
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier: LZJEHED7fd2kiZRyXKTHXwTbnfdb6pZr+7dRGrmttaE=
Subject key identifier: 90:96:94:E0:6C:BD:DF:35:87:A9:F9:0C:31:07:C8:E8:32:C7:0A:DA
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number: FF
Signing time: Sun 05 Apr 2026 05:39:50 +0000
Manifest this update: Sun 05 Apr 2026 05:39:50 +0000
Manifest next update: Sun 12 Apr 2026 05:39:50 +0000
Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: 7FErGwJx4dYQO5caIqUhmfReeY02UZlNYbbuyH1ljbo=)
2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Validity
Not Before: Apr 5 05:39:50 2026 GMT
Not After : Apr 12 05:39:50 2026 GMT
Subject: CN=69d1f5a6-7855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:a1:ab:56:3a:81:a9:6a:4e:4c:79:70:44:
52:ab:75:8f:ac:00:2d:a7:e6:56:47:d9:ed:01:90:
8f:5c:a7:2c:0c:b6:20:c7:28:a1:d7:a5:51:35:a2:
48:02:b2:aa:5b:8b:e9:a1:2a:a0:ae:ed:d7:a4:80:
16:fc:e9:4d:7f:9d:1e:eb:db:9d:36:b9:c7:52:c4:
5d:3f:01:4c:dc:3b:a3:16:64:c5:5a:ba:fc:ad:5a:
5d:19:f5:c1:a5:a5:85:87:da:26:ea:9c:e6:8e:01:
9e:21:8a:44:1a:ef:1c:c3:0f:15:d0:f8:55:93:5b:
14:96:bf:a7:24:77:cf:35:f1:77:f8:ca:72:65:12:
c7:a4:99:45:8d:17:a6:d1:96:9d:c1:63:39:8b:65:
49:54:a6:87:69:34:cf:c2:71:45:59:ef:41:fe:af:
2c:38:e7:a1:a0:3a:96:43:0b:7c:d0:d3:9e:29:13:
5c:3a:0f:21:5b:64:d0:41:06:6e:9d:31:e8:69:90:
2e:1c:0f:bf:50:f1:e2:f3:a9:70:ff:cb:a0:0f:0e:
e2:2f:e0:54:a3:0e:3b:85:8d:2c:d1:7f:5b:60:5f:
9c:b6:7b:9b:65:79:e6:da:b3:2f:f0:85:e5:41:5d:
48:d6:8a:3f:c5:a5:2e:c6:52:65:7b:6d:90:94:be:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:94:E0:6C:BD:DF:35:87:A9:F9:0C:31:07:C8:E8:32:C7:0A:DA
X509v3 Authority Key Identifier:
keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:18:f2:8a:65:ec:34:cb:b9:0c:ed:1a:88:30:5c:5c:b4:1a:
58:be:a5:f6:4e:d1:5d:94:a8:df:74:00:06:5a:bc:7d:c3:b9:
88:12:1f:e7:1e:57:a1:0b:d1:b1:de:30:b8:c9:fc:e7:95:a1:
68:82:48:bc:b1:3e:0c:7e:73:3a:0e:cd:4d:9f:cc:f2:7e:bb:
f2:77:45:47:11:11:b9:0f:e7:91:38:9e:c9:6d:55:74:a3:dc:
e7:80:c3:82:32:84:da:f1:4f:ee:85:73:d7:fd:10:df:bd:fa:
10:97:d6:cc:df:98:69:2f:6f:e0:5c:db:81:3d:a2:20:ba:81:
5d:5d:7d:59:95:60:d6:99:3f:33:75:2d:c6:92:2f:71:03:11:
07:0b:6f:1e:35:99:9a:ee:5e:a6:b7:0d:b2:3c:33:ff:65:44:
28:24:26:4a:6a:e9:0b:fa:5f:4e:94:98:21:35:5b:19:ab:7c:
63:2a:02:a4:2b:1b:f9:f4:98:e2:6d:81:ec:3e:b0:9a:2b:45:
ca:c4:c8:d9:44:a0:ea:af:ab:33:34:82:d9:2b:34:3a:38:1e:
30:c1:5e:33:53:03:60:f5:e3:cb:e2:b4:f4:39:b3:29:aa:91:
70:72:e8:38:88:e5:21:95:36:f9:82:89:25:b5:1b:43:47:5b:
41:f4:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:49 2026 by rpki-client