
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier: OJfLKyZu+ElyGa4QuW0cf4jHMEJaKf883Iquo2RgJp4=
Subject key identifier: D6:06:D0:50:0E:E6:F8:3E:27:9C:24:97:56:74:14:19:0B:2B:E0:5D
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number: 0149
Signing time: Mon 31 Aug 2026 05:47:34 +0000
Manifest this update: Mon 31 Aug 2026 05:47:33 +0000
Manifest next update: Mon 07 Sep 2026 05:47:33 +0000
Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: kbTvIdYh3f//yIvp1yWREGMeVH0xuluAyVq0N4HpeOQ=)
2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 05:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Validity
Not Before: Aug 31 05:47:33 2026 GMT
Not After : Sep 7 05:47:33 2026 GMT
Subject: CN=6a951575-2cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:dd:26:f8:13:ab:27:61:04:9a:d7:2b:08:
30:0e:8b:38:49:2d:83:d6:d0:8e:5b:ce:7a:61:25:
63:1d:0f:ca:96:e3:65:75:b1:2c:61:4b:c9:aa:31:
b1:7d:9a:e1:40:9f:5c:71:71:33:0c:e0:cf:7c:a9:
82:f0:e0:c3:0e:af:fc:eb:0d:96:0f:1b:db:37:2f:
dd:99:a4:97:e3:9e:bb:13:97:ca:fb:c1:de:87:b1:
46:d7:9a:84:be:e9:b4:ac:fd:57:29:14:bf:38:0c:
e5:46:92:c8:12:e7:b9:2f:f1:3f:95:74:58:38:42:
52:4e:ca:58:e8:f4:0f:24:78:0d:9f:3f:9e:64:61:
07:c5:dd:00:25:fc:5c:1a:1d:65:f2:32:63:67:65:
ca:18:6a:80:cc:7c:3a:cb:5c:56:82:67:46:dc:9e:
c7:a6:d1:38:4b:fe:9a:77:83:ec:bc:d4:ad:2d:73:
ea:fb:d7:81:bd:b2:aa:94:c0:c0:46:e3:2f:03:ca:
ab:4f:2b:1c:b5:16:50:a8:51:71:6f:29:12:3b:ce:
91:1b:28:8a:0d:c4:a1:63:16:24:b8:cd:e6:08:5a:
30:8e:55:87:97:6c:8a:19:13:12:58:d6:31:e6:57:
56:ff:5e:1c:2e:8c:59:bf:54:58:c2:54:1f:c8:b0:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:D0:50:0E:E6:F8:3E:27:9C:24:97:56:74:14:19:0B:2B:E0:5D
X509v3 Authority Key Identifier:
keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:f4:75:50:78:b9:3a:84:9d:23:62:07:64:80:dd:93:13:b9:
66:5c:ff:99:2c:0c:35:7e:3d:d0:8f:e9:ee:9d:3d:67:e4:a7:
5d:f0:cc:31:0c:4a:6c:c1:c8:d9:a6:e8:d7:46:e9:c1:ee:06:
c4:fd:f2:6a:88:f1:b3:e5:9b:a3:81:b6:d6:5f:86:7c:95:ae:
2c:e3:9e:29:9b:c2:e2:70:49:e2:f4:2e:39:1c:94:fb:01:c4:
a7:68:fa:51:d6:ff:0f:2a:84:72:7a:3d:c2:87:3b:48:5b:a3:
84:7c:e7:db:c4:5f:dc:2d:15:b8:fa:f3:99:fa:0a:d7:f1:86:
56:6c:42:cd:10:75:12:c2:b0:9a:58:a2:dc:bb:81:1c:f0:63:
6c:d5:c1:94:83:36:8d:63:3b:b4:a3:b1:f3:ec:b3:ba:cf:4b:
d3:fb:53:3a:c3:35:bb:30:c4:be:8e:62:61:2f:64:9e:c8:d3:
30:0c:d7:9a:87:0d:1e:84:90:85:fb:69:45:09:35:32:29:a9:
24:d7:44:fb:dc:96:e2:93:34:eb:90:f3:c7:80:de:89:06:44:
22:b5:cf:5a:41:61:76:12:38:d5:60:2c:c9:b0:99:65:06:99:
07:f4:b5:aa:00:a5:36:e2:39:4b:7c:cc:a7:e8:53:5d:41:fb:
41:60:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:43 2026 by rpki-client