
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier: pWcGs1FhNkkkHxodbiPf6FTq1zUnB6ZZV0YHDlOENHE=
Subject key identifier: 12:43:A8:85:1F:F5:1B:73:91:EA:AD:61:A1:BD:32:BB:29:35:6C:C0
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial: 07B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number: 079A
Signing time: Sun 20 Sep 2026 21:25:16 +0000
Manifest this update: Sun 20 Sep 2026 21:25:16 +0000
Manifest next update: Sun 27 Sep 2026 21:25:16 +0000
Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: lcF4QsCx7j26m9/CsFMFM02a+v3VOJsDq2ZiwVzpt5w=)
2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: XPvB+vFL16oisT/9uSlsAmizDeWHyhaJXzNkKeUA27M=)
3: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=)
4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: +jvdYVRVCKb9nHFb/a4hVukxgRDPU2GYfvLDSqD8lQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974 (0x7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Validity
Not Before: Sep 20 21:25:16 2026 GMT
Not After : Sep 27 21:25:16 2026 GMT
Subject: CN=6ab04f3c-1136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:da:69:89:52:8a:d1:e5:8f:cc:19:12:10:
f9:a0:c9:1c:18:b5:b4:49:d2:b6:93:af:3a:a7:7c:
81:4c:fc:17:03:3b:98:7b:3d:10:b5:02:28:be:9a:
12:71:b7:45:cc:81:28:dc:26:f5:74:fc:a3:dc:45:
96:fc:9b:a0:44:b2:fe:f1:1f:03:28:e8:9c:40:48:
64:42:c7:33:c0:57:ee:30:6c:e8:10:40:87:f5:3b:
c8:1f:0c:3f:2c:26:76:66:c4:92:4d:0c:49:c9:2a:
8a:5b:f1:72:66:f9:31:0f:f5:82:7b:bd:34:bc:6e:
ec:38:e5:8b:a9:3a:22:35:84:d6:75:c1:66:fb:2b:
43:d7:cc:48:53:ba:85:f3:f4:e4:4d:a2:db:6b:c8:
6d:29:ae:9c:00:91:4d:f7:bb:61:ad:4f:d0:f7:82:
04:60:d4:34:30:c4:97:3c:b0:5c:73:0b:71:d3:87:
17:e1:02:6e:6d:41:16:ed:ac:ec:2e:d4:c2:1f:7b:
f5:64:4f:ba:1d:83:f5:34:27:18:3e:6e:28:4a:85:
d3:56:4b:ab:f4:04:7a:b3:bf:6b:f9:e0:cc:0f:a1:
cd:ba:82:f9:99:21:35:75:a0:c1:45:8d:b0:be:8e:
80:28:93:e6:9f:0f:ba:1f:59:7b:b6:a3:82:40:91:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:A8:85:1F:F5:1B:73:91:EA:AD:61:A1:BD:32:BB:29:35:6C:C0
X509v3 Authority Key Identifier:
keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:9d:27:67:84:37:63:8a:6b:9e:5b:94:1a:1f:32:c3:4a:
4b:d8:0c:2f:91:82:74:a2:76:2e:48:f6:f0:eb:11:c7:fc:16:
07:e1:a5:7a:9e:90:3b:a4:e0:38:17:bc:c1:1d:67:92:b1:98:
15:f0:76:06:b6:fd:5a:10:04:ab:ff:cd:0a:92:9d:7e:57:f2:
1c:42:e7:df:62:9b:e3:1f:38:0b:75:ed:d3:c6:c1:fa:ea:18:
38:ff:fd:2f:01:c8:75:a6:21:15:78:e5:6c:b8:3c:54:d0:ce:
b0:69:2e:c8:4e:09:3d:5b:97:62:59:86:86:e9:25:79:5f:c8:
1b:56:5e:9a:d4:4e:0c:af:35:83:9e:72:22:5f:73:ac:4e:99:
b7:61:0c:1d:7d:96:aa:60:6f:b2:5c:41:83:7d:dd:b7:62:57:
9b:f8:8d:79:fc:a6:48:ef:7a:78:df:d2:28:c3:20:52:0d:43:
0c:76:b8:a4:3f:e2:f8:bf:68:a0:31:32:27:8a:36:31:10:2e:
32:f8:38:7b:54:e5:0b:5f:68:54:c1:79:f2:67:32:96:37:ba:
63:d9:02:e4:80:81:a4:69:8e:ca:d7:fa:12:b8:d2:bd:77:e4:
2d:27:32:fb:46:1b:a1:ca:6e:9f:6d:2e:5e:08:2d:1e:1e:4e:
94:0f:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:32:14 2026 by rpki-client