
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier: ewSJnlLLzadLuqCg+79kcEWewohkltszy2OfwOynnV0=
Subject key identifier: D5:17:B3:64:65:2D:54:56:D7:F4:A9:96:7C:C2:C3:70:FD:91:6E:3D
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number: 013B
Signing time: Sat 13 Jun 2026 05:23:57 +0000
Manifest this update: Sat 13 Jun 2026 05:23:57 +0000
Manifest next update: Sat 20 Jun 2026 05:23:57 +0000
Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: t+5AqEFFes6kNNIfBMQfLwbK/udEWeMhmOaFU7OWWSI=)
2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Validity
Not Before: Jun 13 05:23:57 2026 GMT
Not After : Jun 20 05:23:57 2026 GMT
Subject: CN=6a2ce96d-0a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:60:51:67:dd:f0:be:58:20:c7:b4:72:1a:
70:65:bd:71:ae:53:ba:28:d3:54:0a:9e:91:c9:5f:
eb:a3:14:54:91:67:a1:10:5c:7f:3d:3e:09:f9:6f:
ec:ed:09:83:64:b0:b8:f6:44:32:7c:2a:94:e0:2f:
96:d7:be:25:5a:17:5c:53:d3:b1:56:c0:1d:3d:ac:
c3:f0:d9:2c:71:6c:90:23:51:a3:ed:fd:e0:99:16:
57:3f:d7:4f:24:26:71:af:21:02:f2:4d:1a:82:be:
39:54:47:4c:c2:e4:41:be:43:f0:63:dd:54:04:c4:
33:88:65:65:78:da:9b:6b:7b:30:35:2b:29:9e:71:
f1:bd:57:21:34:a2:ea:9b:1e:9c:65:ad:f5:4e:5e:
2c:e6:01:75:6a:9f:bd:2a:4a:6c:d4:01:65:b6:61:
81:01:b9:ed:fd:c9:c6:9a:aa:24:fc:77:41:ee:e8:
0c:e5:c3:93:44:79:4f:17:ff:12:86:9b:b9:b6:a2:
4f:91:36:a6:f0:36:fb:4b:d0:49:81:7a:c8:95:15:
9d:17:26:e1:16:fd:31:ba:4e:1f:bc:10:84:6d:53:
91:53:a6:bf:4e:7c:2e:a6:fd:4b:16:55:ca:91:d4:
58:26:ef:8e:8d:79:a1:67:55:f7:e5:cf:a4:27:7d:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:17:B3:64:65:2D:54:56:D7:F4:A9:96:7C:C2:C3:70:FD:91:6E:3D
X509v3 Authority Key Identifier:
keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:47:0c:8f:07:75:5b:af:cb:6c:ca:d9:18:ae:a1:6e:42:7e:
dd:35:be:89:87:02:5c:43:ef:1b:41:aa:60:93:76:48:4e:da:
84:3a:f2:c8:34:12:01:bc:3c:09:f4:58:f9:24:c1:98:1b:ed:
33:f8:ce:e7:e4:83:d9:a2:e2:c1:fe:82:98:fa:c3:27:5c:5e:
bc:b1:59:78:7a:b7:2f:55:a9:d0:5a:2c:41:d8:d3:38:c4:61:
43:57:24:9a:b9:eb:a8:43:b6:03:83:37:02:ad:cc:42:dd:cd:
77:f7:3d:fc:29:a8:95:0f:34:b4:c0:3c:36:e6:94:93:22:e3:
d5:de:c6:f9:3a:14:55:00:20:d4:e8:14:21:c4:44:67:37:a9:
28:c0:9e:e1:4d:95:2b:9f:3a:77:75:2f:66:51:2d:02:b8:0b:
bb:e6:28:ea:6f:84:e4:93:67:37:a0:5d:40:64:05:33:30:20:
70:1c:fe:9c:ea:90:f6:5f:79:95:23:5c:08:6a:0f:c7:92:85:
4a:54:ad:7a:af:bc:db:d9:94:0e:52:f1:02:c2:73:c8:74:e1:
61:2c:d1:6d:3b:82:94:1b:58:ed:e2:4e:7a:c8:ae:3b:4b:66:
0f:f5:3a:c8:9d:05:f9:57:8d:bc:c7:c6:fe:86:7b:1f:33:0f:
e2:de:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:16 2026 by rpki-client