
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier: +HQec0ayfHgS5RYbGD3w9qeA0mEfTusfXN5tslyfZfw=
Subject key identifier: D0:3F:E1:CE:DF:F8:30:6F:9D:D8:F4:7D:73:FD:35:F9:A6:8F:B1:89
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number: AB
Signing time: Sat 13 Jun 2026 07:20:27 +0000
Manifest this update: Sat 13 Jun 2026 07:20:27 +0000
Manifest next update: Sat 20 Jun 2026 07:20:27 +0000
Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: s1PYcME2UnNko5KpBVnBJNBj8M2rsUR27Twk3DyBi+A=)
2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Validity
Not Before: Jun 13 07:20:27 2026 GMT
Not After : Jun 20 07:20:27 2026 GMT
Subject: CN=6a2d04bb-7c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:ba:3f:e2:48:e5:8e:8a:4a:6a:45:14:10:
b6:8b:76:61:e7:bd:07:12:d3:f5:b5:70:33:bb:66:
30:b5:d4:29:b9:35:37:72:31:7c:50:d9:3f:b1:eb:
71:37:73:47:84:c2:c7:83:7c:72:cb:6c:45:aa:12:
c2:f1:44:37:31:ea:9d:46:e2:25:a6:2a:c1:b0:4c:
43:b6:54:01:0a:78:06:f8:57:c2:e0:8c:fc:b2:a2:
7c:78:40:01:e5:1b:74:20:22:5b:54:b3:e9:50:33:
a0:39:ae:d0:42:b1:0e:50:a2:55:6e:0e:d8:d9:d2:
9a:7b:13:3f:52:cb:95:da:60:9f:58:22:fc:e5:cf:
1e:a6:18:99:95:c8:a4:78:6c:ce:9c:e8:6e:5c:3d:
f2:e9:eb:72:24:4f:1a:a4:7c:2f:84:2c:93:05:de:
f9:04:5b:7d:d1:b7:81:9f:bc:a3:29:29:8d:be:6f:
27:c4:77:d9:51:34:d1:e3:1d:f1:ce:9f:6e:71:8b:
e8:98:87:cf:72:98:0d:cd:56:d9:27:6e:5d:24:cc:
53:5a:df:41:e1:f5:22:95:e5:27:59:62:4e:6a:98:
10:3f:f2:67:55:cb:49:df:8a:d5:4d:62:c9:51:6c:
ca:04:be:c4:91:12:6a:40:c9:c9:c2:c5:56:59:ed:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:E1:CE:DF:F8:30:6F:9D:D8:F4:7D:73:FD:35:F9:A6:8F:B1:89
X509v3 Authority Key Identifier:
keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f7:9c:0c:26:ff:bd:db:d9:b2:e2:31:cf:2d:31:bf:19:77:
a3:47:97:ca:a4:24:41:1f:ba:68:2d:ca:37:57:70:71:8b:71:
53:4f:b6:4f:26:9e:ac:2e:b5:af:fc:54:8f:49:b2:b8:a6:7d:
3f:09:da:9f:e3:e8:bf:ff:99:d6:7a:c8:e0:12:98:be:b6:57:
24:d7:3d:ef:72:3c:ad:80:6c:cc:44:d5:8c:49:2a:ff:1a:68:
91:24:4c:8d:76:a8:1d:56:5c:8b:5f:90:2d:d0:e4:a5:26:8b:
78:19:bd:ce:34:d2:d5:8e:31:61:80:1a:8a:46:ef:08:ad:71:
e8:46:f5:a9:b0:ac:8a:da:8f:71:ac:da:51:bb:78:a6:e7:cf:
af:59:d3:a6:0f:62:26:f5:74:49:e8:e9:9e:31:c2:56:24:30:
db:0e:77:97:eb:1e:f7:02:c3:9a:00:c9:f7:b3:53:f2:06:20:
c6:58:c4:4f:ce:fb:d5:cd:d9:fe:14:b1:18:33:b0:7f:37:1d:
43:bf:2e:96:53:22:9d:a2:85:2c:aa:cc:50:51:ef:d8:69:b8:
e1:7a:59:f3:9c:8f:6d:8f:97:9b:ce:cd:2b:3f:95:e5:51:87:
22:93:26:ce:42:2a:45:91:fd:38:d6:c7:f9:25:b7:23:f8:fe:
bf:1d:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:39 2026 by rpki-client