
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier: 6EU3SoNpADLuNCS38e19zr8mR0z+Wy+62A60STgS4ZU=
Subject key identifier: 92:78:D7:FD:CC:76:75:BC:E1:67:08:88:9E:D1:0E:4A:AC:DE:7F:E0
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial: 0767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number: 074B
Signing time: Sat 18 Apr 2026 21:37:59 +0000
Manifest this update: Sat 18 Apr 2026 21:37:59 +0000
Manifest next update: Sat 25 Apr 2026 21:37:59 +0000
Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: rrFO00a8pPbnpYD183Ug8XhDueL7VXrAZW1i0Q1Qe+Y=)
2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: XPvB+vFL16oisT/9uSlsAmizDeWHyhaJXzNkKeUA27M=)
3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=)
4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: +jvdYVRVCKb9nHFb/a4hVukxgRDPU2GYfvLDSqD8lQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 21:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Validity
Not Before: Apr 18 21:37:59 2026 GMT
Not After : Apr 25 21:37:59 2026 GMT
Subject: CN=69e3f9b7-188a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:d8:cf:7e:8f:cb:b8:ba:4f:bb:57:1b:86:
e3:d2:da:47:0a:0e:12:d6:dc:2b:b3:81:bf:90:60:
2b:e1:d4:5e:1d:1d:0a:a3:0b:8f:bb:dc:b9:73:22:
f5:e0:30:fb:5c:92:64:4e:1f:d9:d5:15:41:93:3c:
f5:45:e9:cf:32:52:59:a4:f9:ce:bb:80:51:c6:f4:
3f:c5:e4:81:9d:99:57:d0:31:87:54:2e:64:22:31:
2b:da:fd:1d:47:12:85:d6:8d:0c:b1:cc:99:ee:8c:
32:90:db:6f:ef:c1:f0:9d:ab:61:35:c7:b5:b7:7b:
d1:4e:6d:a0:cd:5d:c2:c2:c6:ec:68:5d:b7:41:c5:
46:ca:f7:f8:d6:9c:21:3d:53:a4:2f:e2:83:55:80:
b6:c3:9d:b2:c4:18:a8:fd:41:d4:1f:b3:e1:d2:f3:
68:19:84:be:95:f5:10:e2:a7:be:83:76:ac:55:d8:
a0:91:fb:08:0e:38:5f:ba:68:ce:88:87:f5:07:8e:
b7:e4:fe:de:fd:ad:59:0e:2b:9d:04:42:e8:18:bc:
5e:1b:2c:5c:10:16:87:86:55:dc:c9:94:ae:c5:98:
76:f2:78:62:2a:35:51:d8:71:c0:97:89:1a:e3:58:
8e:02:a0:d3:63:bc:33:30:96:9a:a5:cf:28:9c:4f:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:78:D7:FD:CC:76:75:BC:E1:67:08:88:9E:D1:0E:4A:AC:DE:7F:E0
X509v3 Authority Key Identifier:
keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:d1:ab:8a:ee:c7:a1:0c:e2:b7:e3:1e:ff:69:18:1a:cc:fb:
dc:f4:8a:65:a5:f0:2e:6a:51:9e:73:85:67:f7:58:91:d1:65:
d4:5a:89:c3:b0:25:0b:98:e0:e7:6d:64:c0:bd:ca:fc:76:97:
b5:1f:7e:89:57:57:6c:5d:89:15:5f:ce:b2:3d:ed:f6:13:24:
6c:ab:29:4d:cf:34:97:c5:bb:1a:18:18:e4:30:6e:12:ba:54:
e5:35:b4:38:99:3b:5e:9d:65:50:2b:d0:67:c8:85:42:2b:94:
bf:5e:83:31:77:40:cf:67:09:a1:58:7e:a5:eb:0e:a0:75:63:
dc:93:4a:6d:27:7b:94:64:89:2c:2c:64:bb:03:3d:af:7c:85:
73:ad:fa:bf:ff:28:00:b1:49:f8:2f:77:47:69:fc:82:d9:7a:
5f:07:a6:d9:2c:14:fa:c2:40:6f:8b:3d:96:fb:2e:a5:f0:42:
0d:a1:48:bd:2b:81:13:45:97:8b:eb:90:cf:ff:3d:75:64:55:
fc:74:07:2b:48:c5:af:23:36:bb:2f:b7:94:7c:63:87:af:c6:
3f:08:0e:5a:b5:49:de:58:89:1e:ae:c3:41:5c:e3:bf:fc:0e:
42:1c:1a:0a:2b:ee:5f:48:73:75:77:be:4f:22:2a:8e:20:ff:
d2:fa:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:14 2026 by rpki-client