
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json)
Hash identifier: 0YuaZZ+eyX5q1tbnN5ga2ytm+oRH4cgljRm1sL3L03Y=
Subject key identifier: 6A:87:12:66:0D:65:FD:D4:46:D8:34:09:92:BC:74:5C:79:99:49:16
Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
Manifest number: 0203
Signing time: Tue 21 Jul 2026 04:23:16 +0000
Manifest this update: Tue 21 Jul 2026 04:23:15 +0000
Manifest next update: Tue 28 Jul 2026 04:23:15 +0000
Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: E+pIu/3NE9kaLx1+qcHTdnJlLSAeDo5m1HDt2xZ0Sdg=)
2: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: e7JyAV4y4Fpitct0PBwFzDuy1w2upP2xYQlut6RJaeU=)
3: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: FJ+repPrmYSlijYjI+MRSa3mhNIvAfvhuyQif/Z3/Zo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83
Validity
Not Before: Jul 21 04:23:15 2026 GMT
Not After : Jul 28 04:23:15 2026 GMT
Subject: CN=6a5ef434-ee19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:eb:d7:8e:93:05:5f:3f:87:17:d8:ee:ad:
0c:8a:23:d7:d6:bc:77:71:3b:af:fa:03:eb:51:13:
a9:27:64:99:09:cb:d0:84:07:b9:c5:bc:f7:ac:9f:
bf:18:fc:94:0d:b9:5e:02:54:e4:02:fe:82:ef:52:
8a:b2:ce:b9:3d:4e:36:31:4d:6c:2f:ea:4c:29:74:
79:82:69:51:49:be:2c:8a:70:d1:48:5f:89:98:73:
2b:49:03:fb:60:ca:d3:3c:e5:4c:43:4f:49:45:ed:
e8:19:c7:c3:59:cf:40:f4:13:95:5c:56:7a:18:ff:
1a:d2:9e:98:62:e3:1f:e2:f2:51:d7:4f:f9:f9:bf:
dc:d0:0a:c9:71:4f:f1:9d:37:d9:64:10:6d:25:ef:
1e:5e:b9:42:1c:b0:05:92:99:7a:62:10:5e:7e:17:
6b:56:99:9a:7f:3b:83:48:5f:8b:08:f5:31:12:3f:
30:9b:6f:cb:43:0a:18:e1:2c:f6:eb:d8:bf:9f:bb:
d0:87:18:9d:8d:6c:72:06:29:49:bc:c0:6e:10:a6:
67:9a:e4:81:b0:1c:26:8c:0d:0c:58:aa:f9:7e:0f:
3e:81:da:6a:dd:be:fa:24:9a:fe:da:cb:3e:9d:ad:
01:0f:4b:ae:82:a3:e8:5d:b5:2e:28:e1:b6:2b:37:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:87:12:66:0D:65:FD:D4:46:D8:34:09:92:BC:74:5C:79:99:49:16
X509v3 Authority Key Identifier:
keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7d:0c:c1:2a:c6:a8:ab:5d:7a:2e:63:95:d1:ea:38:1e:b4:
3b:c9:9b:cf:7c:14:09:38:60:15:46:69:ff:fc:d8:c9:ef:9e:
79:08:f3:f0:9c:c2:b3:3a:ef:4a:af:0d:6d:45:69:9b:81:41:
85:4b:87:4a:54:54:d1:57:69:92:e4:28:45:0e:b8:89:18:4d:
23:6d:bd:78:06:6e:7e:52:23:06:3d:68:a7:fa:51:4a:60:0a:
97:52:a9:cb:13:05:59:53:58:8d:61:32:93:d9:9d:28:11:1d:
ad:82:8a:67:da:e3:3f:46:69:60:a2:50:43:98:42:4d:f2:20:
ad:c9:cd:a3:89:99:9c:52:36:62:03:79:9c:84:28:0c:10:18:
3e:1e:fa:3c:15:c3:c5:53:ff:0d:f1:df:82:f5:42:84:70:85:
12:1a:c0:bd:56:72:00:90:7e:a3:3c:93:42:36:36:58:e9:bc:
26:c6:97:bc:07:f6:69:13:c9:fd:95:45:49:64:5c:f2:63:ee:
b0:69:e5:4f:3a:33:a2:13:f6:03:55:53:b3:c8:c7:2a:d8:87:
b6:83:10:c1:ad:1a:d5:65:97:7c:df:b4:8b:82:75:57:f6:e4:
a0:f8:73:d9:d1:aa:55:61:41:78:37:cf:56:29:cb:84:74:04:
63:94:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 05:40:16 2026 by rpki-client