:76:82:a5:11:6c:10:f9:7a:0a:f8:
0f:f5:fc:e1:66:e4:26:9c:92:b7:e8:1c:d5:52:14:3e:36:eb:
8f:2a:db:f3:25:f6:b1:4a:fe:34:bd:f2:f5:b8:26:c3:de:c5:
8a:6b:76:a2:bd:ec:51:58:dc:f4:1c:2d:f2:19:31:39:96:34:
d4:03:5f:2b:fe:bd:b8:72:9b:83:12:fc:bb:75:f6:69:f2:63:
31:3c:f7:93:ec:3b:b0:3a:97:37:9a:b1:7b:20:c1:50:9f:f9:
97:d4:49:c9:de:f5:2a:8c:ea:07:a3:fe:69:5f:f0:76:cf:c0:
fa:21:42:d9:d1:16:cf:9b:70:3f:ba:56:fb:20:67:2f:c9:82:
b2:ac:de:e9:5e:05:37:0a:53:df:47:5f:5c:2a:00:1b:ad:4c:
56:c0:71:38:56:6f:4e:d6:7b:6e:6c:4a:c8:97:7c:ff:53:ee:
0f:3b:33:5d:5e:9c:18:7e:a9:51:48:6c:0c:5b:c5:52:c3:03:
2c:fb:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:07 2026 by rpki-client