
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier: dcNEJjjlTILxED8rJjV3BjT6qssp/HrqkeE3W2bw0uY=
Subject key identifier: C8:AA:F8:F1:18:8A:F6:37:B5:D2:40:E4:4F:FB:A3:8E:03:B4:0D:73
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number: 8F
Signing time: Fri 17 Apr 2026 07:18:35 +0000
Manifest this update: Fri 17 Apr 2026 07:18:34 +0000
Manifest next update: Fri 24 Apr 2026 07:18:34 +0000
Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: G4N504dFqf+s7eMCNlfM60UdndgR5Rp0kDY4C0HXN38=)
2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Validity
Not Before: Apr 17 07:18:34 2026 GMT
Not After : Apr 24 07:18:34 2026 GMT
Subject: CN=69e1decb-da2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:2d:9a:4d:0d:ca:52:fc:6b:5c:c7:da:fc:
f5:9b:da:c1:13:9d:a6:a1:24:8c:54:5f:0b:0b:c2:
11:3b:bd:ea:61:fb:26:24:89:9d:eb:05:99:ed:be:
e7:fe:43:7e:4a:6f:3e:5b:4c:8d:e1:f3:1e:96:6f:
d0:d0:17:f1:8a:08:fa:00:6d:c7:87:82:a2:cc:fa:
7b:86:69:6d:16:ed:7a:32:62:f6:98:93:da:3a:10:
89:11:f4:c5:82:18:5d:de:b1:d9:38:42:fa:28:64:
61:cd:15:38:1e:d7:05:b3:e1:fb:7d:d4:27:3d:87:
0d:84:5b:fa:e1:f5:08:3f:d6:eb:ac:bd:15:55:bb:
84:43:c9:cb:b5:d9:40:89:96:51:76:84:ff:ad:7b:
8f:69:66:bd:d6:7c:2e:1c:ed:e1:cc:ee:c4:8e:1f:
a2:ff:33:0d:ff:1c:5c:5f:2f:1b:a1:7e:68:8c:6c:
52:f6:88:7b:3d:65:68:4d:34:ba:ba:19:8a:dd:a7:
e2:5e:97:e2:df:3e:ce:27:04:41:93:6f:52:de:ae:
bf:6b:5a:df:1c:b7:a7:89:0b:03:d2:65:c6:26:d3:
88:ae:03:21:53:6d:1a:c2:1d:f1:38:99:ba:02:ef:
d8:2c:28:6c:e0:b2:22:59:5c:74:b2:9e:4a:32:e5:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:F8:F1:18:8A:F6:37:B5:D2:40:E4:4F:FB:A3:8E:03:B4:0D:73
X509v3 Authority Key Identifier:
keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8b:ea:1a:0f:15:73:a4:7c:2a:8b:16:9c:36:8e:7c:0f:0e:
96:0e:bb:b5:e8:01:62:ce:2b:e3:9e:91:68:5b:17:64:a9:e3:
95:03:4c:87:b4:43:d6:99:d8:17:78:ae:6b:b9:af:f8:8e:80:
47:58:d7:fc:bd:a8:13:75:42:b6:97:d6:bf:fb:c1:d7:ac:3d:
8c:14:75:cd:83:d3:18:77:fc:5e:8a:4e:c5:e6:da:94:45:73:
20:fa:2c:2c:ab:44:05:65:ed:cb:e3:03:ee:17:fc:6e:76:ec:
00:92:0c:5e:a3:57:65:dd:de:5c:b2:88:8a:fe:fe:1c:69:ff:
25:45:27:20:9a:9c:f7:9d:0b:c5:15:ed:48:c6:f0:05:0a:9b:
63:38:61:1c:61:0a:81:53:64:7d:c0:b2:b8:ee:a3:37:a6:73:
a0:7e:3b:6a:41:c8:68:cd:18:d6:bc:f9:69:cf:08:57:57:c4:
62:94:71:72:58:2d:e1:9d:18:03:77:2c:4f:9d:22:42:6f:f7:
4b:65:01:b1:8f:ec:5a:8c:f5:5a:8f:00:0c:81:53:42:fb:0d:
b5:a3:39:58:d3:cc:ca:62:bb:fb:ef:fc:4a:2b:e8:63:0f:a4:
60:2a:f3:07:7c:00:36:9d:94:32:17:0b:ba:1f:77:32:ef:f6:
1b:5e:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:28:05 2026 by rpki-client