
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier: hfwnggVwA/Z2Ah/GHZFh/2+BjUqRAu36XC0WAQKJU6A=
Subject key identifier: C5:F1:38:87:06:4D:8B:66:2D:D4:0C:A1:A9:C1:53:F7:24:A0:DF:D8
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number: 0105
Signing time: Sun 01 Mar 2026 07:07:26 +0000
Manifest this update: Sun 01 Mar 2026 07:07:25 +0000
Manifest next update: Sun 08 Mar 2026 07:07:25 +0000
Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: EZuVGR3ul7Xv8orU4Yb5IPj0XWWLhudMgGVtVwZG/xE=)
2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: uCHzaAIAycwpBc70iXWJQqRjsJQk8uvEaTZJzV9udnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Validity
Not Before: Mar 1 07:07:25 2026 GMT
Not After : Mar 8 07:07:25 2026 GMT
Subject: CN=69a3e5ae-2845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:b8:12:eb:cc:c1:6b:27:c4:71:76:f8:0b:
32:9d:bc:61:e7:4c:2f:92:4a:18:f0:89:25:06:ef:
f6:58:9b:0e:09:39:5d:38:1c:36:f5:9f:d2:11:1a:
d8:42:23:4b:98:d6:4f:d5:6b:79:f7:56:91:b2:d7:
45:69:94:31:6e:c8:71:af:52:a0:c3:a0:13:fb:bf:
d8:45:3e:51:69:66:af:29:a5:17:57:a3:95:85:19:
d6:ea:15:ae:c0:40:0c:58:49:dc:c1:20:d5:61:6e:
fe:94:03:fc:83:20:31:99:1b:f7:9c:7b:4f:66:17:
30:4a:df:df:4d:8d:94:2a:b6:1c:b4:12:6f:10:43:
d8:88:c9:dd:e5:c8:da:f8:60:33:fd:4e:30:74:fe:
f5:ba:4d:95:36:f7:65:58:72:18:ce:d2:80:a8:6b:
57:97:5e:8a:2a:6e:47:e1:95:a5:51:47:91:1a:96:
7b:88:c9:58:47:1a:cd:e9:47:26:ef:c1:25:71:a8:
e6:31:a4:61:dc:49:7f:6c:6e:98:10:40:75:c2:e3:
a7:6b:be:1b:55:d3:ac:03:c4:4c:dc:ec:04:dd:78:
6e:b6:ec:66:56:39:7f:f4:24:b5:90:eb:10:04:6c:
c9:0f:f7:a6:73:0e:86:ee:90:f1:cc:5a:d2:d3:4f:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F1:38:87:06:4D:8B:66:2D:D4:0C:A1:A9:C1:53:F7:24:A0:DF:D8
X509v3 Authority Key Identifier:
keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0f:16:5e:4a:7b:1a:87:ca:6e:84:58:7e:8a:a8:8a:f1:a2:
90:7e:d6:0c:69:3a:f0:0b:88:c4:e2:e9:f1:d4:2c:39:bb:03:
ee:71:f2:af:0c:61:fe:ee:1f:bc:84:22:8e:ce:7c:cd:b1:73:
58:0e:a3:c3:b7:86:84:69:0a:7a:0f:d5:2b:df:2f:48:0d:68:
11:10:7b:05:47:02:fc:8e:a7:ed:99:33:05:a0:9a:9f:08:e8:
ac:63:cd:77:1e:11:7e:89:bd:77:04:11:58:4d:df:2d:5d:15:
bc:ee:c8:97:e2:43:97:9b:34:c0:04:7a:d1:fc:24:ed:d2:6f:
ce:95:0b:97:75:52:4d:16:a9:b0:d9:84:98:df:e5:d7:f9:93:
d8:98:0e:05:63:4d:2f:01:40:57:09:c3:5c:f0:0a:75:4c:61:
2a:53:94:d4:a0:6e:29:c3:8b:02:db:3c:50:9c:e5:88:dc:74:
90:7f:1e:9f:1b:3f:a5:1e:a7:2f:af:33:db:94:05:f9:de:51:
cc:46:7f:67:9e:a3:db:77:a5:95:4d:67:0b:60:39:c2:ef:57:
0b:21:df:33:4e:f6:a4:6b:9a:78:ce:29:ee:2a:bf:d4:e3:86:
fb:a7:a5:3a:cf:78:62:44:d4:54:61:e6:10:66:d1:b0:cb:ac:
72:c1:7c:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I2MzMxMTAvBgNVBAUTKDEzRDdBMTNCNDIzQkI2RTg3QTFBNzVCNzQ5M0YwQkMx
OUQwQ0VBQTMwHhcNMjYwMzAxMDcwNzI1WhcNMjYwMzA4MDcwNzI1WjAYMRYwFAYD
VQQDEw02OWEzZTVhZS0yODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoCC4EuvMwWsnxHF2+Asynbxh50wvkkoY8IklBu/2WJsOCTldOBw29Z/SERrY
QiNLmNZP1Wt591aRstdFaZQxbshxr1Kgw6AT+7/YRT5RaWavKaUXV6OVhRnW6hWu
wEAMWEncwSDVYW7+lAP8gyAxmRv3nHtPZhcwSt/fTY2UKrYctBJvEEPYiMnd5cja
+GAz/U4wdP71uk2VNvdlWHIYztKAqGtXl16KKm5H4ZWlUUeRGpZ7iMlYRxrN6Ucm
78ElcajmMaRh3El/bG6YEEB1wuOna74bVdOsA8RM3OwE3XhutuxmVjl/9CS1kOsQ
BGzJD/emcw6G7pDxzFrS00/BkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXxOIcG
TYtmLdQMoanBU/ckoN/YMB8GA1UdIwQYMBaAFBPXoTtCO7boehp1t0k/C8GdDOqj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EMEFCOTNFNDg2
RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1aDZHblczU1Q4THdaME02
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjYzMy9EMEFCOTNFNDg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1
aDZHblczU1Q4THdaME02cU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsA8WXkp7GofKboRYfoqoivGikH7WDGk68AuIxOLp8dQsObsD7nHyrwxh/u4f
vIQijs58zbFzWA6jw7eGhGkKeg/VK98vSA1oERB7BUcC/I6n7ZkzBaCanwjorGPN
dx4Rfom9dwQRWE3fLV0VvO7Il+JDl5s0wAR60fwk7dJvzpULl3VSTRapsNmEmN/l
1/mT2JgOBWNNLwFAVwnDXPAKdUxhKlOU1KBuKcOLAts8UJzliNx0kH8enxs/pR6n
L68z25QF+d5RzEZ/Z56j23ellU1nC2A5wu9XCyHfM072pGuaeM4p7iq/1OOG+6el
Os94YkTUVGHmEGbRsMuscsF8+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:14 2026 by rpki-client