
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
File: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json)
Hash identifier: /lt8ZbneZ8QIsWPgcW16o80lAOa8lQId1TzS/IEqcnQ=
Subject key identifier: 2F:5C:58:B5:29:54:2A:13:A3:AA:3C:CD:5D:DA:DC:88:50:B3:8F:9B
Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74
Certificate issuer: /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
Manifest number: 010C
Signing time: Thu 01 Oct 2026 07:19:40 +0000
Manifest this update: Thu 01 Oct 2026 07:19:39 +0000
Manifest next update: Thu 08 Oct 2026 07:19:39 +0000
Files and hashes: 1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: DbkdkHqatjnWZShJOEM95k6gIQlQ7eIk5YEqFmg2AlE=)
2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: 5PqklnXOa78TkhD4lmCPU1JfpwMl83hteDJwlXKT+r8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl
rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 07:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
Validity
Not Before: Oct 1 07:19:39 2026 GMT
Not After : Oct 8 07:19:39 2026 GMT
Subject: CN=6abe098c-cb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:91:b3:66:f4:75:a1:b2:70:cf:d7:b1:ce:
46:51:31:9d:44:10:2f:90:f1:93:b3:2b:69:03:2f:
25:9a:d1:42:27:93:24:1b:88:8d:29:ac:f3:8b:53:
a3:b7:04:fb:d4:bb:8a:db:c7:6f:3f:51:1e:c0:4a:
c1:36:6f:dd:29:33:94:98:24:ed:de:ab:c2:4b:c1:
ba:e3:7c:1b:92:76:72:b6:79:7a:c9:dc:4a:44:5b:
02:9f:d7:90:e4:8c:a9:ff:f5:9d:22:93:d9:f6:ef:
d1:da:6f:d8:7f:50:0a:21:95:e9:2c:ed:e6:2a:4a:
9a:86:65:f8:33:df:b0:39:ba:09:ee:27:b6:04:93:
ef:26:c8:9c:80:a5:ed:57:93:88:a3:87:3a:90:6e:
a1:51:1d:00:ef:85:18:3a:14:70:fd:8f:33:ef:51:
15:cd:91:c7:1c:e0:1f:c8:b9:7a:ed:e4:f0:a1:9e:
62:8a:64:c2:ea:39:0f:43:88:8c:27:92:c5:13:06:
ae:48:68:7d:54:8e:e9:b2:d9:76:1b:60:e2:0d:8e:
1e:64:b3:01:9b:c4:e2:0b:62:9d:5a:b9:0d:a1:9f:
76:65:98:f4:bc:18:14:ed:98:5c:fa:26:62:35:f5:
0c:11:80:ff:b7:2c:4c:12:d1:3f:3e:90:95:9c:bc:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5C:58:B5:29:54:2A:13:A3:AA:3C:CD:5D:DA:DC:88:50:B3:8F:9B
X509v3 Authority Key Identifier:
keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5b:52:dc:97:08:4b:43:77:64:af:be:c3:b9:1f:fb:68:12:
14:b0:d4:51:b5:c0:c3:f7:1c:c4:c1:6e:6e:d5:e9:cb:51:6e:
61:18:6a:d2:ac:d2:3d:3a:19:d9:0d:88:8c:23:18:e9:04:89:
b3:69:89:e5:1f:fa:3a:01:c5:b4:70:37:68:ba:59:72:06:ac:
85:bf:be:b8:80:6e:b1:ac:4f:cf:08:ca:2b:1c:e8:42:cf:cb:
96:12:de:bb:91:4a:36:91:8a:66:6f:e0:4b:23:70:cd:07:52:
1e:dd:74:13:25:0f:88:65:d2:af:ed:79:49:49:7c:a1:65:15:
3a:85:b4:37:7e:12:b1:4d:15:96:1d:10:13:22:f4:29:d5:d8:
8a:ff:dc:f5:32:22:af:f6:d0:8d:6c:6c:de:94:62:20:f6:85:
6c:4a:d9:1e:bc:18:d4:1f:fb:f4:ec:08:8b:15:ad:17:7d:24:
8f:8c:1e:5b:7b:14:5e:3f:88:37:2d:5c:43:6f:1c:26:42:a7:
56:09:e6:db:b7:5f:94:de:f1:5d:02:b1:0a:2a:f1:89:81:19:
60:6a:ab:15:26:a3:45:46:41:18:01:47:55:04:f2:76:9d:cf:
61:8b:59:1a:7d:fe:42:47:ee:77:53:23:6f:79:a2:c4:5f:56:
fa:33:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:15:25 2026 by rpki-client