
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier: wlpJmHAcLw76KHBR+/BkO6NhVeEl+iAv5gomyANKERE=
Subject key identifier: 9D:96:75:79:4C:63:78:9E:D7:CD:10:D2:95:DF:1F:82:80:58:70:A3
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial: 0799
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number: 077D
Signing time: Sun 26 Jul 2026 22:19:44 +0000
Manifest this update: Sun 26 Jul 2026 22:19:43 +0000
Manifest next update: Sun 02 Aug 2026 22:19:43 +0000
Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: eau0USYhRcTNl0RjgexFYOGbWx8beOafZUG0/ddLIQ0=)
2: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=)
3: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: XPvB+vFL16oisT/9uSlsAmizDeWHyhaJXzNkKeUA27M=)
4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: +jvdYVRVCKb9nHFb/a4hVukxgRDPU2GYfvLDSqD8lQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Validity
Not Before: Jul 26 22:19:43 2026 GMT
Not After : Aug 2 22:19:43 2026 GMT
Subject: CN=6a668800-b75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:ca:e5:ed:37:a6:e7:ed:73:8a:57:0b:c9:
a3:8e:ac:aa:ee:ec:3f:49:b5:0d:1c:f8:05:2f:80:
56:b1:5a:b6:5a:3c:48:22:7d:5a:cb:29:ec:27:90:
b6:9f:c5:68:84:c7:03:23:65:3f:ca:21:ba:be:4b:
e3:31:cc:6f:9a:54:b9:aa:60:64:80:31:93:ed:aa:
ec:26:ec:3f:f5:21:8e:e2:fe:df:24:20:e3:ec:96:
fd:a5:9f:0c:9d:96:6e:e9:71:a6:5e:71:85:3e:ed:
aa:8f:ac:c3:06:96:e8:60:14:f9:7d:44:2a:d5:7a:
28:07:5c:86:2e:2f:37:f3:ce:b5:2c:a1:9d:a8:7e:
72:ae:31:c3:92:bf:5c:87:a9:22:c9:a5:21:c1:33:
30:11:67:e9:e9:c6:41:a9:68:eb:84:11:f9:1e:6d:
fc:29:e5:f9:29:dc:a3:5c:31:ab:5c:12:a1:1a:a4:
14:4f:5d:13:dd:f2:9d:04:4b:cf:40:68:ba:3f:92:
80:81:c0:a6:32:7e:f6:f8:59:95:3c:4d:59:1a:5d:
4a:38:1e:6e:28:da:ae:89:2b:cf:7c:df:0a:8e:98:
1a:cb:ce:0d:b6:0b:c2:be:d0:94:75:dd:90:bd:11:
bf:80:e6:fe:6c:c7:33:04:ef:81:99:70:a5:71:4a:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:75:79:4C:63:78:9E:D7:CD:10:D2:95:DF:1F:82:80:58:70:A3
X509v3 Authority Key Identifier:
keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:e4:2b:a8:60:5b:09:f9:b4:fb:30:bd:c9:82:a8:cd:71:57:
ff:c7:09:1f:63:29:b7:53:3a:08:f0:37:27:57:60:8c:0b:ad:
bb:6d:28:2f:34:8b:15:87:f3:a2:f3:ff:ee:7b:7b:0e:05:d5:
ae:7f:75:5c:c5:3c:6f:33:27:6c:13:e0:cd:1f:5c:dc:3c:28:
c4:bb:35:69:19:91:4b:3f:f8:5e:ab:0c:e7:b2:b9:3d:37:ff:
5c:e9:49:28:6b:74:e5:06:98:73:54:49:32:2b:89:63:5d:8b:
39:ec:b7:8b:85:4f:c0:07:13:d1:28:c1:3e:43:07:e4:35:6c:
02:6f:48:89:e3:b7:ea:23:70:99:c0:b6:cc:98:ed:4d:33:9b:
da:f2:1c:c2:90:06:09:3e:8e:47:a6:e8:22:61:34:ac:bd:7c:
ac:4e:43:2d:1c:17:38:ff:b7:0d:89:c5:3a:e7:dd:5a:02:6c:
12:e6:e2:2e:21:c8:29:5b:89:3a:56:3e:8c:4a:30:85:0e:79:
fe:1f:07:97:35:67:6d:86:23:15:2e:43:37:8e:5b:35:de:c1:
08:12:46:08:0c:ae:dd:69:9d:9d:28:30:c1:e4:03:46:04:a1:
a4:be:2e:0d:ee:10:3b:3f:8b:1f:c1:62:7d:47:a4:73:fc:a2:
58:3b:23:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI1RkUxMTAvBgNVBAUTKDEyMTA5NTgzMDIzRTE4NURFNEEyQjI5NDIzMTU5OUQ2
MzY0MEJDOUEwHhcNMjYwNzI2MjIxOTQzWhcNMjYwODAyMjIxOTQzWjAYMRYwFAYD
VQQDEw02YTY2ODgwMC1iNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNzK5e03puftc4pXC8mjjqyq7uw/SbUNHPgFL4BWsVq2WjxIIn1ayynsJ5C2
n8VohMcDI2U/yiG6vkvjMcxvmlS5qmBkgDGT7arsJuw/9SGO4v7fJCDj7Jb9pZ8M
nZZu6XGmXnGFPu2qj6zDBpboYBT5fUQq1XooB1yGLi838861LKGdqH5yrjHDkr9c
h6kiyaUhwTMwEWfp6cZBqWjrhBH5Hm38KeX5KdyjXDGrXBKhGqQUT10T3fKdBEvP
QGi6P5KAgcCmMn72+FmVPE1ZGl1KOB5uKNquiSvPfN8Kjpgay84NtgvCvtCUdd2Q
vRG/gOb+bMczBO+BmXClcUqAnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2WdXlM
Y3ie180Q0pXfH4KAWHCjMB8GA1UdIwQYMBaAFBIQlYMCPhhd5KKylCMVmdY2QLya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zQ0VFREY5MDZB
OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdGM2tvcktVSXhXWjFqWkF2
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VoQ1Znd0ktR0Yza29yS1VJeFdaMWpaQXZKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjVGRS8zQ0VFREY5MDZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9FaENWZ3dJLUdG
M2tvcktVSXhXWjFqWkF2Sm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr+QrqGBbCfm0+zC9yYKozXFX/8cJH2Mpt1M6CPA3J1dgjAutu20oLzSLFYfz
ovP/7nt7DgXVrn91XMU8bzMnbBPgzR9c3DwoxLs1aRmRSz/4XqsM57K5PTf/XOlJ
KGt05QaYc1RJMiuJY12LOey3i4VPwAcT0SjBPkMH5DVsAm9IieO36iNwmcC2zJjt
TTOb2vIcwpAGCT6OR6boImE0rL18rE5DLRwXOP+3DYnFOufdWgJsEubiLiHIKVuJ
OlY+jEowhQ55/h8HlzVnbYYjFS5DN45bNd7BCBJGCAyu3WmdnSgwweQDRgShpL4u
De4QOz+LH8FifUekc/yiWDsjYg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:49 2026 by rpki-client