
$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json)
Hash identifier: gCQCT9ivzMf+XILkWpNnXNrkRAdCFN/U/b9R+f64n1o=
Subject key identifier: 43:AD:BE:94:D1:E2:8A:64:32:25:1D:D0:24:AA:5D:8B:B6:7D:78:51
Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Certificate serial: 1301
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
Manifest number: 12F2
Signing time: Tue 28 Jul 2026 17:07:34 +0000
Manifest this update: Tue 28 Jul 2026 17:07:33 +0000
Manifest next update: Tue 04 Aug 2026 17:07:33 +0000
Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: /jYKZGrrMgAnKqt4Nqb7wBv6aM6VhaLGO8In+Zjd7WA=)
2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: W1AVNjvXiALIc751cRSzggmADJNyklSoFWJXhsq/Le0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4865 (0x1301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Validity
Not Before: Jul 28 17:07:33 2026 GMT
Not After : Aug 4 17:07:33 2026 GMT
Subject: CN=6a68e1d6-aea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:e0:c8:99:4e:a0:d0:58:7e:e8:66:5d:3a:
22:a6:e1:9f:6e:77:51:f4:39:b2:fb:ca:4d:57:2b:
43:a8:ab:a9:5e:6e:2d:cf:a1:b1:75:2e:4a:7b:69:
fb:1c:cb:42:f9:43:4d:03:dc:62:4b:26:62:a4:50:
b4:a6:15:fb:61:8c:e9:97:09:39:38:ad:99:51:4e:
80:9f:d2:33:74:81:bf:0b:40:33:62:d1:77:91:13:
e1:ca:95:aa:ee:f5:4a:60:3f:18:00:6c:21:27:9f:
1d:b7:66:3a:1c:f7:0c:68:1a:09:38:67:6c:40:fc:
5f:8d:e3:bc:63:92:d8:c1:80:98:e0:84:9a:6e:54:
93:eb:b7:53:4f:42:0e:c6:a2:00:e4:6b:a2:87:e7:
3a:45:7f:64:ed:ef:1c:13:d2:98:09:91:44:54:56:
00:0f:06:71:f7:a1:b0:34:9e:a3:5a:fc:3b:8e:63:
36:0e:67:f4:40:1e:69:4b:e3:88:7e:50:a7:4a:d0:
d6:e1:dc:e1:c9:ac:11:41:fa:fe:27:cd:57:9f:5a:
07:28:92:21:f0:f3:ad:61:9b:6f:84:c7:68:9a:dc:
02:52:cd:ee:98:29:07:76:17:f5:48:95:10:10:94:
20:28:03:1e:ef:01:02:7c:fc:92:9d:a5:27:18:ee:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:BE:94:D1:E2:8A:64:32:25:1D:D0:24:AA:5D:8B:B6:7D:78:51
X509v3 Authority Key Identifier:
keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d4:7a:2f:04:e8:d2:21:54:f5:2b:15:cc:33:d7:85:f2:db:
55:0c:29:e1:99:95:24:1e:0a:41:49:66:db:57:1c:95:d6:af:
8b:42:49:ce:cd:2d:41:ec:64:84:f6:52:0a:ef:f7:cc:51:dc:
21:b7:1c:1a:ab:d8:e3:a4:10:be:1f:86:6e:09:7c:fe:00:c4:
fe:55:8a:06:6e:38:97:8e:53:ce:d8:9c:d1:0c:f6:df:c3:bc:
10:10:88:33:c4:5e:1c:e0:aa:de:10:f9:43:70:9f:5c:5e:94:
6b:2b:fb:85:01:15:7f:d2:ee:35:7c:8e:df:fe:3b:36:2b:25:
dd:1f:27:5e:59:85:e9:f3:67:23:66:9b:b5:0e:38:48:e0:22:
7f:4f:4f:17:79:c5:7b:e6:f9:5f:23:8d:59:c6:ed:4c:7d:42:
3d:c6:5f:4e:ed:c4:ea:65:f1:b6:d5:05:cc:82:15:cd:ed:86:
fc:20:f3:6e:60:4a:ba:18:22:e2:89:a2:84:75:4a:d0:52:ee:
05:ed:79:30:8c:8b:dd:23:97:5b:ef:5f:ab:d9:b1:f6:39:3d:
72:05:52:dd:58:00:db:7f:54:d5:8f:67:31:72:16:01:c2:d0:
3f:07:55:fa:85:ed:1b:6f:1b:c9:eb:f6:77:bc:a1:81:79:53:
8e:e6:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:31 2026 by rpki-client