
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json)
Hash identifier: ib2z4LHq/JV5Q1ELEW9SdNv4jwVPRh7GM9leGAJ6NhU=
Subject key identifier: 33:33:53:3F:57:AA:BF:DF:C4:78:EA:B4:A3:49:19:FF:2D:33:E9:A2
Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
Manifest number: 01D7
Signing time: Sun 01 Mar 2026 04:21:03 +0000
Manifest this update: Sun 01 Mar 2026 04:21:03 +0000
Manifest next update: Sun 08 Mar 2026 04:21:03 +0000
Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: HUNvwtHlGt8CVwuHbkIbUBi45MbKElOi6pkYwb9gaQc=)
2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: XSFRkZJmP/HXNKWByOtON4ixbfaAh9u2jDNWWqtCP4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Validity
Not Before: Mar 1 04:21:03 2026 GMT
Not After : Mar 8 04:21:03 2026 GMT
Subject: CN=69a3beaf-e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7f:93:e2:70:3c:5d:60:44:9d:6b:71:73:05:
46:96:6f:86:bf:5e:8e:16:18:0e:ca:ff:16:31:62:
d2:7d:6e:c9:5a:30:47:4e:d8:2d:4b:f3:8f:48:4a:
92:1c:9b:2d:7e:65:bb:70:b3:3b:90:ad:7f:72:1f:
47:cc:ce:a7:2a:c7:2b:90:1a:54:36:37:a4:1f:c8:
6a:94:38:cc:73:d8:43:08:4f:46:8c:42:e5:dd:4a:
32:1c:82:88:23:27:ab:e8:d0:a9:b5:b8:07:1d:86:
43:ae:1d:c5:d0:33:4a:0a:71:e8:ac:e0:a1:47:f8:
cc:4b:79:ce:ab:ce:02:b9:e1:d4:f6:3b:69:1a:19:
4d:2d:40:57:eb:b2:23:a5:89:b9:f1:c2:8b:bb:57:
6e:09:d1:05:d0:dd:14:99:0f:a5:8e:37:38:cb:84:
d9:82:2f:56:fa:45:6d:cc:12:85:54:e0:e1:bc:d4:
60:a9:a6:b0:37:61:46:95:e0:b2:f3:f3:30:69:a9:
d2:5f:b1:13:fc:b8:67:0d:d3:7a:05:b1:6c:1a:18:
41:9b:01:76:c4:ef:8a:bf:17:f5:5c:09:a1:92:b1:
cb:8b:bd:92:30:9f:4b:e2:08:18:66:83:6a:70:d8:
7e:e4:7f:a8:a1:d5:4a:26:8e:fb:56:5a:7e:43:c0:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:33:53:3F:57:AA:BF:DF:C4:78:EA:B4:A3:49:19:FF:2D:33:E9:A2
X509v3 Authority Key Identifier:
keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:3a:7f:58:1f:44:f5:87:87:42:da:49:1b:25:18:47:fa:01:
a8:7f:8f:ab:6d:ea:79:b6:1c:97:64:d3:ab:df:c9:6b:b2:ba:
b1:4a:44:8f:6b:0c:42:71:ed:c9:66:a9:8b:4e:8c:ee:d0:da:
4d:54:3e:fd:3f:45:2d:d6:72:ed:97:6f:29:31:6e:1c:10:62:
da:71:0f:10:53:17:25:63:97:f9:cd:f1:67:73:97:72:5c:c3:
20:1a:ab:10:ba:48:fa:85:53:c6:b1:7e:c1:2e:4e:32:33:5a:
c8:33:e9:5c:df:2a:59:8b:18:48:dd:e3:33:93:8d:9b:92:83:
f9:d7:11:f3:ea:b7:68:09:3d:1a:ca:93:f0:8f:14:75:48:9d:
fe:ca:99:2f:c9:9d:44:57:04:24:77:b9:4e:64:36:1d:f5:43:
8e:35:4e:94:63:54:04:95:43:4d:c7:54:f9:29:11:da:c8:64:
a9:04:6c:ae:ac:ea:1a:56:29:06:b5:6b:00:62:c0:a4:08:20:
45:bf:a7:68:f4:e6:87:99:86:4a:89:cd:dd:2a:03:53:70:33:
32:c2:41:25:08:1c:ea:90:3c:a0:c2:05:62:1c:97:90:61:9f:
8b:1b:08:c8:66:bd:b2:f8:82:2b:71:5c:29:fe:41:d8:6f:ad:
a9:02:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:29 2026 by rpki-client