
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json)
Hash identifier: 5GAp6fTeJuihGTsNexz0U2XZ5cbpSyEK2c+7aujbXY8=
Subject key identifier: 54:38:58:09:F6:24:1D:01:77:6D:97:BE:51:6B:31:AD:DF:8D:11:26
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial: 3539
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
Manifest number: 3531
Signing time: Thu 16 Apr 2026 14:59:01 +0000
Manifest this update: Thu 16 Apr 2026 14:59:00 +0000
Manifest next update: Thu 23 Apr 2026 14:59:00 +0000
Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: TsTImfu9DDB6NwUo9TP23coaiu18Ax4dJAklJ9rBKnk=)
2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: rVRbPt1BenVXJcwysqQm7AgwLvDB5H+rVBMsAeEXCxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13625 (0x3539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Validity
Not Before: Apr 16 14:59:00 2026 GMT
Not After : Apr 23 14:59:00 2026 GMT
Subject: CN=69e0f934-4444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:74:09:ee:b7:3b:20:ac:01:f1:aa:79:02:
6a:4c:c7:df:f6:c1:37:77:6f:3b:f5:d6:00:33:16:
8f:a0:d1:99:aa:95:54:f5:f6:70:24:bf:c7:71:dd:
62:f0:c7:54:a7:7a:8c:1f:8e:6e:59:12:a9:cc:db:
47:0e:cc:3e:6b:26:d9:c0:e0:70:2b:33:ac:e8:fa:
6f:19:f7:c6:e2:c2:d6:da:cd:03:2c:44:11:06:62:
db:20:e3:cd:b5:7b:9e:c2:25:1e:58:72:80:1c:a6:
32:5a:9d:9c:69:d8:0c:5d:11:f9:db:45:5c:39:ac:
30:98:f5:df:0a:fc:76:b8:cf:64:51:7e:41:d6:1b:
25:e4:b8:bf:fb:b3:f6:f3:70:c8:3c:fe:b4:29:7e:
79:ed:9e:a5:ac:58:20:dc:fd:ec:cf:ce:ea:da:a1:
f6:50:ce:04:cd:9f:7f:93:9e:15:40:74:8c:8e:98:
c2:df:42:3c:db:2c:55:02:29:79:4b:26:cc:d7:a6:
14:82:1c:42:99:6e:06:c6:42:89:6d:bd:7d:ce:ad:
fd:a4:f4:92:87:05:5f:6a:89:ee:7a:40:87:58:5a:
d4:82:2f:b8:b8:bb:9b:c8:ae:a2:3b:5a:58:98:a4:
28:b0:2f:a2:90:1b:8d:8a:3d:d0:e8:39:48:d6:41:
5a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:38:58:09:F6:24:1D:01:77:6D:97:BE:51:6B:31:AD:DF:8D:11:26
X509v3 Authority Key Identifier:
keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:26:f9:39:1b:44:8b:a4:01:58:73:80:01:93:ac:a3:9d:03:
59:53:2b:6d:99:88:ad:e3:11:70:2e:61:e3:7e:2a:dd:c3:e5:
99:ad:b0:b0:3e:77:82:64:30:44:5b:8d:c1:af:47:95:bd:87:
41:3f:91:d6:7e:d5:5d:70:d1:aa:ae:0a:6a:4b:e8:c5:3d:8b:
93:60:8c:5a:48:46:e3:0c:b3:73:6c:18:0b:f1:cb:87:b2:76:
da:e5:2f:38:d9:37:5c:d4:8f:84:35:bc:b8:95:82:30:20:b5:
b3:a1:7d:6b:f8:32:98:e7:c7:2c:50:23:40:b5:55:c2:4f:39:
f0:7a:94:fa:e1:46:dd:4b:c7:32:bc:e6:71:4c:37:79:ee:8d:
51:e9:0f:92:cf:cd:ed:00:0f:f5:75:a4:b8:27:90:80:a5:2e:
84:1f:43:e4:12:f1:6d:1f:fc:df:fc:ad:72:c7:8a:1e:70:f4:
95:29:9d:82:1a:62:ed:37:fa:cc:d5:2a:35:6b:8f:75:8d:ff:
c1:64:6b:b9:92:f0:bd:04:f3:b8:74:98:35:69:3b:1a:16:9b:
1e:cc:bf:54:79:14:ea:2b:e2:43:85:8b:34:f8:94:ce:fe:0e:
9c:a4:d0:32:43:fa:16:52:f7:d1:12:03:89:cf:15:f2:8f:42:
80:db:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:54 2026 by rpki-client