
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
File: e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft (raw, json)
Hash identifier: TpaD6iV+2Be2sIYav1ZqeAX/oYRmwAeLKTHu9Mw86dM=
Subject key identifier: 66:BC:35:FA:4C:8E:1B:90:4C:83:12:78:CD:0D:3B:C5:EF:DA:F0:E5
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
Manifest number: 014C
Signing time: Mon 21 Sep 2026 05:28:00 +0000
Manifest this update: Mon 21 Sep 2026 05:27:59 +0000
Manifest next update: Mon 28 Sep 2026 05:27:59 +0000
Files and hashes: 1: e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl (hash: QOEtFalMP4pqwyUFyMgRb5PNcN/Jf342MBcetwRfwYE=)
2: 6DB991F222A311F195E5C95EB3833773.roa (hash: TsyRSdpcyqdq/9uv13YmYRvIQSMzrZWYt0RWLEVXB0g=)
3: 40D442EAE8AB11F0A6A9087C576F56BC.roa (hash: tzLlHJukcx5JOovy2IfMsqt8PmmqcmCex92jH5vGw5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Validity
Not Before: Sep 21 05:27:59 2026 GMT
Not After : Sep 28 05:27:59 2026 GMT
Subject: CN=6ab0c05f-8daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:70:54:09:b6:44:0d:35:23:d1:40:63:40:
26:ff:c5:1d:c6:a6:6f:f0:93:25:e5:90:9d:4a:40:
70:4c:8e:c7:ba:24:d9:8e:44:1b:02:c1:b0:0a:a3:
f5:ea:bc:26:e8:42:03:1e:2b:d7:68:3d:f3:ea:95:
81:09:c0:a6:28:3d:02:8a:2e:86:5b:bd:8d:15:5d:
ed:90:70:23:a5:e6:64:3d:6a:c6:0d:38:cf:69:91:
98:5d:db:76:2a:45:f4:6f:2a:02:e8:73:0c:41:e7:
d1:7c:af:34:f1:07:8a:61:70:ac:45:04:1b:b0:6d:
21:dd:8f:d2:2d:7b:59:a0:d2:cd:ca:c5:af:80:a7:
87:d9:39:c4:62:98:a8:40:42:55:83:c4:79:f2:6e:
64:f5:22:f7:e0:6e:78:d4:66:e2:ec:d3:4f:25:ed:
0a:53:ea:e0:a0:01:02:ab:11:41:01:1a:d4:c8:c6:
52:74:e1:11:d6:b2:7f:b6:36:99:2c:0e:2b:4f:f0:
09:46:ef:f8:1d:ea:e5:a6:21:87:4b:73:c6:3d:ec:
c5:7b:aa:82:6f:fc:ec:f5:45:f4:1e:4a:e4:2e:6b:
b7:04:cf:74:7d:ff:2e:4a:a7:28:e8:41:ba:ae:af:
79:ec:8b:52:1c:7d:96:d8:5e:d3:c4:04:47:82:19:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:35:FA:4C:8E:1B:90:4C:83:12:78:CD:0D:3B:C5:EF:DA:F0:E5
X509v3 Authority Key Identifier:
keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:90:09:f6:fe:11:d9:84:09:58:8b:2a:3a:17:db:aa:e2:6f:
13:4e:f3:57:b9:34:17:18:f8:5c:92:b3:09:a3:4f:26:81:a1:
d2:0f:6e:f9:b9:e9:07:fe:fc:4d:b7:73:3b:cd:4d:e0:75:e5:
87:a9:7e:4f:2e:eb:01:ef:5f:c0:0c:42:f1:93:54:7c:bb:1b:
87:59:c1:a6:83:55:35:27:e8:a9:13:8e:e2:9d:d7:3a:ff:c9:
e4:a4:85:b3:a6:f8:98:d0:8f:c2:d2:01:1a:aa:17:d0:2c:3b:
0b:0d:ea:6d:03:84:25:4a:9f:7e:50:92:5a:b0:ee:ac:6e:5b:
a1:c7:77:12:93:ad:f7:e7:33:d0:26:22:da:dd:9b:e6:d9:bd:
d6:91:b4:d4:1e:81:cb:e1:eb:e6:19:ea:68:70:7f:2e:ec:dc:
0a:b3:2c:b5:76:d3:d9:37:f1:51:78:70:f3:e8:e0:cd:aa:9e:
53:50:73:5c:a2:87:93:51:0f:98:45:73:1e:b5:66:de:85:94:
1b:21:59:76:9e:7c:31:e9:98:3e:2c:90:92:1c:02:2a:1d:54:
ba:fb:e1:60:f7:43:45:11:3e:39:40:b5:df:a8:62:12:f3:f1:
5a:05:b9:4b:6e:8c:b5:bb:8e:d9:0f:23:3c:06:81:2e:3c:e8:
91:64:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:56:24 2026 by rpki-client