
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
File: ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json)
Hash identifier: gMaYIscoHZYbi1Htkr12ci1NSjO7uea3MD+TaeCrpUg=
Subject key identifier: C2:45:4C:7D:B5:9E:B8:90:4B:61:11:B9:0F:16:C6:DB:C5:AA:89:01
Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F
Certificate issuer: /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
Certificate serial: 0901
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
Manifest number: 08F7
Signing time: Mon 02 Mar 2026 00:30:39 +0000
Manifest this update: Mon 02 Mar 2026 00:30:38 +0000
Manifest next update: Mon 09 Mar 2026 00:30:38 +0000
Files and hashes: 1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: 62nynOu5NCQ0NGUlqa5OWx7vYERwos7QfSJT3QW6ShU=)
2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: XhJImk0f3rdjl6tuslw+Eu9p0gwLpm2LdQJmPczKSfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl
rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2305 (0x901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
Validity
Not Before: Mar 2 00:30:38 2026 GMT
Not After : Mar 9 00:30:38 2026 GMT
Subject: CN=69a4da2f-19d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:01:23:2a:0f:82:90:2a:02:99:c3:6b:36:
53:32:02:90:be:91:65:9e:a8:e6:b8:64:28:b2:47:
a1:20:d1:a6:2f:04:62:a1:31:e2:52:7a:86:42:71:
a3:f5:d1:b6:79:f1:64:36:90:93:6c:0f:69:44:2c:
b3:cd:bf:d2:de:aa:a7:9b:a4:27:79:14:3b:cd:c4:
1f:7f:f4:ae:94:39:a2:2d:7e:65:7c:f7:81:a9:13:
97:df:fe:d9:a9:26:59:7b:ff:ef:b9:f7:d6:d4:39:
2b:7e:6f:18:bf:c9:a1:b6:7d:ee:a7:69:c2:be:9e:
56:63:4e:a3:3e:3b:93:3e:3d:b5:09:91:15:a4:fb:
c9:98:16:7a:51:f6:e1:46:2c:fa:36:3f:1f:30:a8:
df:5e:18:e1:18:39:27:20:18:90:a4:b5:58:08:02:
c3:bd:82:a1:52:c3:8c:95:c1:fd:aa:57:73:c3:2b:
5f:b5:89:70:ab:58:e9:42:a2:15:b6:91:10:a8:27:
f0:ff:fe:18:e7:4f:c1:1c:c8:31:e0:0b:61:57:0c:
e8:62:e2:fd:aa:99:f4:57:f9:ab:7b:ea:4f:d6:01:
d2:36:4c:67:9a:b0:10:68:6d:1c:de:53:48:c4:7b:
48:96:9d:54:21:e9:e8:de:49:3c:81:5a:bf:3e:58:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:45:4C:7D:B5:9E:B8:90:4B:61:11:B9:0F:16:C6:DB:C5:AA:89:01
X509v3 Authority Key Identifier:
keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ed:61:f1:5a:4d:cd:2a:ab:1a:fd:16:e9:3f:da:cc:fa:6d:
0f:6e:5f:2d:8f:18:89:c5:51:f2:0f:57:dd:e5:3e:05:cc:dc:
4b:5c:4c:3a:0e:bb:cb:8b:94:85:28:9b:18:60:e6:54:58:49:
28:c2:1d:b2:b2:63:00:c1:c1:c0:7d:06:ba:48:97:d5:70:0a:
22:b1:c7:a5:b9:fd:ae:8f:d3:dd:0f:ef:3f:9e:83:3a:58:5c:
c5:e7:04:71:d4:36:9f:98:3b:d1:70:40:e0:7c:da:be:9a:ad:
15:29:23:56:39:48:d1:01:4d:8a:88:aa:dc:57:3d:7c:96:35:
fc:4c:7d:4b:76:02:2f:7e:ad:f5:b9:8c:e0:0e:66:07:96:4a:
50:e0:2b:33:e7:04:df:1a:4d:19:b9:06:ee:c8:59:8c:c8:b8:
bd:c6:38:21:43:09:c2:55:cb:9e:7a:07:12:33:69:64:a1:66:
50:44:cd:95:9b:55:31:68:80:a6:9f:9d:09:72:9c:1e:3e:5f:
20:23:2a:17:78:1d:fa:46:d8:ce:9b:ba:e9:9a:0d:64:e5:0b:
19:fa:4a:48:ef:2b:80:b2:c2:35:3b:b2:fc:ac:ce:9a:c0:85:
51:6b:68:3c:68:84:ba:55:8e:fd:93:0b:1e:09:ae:61:95:17:
71:99:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:16 2026 by rpki-client