
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json)
Hash identifier: rxo620b7xFh/s6AvMPk9RHXqkN1E/rl+yPAkXmKWENE=
Subject key identifier: 5B:1F:5F:11:EE:EE:CA:50:65:B6:9F:DE:78:08:80:F8:59:78:99:91
Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02
Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
Manifest number: 014C
Signing time: Mon 21 Sep 2026 05:19:45 +0000
Manifest this update: Mon 21 Sep 2026 05:19:45 +0000
Manifest next update: Mon 28 Sep 2026 05:19:45 +0000
Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: W3js7kc7hmQUrtyF6EDqrdcdtGyDd2a9v2/eZ5AS22U=)
2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: 6ZyZnZmAF97haszVj91u3jxud/OaN9dw5BN62nVOUS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl
rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:19:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02
Validity
Not Before: Sep 21 05:19:45 2026 GMT
Not After : Sep 28 05:19:45 2026 GMT
Subject: CN=6ab0be71-7a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:6f:65:18:27:e6:65:dd:21:20:95:6e:ab:
16:1a:00:a7:9a:dd:0e:48:2e:97:48:3b:1c:7c:bc:
62:3e:b9:6d:ac:73:6d:df:98:2c:08:1f:64:a2:83:
3b:84:83:4f:b6:c8:b2:fa:44:b3:ff:02:5f:7b:6a:
ae:60:3f:9d:3a:ab:b2:12:dd:c6:d5:a1:1c:f9:3c:
1c:20:ca:78:3e:7f:03:f7:97:8f:82:fa:13:ba:29:
0a:87:17:5c:f9:33:94:fc:25:7a:1f:64:14:82:fa:
bb:a3:94:47:df:e6:09:ef:24:ed:1a:eb:b1:a9:2c:
91:96:4a:32:c8:0a:44:5e:12:a2:52:74:9a:cf:39:
b9:d6:fb:49:96:58:a0:30:83:bf:7d:90:70:5c:60:
d4:87:5f:04:e2:a2:d4:d0:b6:6e:ff:00:59:4e:7f:
48:43:a3:17:af:6b:14:17:10:9d:3e:e3:bb:aa:c7:
61:93:aa:eb:04:90:77:35:56:8c:03:65:87:c1:eb:
50:ef:6b:18:55:6d:f8:79:59:16:ae:91:16:0a:e6:
4b:f2:50:11:e8:21:4f:78:b6:6b:a1:f8:83:fc:a3:
2f:b2:26:09:40:a8:5f:b4:54:a6:d8:e3:9b:21:fd:
33:3f:10:e2:2f:ff:24:8d:db:79:2b:05:c7:be:8e:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1F:5F:11:EE:EE:CA:50:65:B6:9F:DE:78:08:80:F8:59:78:99:91
X509v3 Authority Key Identifier:
keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9a:5f:bd:61:6e:fa:51:9e:ce:73:fc:af:82:dc:f9:74:44:
27:07:f9:28:92:48:66:28:e4:1d:f0:d7:c4:80:65:29:b6:2c:
49:47:7c:f2:df:53:ea:e0:62:3e:4f:b8:92:02:0d:88:b2:a7:
a7:33:4c:b5:11:7c:be:12:2a:ac:50:66:7f:a1:a3:37:4b:b3:
9c:8f:20:99:ec:46:8c:1f:5a:a8:23:8d:50:7d:e9:4f:82:fc:
cc:21:23:d1:2b:66:fc:a5:d1:0e:df:15:8f:11:50:f3:ef:40:
f9:1a:24:02:93:e0:6c:f4:5e:c4:cc:94:88:6b:77:3a:cd:8b:
11:bd:b3:e5:fb:47:46:82:39:f1:f8:72:e0:b0:41:9e:fd:24:
80:c5:7c:8b:fd:6b:d9:89:05:8a:dc:a6:db:94:63:8f:f9:d6:
92:8d:84:c4:c6:7f:df:08:01:84:88:b8:14:60:b1:b1:06:3b:
47:77:5a:2b:7a:27:87:c7:60:69:db:a1:2f:2c:e8:dc:a0:43:
d6:b9:94:e6:e2:f5:3a:6b:47:c5:46:32:e7:03:f8:f0:0d:86:
42:cc:c6:06:22:c2:80:90:4b:cf:26:97:51:3c:71:09:95:2d:
9c:18:4d:c3:7a:7a:db:f4:83:9a:2b:c7:89:c8:08:2a:40:f9:
3e:b7:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:51:08 2026 by rpki-client