
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier: 9MHEAuefUr2pVUFJC7YkQqQKR9QKxhqgEorfZRFEQQ0=
Subject key identifier: F8:7D:A2:BD:09:5C:02:FA:23:0F:F6:D4:43:7E:09:D3:A6:C3:03:4A
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number: 016F
Signing time: Wed 29 Jul 2026 06:01:37 +0000
Manifest this update: Wed 29 Jul 2026 06:01:36 +0000
Manifest next update: Wed 05 Aug 2026 06:01:36 +0000
Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: zHSc/SKjInalpEIH0/rKKcQmXIYijcSquBi5midjIZ0=)
2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: sWmhw22xeirzBkTQzvvE9hJncBsWONWyuiN7pZYxdxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Validity
Not Before: Jul 29 06:01:36 2026 GMT
Not After : Aug 5 06:01:36 2026 GMT
Subject: CN=6a699741-984f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:18:a7:bf:42:a5:ff:03:d9:12:cc:89:2c:
e0:14:17:02:73:e0:ea:18:c3:83:52:2d:0b:7d:21:
e8:78:5d:d8:20:d4:1f:8f:55:ab:04:d8:83:22:65:
5e:d4:d0:78:b0:17:99:ea:43:ad:79:ed:1b:77:02:
2a:bb:5a:1b:8c:fa:be:c6:47:b4:c0:26:c1:61:e3:
38:0b:98:04:76:3a:79:29:4d:78:f2:87:2b:03:3c:
93:ac:c9:70:b3:df:14:50:79:b1:d5:64:b7:68:be:
f0:29:a8:6e:da:e4:df:f4:de:5a:dc:78:ac:db:db:
6f:70:04:52:99:c3:e6:94:5b:66:61:56:63:55:4f:
24:c6:a7:ee:d1:b8:c9:80:4b:0b:79:b0:93:e6:cd:
9d:89:a5:c2:d3:56:7c:0d:99:1c:eb:62:ed:9e:81:
eb:39:d8:bf:69:d0:60:2b:bf:f3:aa:de:03:5c:ca:
1b:5b:90:52:db:91:84:ee:57:01:4e:e3:2d:fe:62:
6a:d6:7e:f1:72:dc:bc:1f:62:1b:32:25:cc:1c:ce:
0e:67:e0:07:60:cc:de:17:57:0f:de:7b:52:48:0e:
1f:49:19:e1:ff:ca:b1:42:ea:4c:d5:67:56:14:dd:
90:2b:e1:c5:c8:ef:83:e8:4e:1d:6b:b1:b8:cb:21:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:A2:BD:09:5C:02:FA:23:0F:F6:D4:43:7E:09:D3:A6:C3:03:4A
X509v3 Authority Key Identifier:
keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:59:fa:22:5b:0e:17:36:db:51:85:6a:63:4a:c1:60:37:37:
72:80:40:e1:18:dd:f1:4f:f6:ff:ae:64:e0:a5:fd:a2:44:95:
45:50:07:02:37:71:9e:c1:a4:fc:a8:d2:dd:ac:a8:cd:3f:5d:
98:76:35:df:1d:d1:39:0f:10:b3:cb:45:46:37:b2:3c:7f:8f:
48:cc:b4:10:af:da:0e:82:1b:b6:39:4f:91:53:df:c0:e8:03:
d1:69:8c:17:73:02:8d:ae:e2:df:2d:1d:49:c3:05:16:81:76:
10:12:22:1a:56:32:c1:68:82:30:ff:b8:25:b7:f5:95:14:c9:
13:9e:d6:95:ac:dc:8c:8c:90:c1:22:dd:f6:30:a2:34:46:bf:
dc:41:d9:db:eb:5f:4e:bd:dc:68:64:49:9a:5b:51:ff:f0:9d:
a0:97:a4:5f:bf:aa:1b:c2:ed:0f:43:d1:30:ee:47:cc:66:75:
02:5b:58:ae:a3:bb:8c:81:f9:d2:21:68:6c:23:a9:50:7e:22:
14:72:ae:39:1b:1d:44:3a:af:b1:83:5c:fd:98:38:83:88:69:
74:a3:03:6a:74:12:41:1c:6f:49:47:79:ad:5b:c2:fd:9d:d6:
a4:28:a1:65:2a:ee:20:b0:06:08:5b:b2:d5:86:80:4e:d0:e3:
24:0c:8d:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU5NjQxMTAvBgNVBAUTKDExNkYwQTJBNkE0QjkyNDJENzdBMjUwQjcxNzAwODE1
RDI5OEREQjkwHhcNMjYwNzI5MDYwMTM2WhcNMjYwODA1MDYwMTM2WjAYMRYwFAYD
VQQDEw02YTY5OTc0MS05ODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiEYp79Cpf8D2RLMiSzgFBcCc+DqGMODUi0LfSHoeF3YINQfj1WrBNiDImVe
1NB4sBeZ6kOtee0bdwIqu1objPq+xke0wCbBYeM4C5gEdjp5KU148ocrAzyTrMlw
s98UUHmx1WS3aL7wKahu2uTf9N5a3His29tvcARSmcPmlFtmYVZjVU8kxqfu0bjJ
gEsLebCT5s2diaXC01Z8DZkc62LtnoHrOdi/adBgK7/zqt4DXMobW5BS25GE7lcB
TuMt/mJq1n7xcty8H2IbMiXMHM4OZ+AHYMzeF1cP3ntSSA4fSRnh/8qxQupM1WdW
FN2QK+HFyO+D6E4da7G4yyEfVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPh9or0J
XAL6Iw/21EN+CdOmwwNKMB8GA1UdIwQYMBaAFBFvCipqS5JC13olC3FwCBXSmN25
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GNTMxRURFNDVC
MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtrTFhlaVVMY1hBSUZkS1kz
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNiay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtr
TFhlaVVMY1hBSUZkS1kzYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgVn6IlsOFzbbUYVqY0rBYDc3coBA4Rjd8U/2/65k4KX9okSVRVAHAjdxnsGk
/KjS3ayozT9dmHY13x3ROQ8Qs8tFRjeyPH+PSMy0EK/aDoIbtjlPkVPfwOgD0WmM
F3MCja7i3y0dScMFFoF2EBIiGlYywWiCMP+4Jbf1lRTJE57WlazcjIyQwSLd9jCi
NEa/3EHZ2+tfTr3caGRJmltR//CdoJekX7+qG8LtD0PRMO5HzGZ1AltYrqO7jIH5
0iFobCOpUH4iFHKuORsdRDqvsYNc/Zg4g4hpdKMDanQSQRxvSUd5rVvC/Z3WpCih
ZSruILAGCFuy1YaATtDjJAyNlA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:30:30 2026 by rpki-client