
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier: COSLMd8a4AXUBhrHYVo0Ofd/sGHTidmz08wpVJDx2gs=
Subject key identifier: 60:20:78:34:AF:8E:50:34:56:AF:95:20:89:42:A2:5F:B7:0E:CD:53
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial: 0783
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number: 0767
Signing time: Fri 12 Jun 2026 21:41:47 +0000
Manifest this update: Fri 12 Jun 2026 21:41:46 +0000
Manifest next update: Fri 19 Jun 2026 21:41:46 +0000
Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: crV0YJnafUDoKOha2bbposxDuYekf0F2TIpooz5FBtc=)
2: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: +jvdYVRVCKb9nHFb/a4hVukxgRDPU2GYfvLDSqD8lQ4=)
3: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: XPvB+vFL16oisT/9uSlsAmizDeWHyhaJXzNkKeUA27M=)
4: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923 (0x783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Validity
Not Before: Jun 12 21:41:46 2026 GMT
Not After : Jun 19 21:41:46 2026 GMT
Subject: CN=6a2c7d1a-9464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:c7:2c:5e:cc:d2:23:86:51:6e:fc:f0:70:
a0:57:c6:cf:f1:6e:bd:e7:9e:a4:3d:63:a0:7d:cd:
04:60:af:56:77:31:0e:04:3f:fa:6b:b2:24:51:39:
12:42:a1:f8:24:36:b4:68:ab:6f:15:a9:87:41:b9:
35:52:c6:b1:f4:d5:49:d1:5d:a5:7e:26:38:1e:0e:
4b:95:88:34:2a:fc:e7:4d:63:9b:85:d1:37:9e:32:
fd:a0:f3:4c:71:98:b8:15:8b:0b:15:30:a5:a8:4d:
46:6f:1b:08:0f:cd:b1:f1:2b:b5:b3:4e:32:f2:bc:
4e:0d:01:08:2b:0c:05:2e:ae:d0:a1:3b:91:1b:93:
0c:4a:66:f2:20:6a:ca:bb:72:d5:db:56:7c:33:0d:
08:dd:70:32:a0:f7:5c:76:44:9f:90:ac:21:ba:68:
db:eb:a4:1d:8e:33:e9:2b:35:26:9a:f2:c7:e1:65:
1c:e3:41:e4:93:48:0f:ad:fa:5b:e6:bb:02:39:60:
cf:b1:4b:aa:f4:d7:84:ae:56:19:bb:02:66:71:21:
3c:82:4f:e9:3b:39:38:7a:cb:f9:a4:ab:f2:8d:37:
d4:a1:a6:96:1e:33:74:0a:db:f1:f0:2e:ea:af:26:
b2:97:80:b4:33:aa:34:1c:cd:78:d8:61:b0:8d:b1:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:20:78:34:AF:8E:50:34:56:AF:95:20:89:42:A2:5F:B7:0E:CD:53
X509v3 Authority Key Identifier:
keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cc:02:8b:8f:21:c1:5a:61:b5:29:75:ab:2a:20:08:eb:4a:
0d:bd:e4:86:d8:1a:7f:22:fe:15:92:66:98:11:19:06:d2:f8:
61:a8:90:07:2e:f4:94:2e:49:11:25:05:c2:56:48:ea:27:5d:
c8:d2:f8:f5:b2:74:ef:6d:a7:3d:db:a4:ed:de:3d:3d:91:7d:
0f:e1:32:e9:72:0e:37:cb:92:fb:f6:2c:d0:5f:2b:ec:d0:55:
8b:b4:94:7e:fd:a5:06:82:50:0e:9f:c0:9e:48:f8:9c:f6:21:
8e:51:63:95:66:c1:7f:8b:67:5a:bc:06:b9:63:6c:d1:54:e7:
e7:24:0b:a5:35:d4:b1:fe:93:af:a1:c0:5e:c5:6f:c4:ca:4e:
62:ea:54:8a:2b:37:f9:e7:aa:2c:6a:bf:52:66:4f:66:88:f6:
af:6b:8b:a6:66:b3:1d:e4:96:6a:3b:99:68:10:9f:66:f7:a9:
13:12:35:a2:95:9a:71:1c:da:dc:dd:34:7b:f0:84:77:a3:0b:
b9:f9:5c:c3:ff:79:13:2b:be:29:bc:52:a8:d8:41:0f:e5:f4:
4a:d4:72:f5:8c:c7:ae:33:fa:f6:ff:5d:ac:b1:f2:52:77:dc:
87:d9:fe:7a:67:07:a1:88:18:a5:51:e6:b1:df:a0:93:d3:93:
3a:e4:fc:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI1RkUxMTAvBgNVBAUTKDEyMTA5NTgzMDIzRTE4NURFNEEyQjI5NDIzMTU5OUQ2
MzY0MEJDOUEwHhcNMjYwNjEyMjE0MTQ2WhcNMjYwNjE5MjE0MTQ2WjAYMRYwFAYD
VQQDEw02YTJjN2QxYS05NDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyMPHLF7M0iOGUW788HCgV8bP8W69556kPWOgfc0EYK9WdzEOBD/6a7IkUTkS
QqH4JDa0aKtvFamHQbk1Usax9NVJ0V2lfiY4Hg5LlYg0KvznTWObhdE3njL9oPNM
cZi4FYsLFTClqE1GbxsID82x8Su1s04y8rxODQEIKwwFLq7QoTuRG5MMSmbyIGrK
u3LV21Z8Mw0I3XAyoPdcdkSfkKwhumjb66QdjjPpKzUmmvLH4WUc40Hkk0gPrfpb
5rsCOWDPsUuq9NeErlYZuwJmcSE8gk/pOzk4esv5pKvyjTfUoaaWHjN0Ctvx8C7q
ryayl4C0M6o0HM142GGwjbE71QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAgeDSv
jlA0Vq+VIIlCol+3Ds1TMB8GA1UdIwQYMBaAFBIQlYMCPhhd5KKylCMVmdY2QLya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zQ0VFREY5MDZB
OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdGM2tvcktVSXhXWjFqWkF2
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VoQ1Znd0ktR0Yza29yS1VJeFdaMWpaQXZKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjVGRS8zQ0VFREY5MDZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdG
M2tvcktVSXhXWjFqWkF2Sm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACswCi48hwVphtSl1qyogCOtKDb3khtgafyL+FZJmmBEZBtL4YaiQBy70lC5J
ESUFwlZI6iddyNL49bJ0722nPduk7d49PZF9D+Ey6XION8uS+/Ys0F8r7NBVi7SU
fv2lBoJQDp/Ankj4nPYhjlFjlWbBf4tnWrwGuWNs0VTn5yQLpTXUsf6Tr6HAXsVv
xMpOYupUiis3+eeqLGq/UmZPZoj2r2uLpmazHeSWajuZaBCfZvepExI1opWacRza
3N00e/CEd6MLuflcw/95Eyu+KbxSqNhBD+X0StRy9YzHrjP69v9drLHyUnfch9n+
emcHoYgYpVHmsd+gk9OTOuT8lg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:19 2026 by rpki-client