
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier: e0tu2fyZ/blzs6k7krLMjcDB2nL1AhU809U3SV8WxEY=
Subject key identifier: D7:5B:1E:7C:A1:D2:85:CB:A0:B3:D0:C2:F5:C0:50:69:C7:12:43:F9
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number: 0230
Signing time: Tue 21 Jul 2026 03:52:20 +0000
Manifest this update: Tue 21 Jul 2026 03:52:19 +0000
Manifest next update: Tue 28 Jul 2026 03:52:19 +0000
Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: AUwlEmLrV3U/mU56fPK3DNl3iToTZNFTgkJqGWIeZTo=)
2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Validity
Not Before: Jul 21 03:52:19 2026 GMT
Not After : Jul 28 03:52:19 2026 GMT
Subject: CN=6a5eecf4-7473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:a0:58:24:cd:0b:08:7a:61:23:ce:58:c8:
24:73:09:6b:33:06:20:54:c6:9f:ea:4d:7d:c8:09:
63:07:3e:a6:e9:37:c1:a8:97:e2:eb:01:d6:46:c7:
0d:ff:9f:a7:b4:69:d0:4f:6d:4e:52:27:df:0a:5d:
00:24:80:9b:02:12:c0:3c:81:23:40:10:56:b8:2c:
ea:27:63:78:17:7d:65:ce:96:fa:de:02:31:ee:5d:
1f:3c:f5:32:01:c6:9d:d4:09:8b:8d:7b:d1:4b:0c:
4f:9f:cd:37:c6:db:6c:5e:28:58:03:a6:0f:c0:26:
de:e0:b5:21:3d:a8:e2:61:94:25:71:4e:88:f6:93:
ef:06:3f:0e:d4:e0:61:94:1e:1e:c4:e2:46:a4:b1:
a6:99:7e:62:d7:b4:2c:fd:54:cb:25:70:b6:5f:75:
0a:f0:18:b9:1d:29:1f:f5:57:ef:7d:79:b8:6f:9f:
39:1d:ea:a3:d1:c4:3f:9b:36:43:65:9e:f0:2f:d2:
28:95:56:2f:7b:2f:c1:56:e9:3c:3f:1f:64:c8:0c:
13:57:c2:9f:f1:ed:aa:b2:3a:15:1c:56:72:c2:28:
0b:c2:b3:c5:7b:f1:eb:77:af:61:9d:ed:8d:70:cb:
2b:29:3b:18:c1:f9:4f:54:4f:08:43:cf:c1:6e:cf:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:1E:7C:A1:D2:85:CB:A0:B3:D0:C2:F5:C0:50:69:C7:12:43:F9
X509v3 Authority Key Identifier:
keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:8c:a1:ac:49:c1:a3:b7:56:fe:04:db:52:ae:5e:8e:de:6a:
97:71:48:46:91:3c:23:32:35:05:eb:85:50:74:bc:35:34:55:
59:4b:34:6f:14:16:38:3e:20:1e:65:2f:54:ff:87:c5:06:45:
5b:97:c8:29:62:27:79:ca:c5:f9:05:02:11:83:22:9a:7e:4a:
d5:cf:f6:e5:31:82:39:88:8e:d1:4f:5c:82:b8:77:e4:ab:75:
c1:8c:8c:60:54:8d:7a:37:49:d7:60:9b:17:5a:24:0e:a7:8f:
51:6a:22:cd:24:0e:48:30:fc:30:75:61:88:3e:2b:2b:76:9f:
7a:73:ea:28:c8:06:50:49:97:49:43:d4:94:4a:4e:87:c3:cb:
a7:bb:6a:80:c7:fa:61:f3:06:15:ad:87:6b:63:8a:87:1b:bd:
15:62:06:b2:4f:2f:ab:a9:d0:cc:e1:5f:11:33:45:15:35:a4:
25:30:53:fc:1d:e0:07:40:57:11:78:96:e3:b2:74:69:f0:67:
eb:1d:f3:d2:9f:23:00:f1:aa:a2:d9:5c:95:74:c2:b4:ec:49:
4e:65:81:d8:7b:13:71:fa:0e:ab:1a:ea:7a:38:46:b0:02:1a:
36:2e:1a:b0:76:09:9d:60:4a:ed:82:17:0d:9f:3d:a8:04:b6:
a9:38:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:50:28 2026 by rpki-client