
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json)
Hash identifier: X+r06OXfjy2YNzc23q+Xw4NiSYcbrzuNVQFVVi550W8=
Subject key identifier: 34:5E:0A:62:BA:9C:22:90:17:36:54:CA:F1:8B:E1:31:8A:B2:A7:86
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial: 02B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
Manifest number: 02A6
Signing time: Fri 11 Sep 2026 01:37:00 +0000
Manifest this update: Fri 11 Sep 2026 01:36:59 +0000
Manifest next update: Fri 18 Sep 2026 01:36:59 +0000
Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: OWc7nHvaSem4+882t2SKpLg526fI1K+WmI7Xu9saiDY=)
2: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=)
3: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Validity
Not Before: Sep 11 01:36:59 2026 GMT
Not After : Sep 18 01:36:59 2026 GMT
Subject: CN=6aa35b3c-4350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:4a:de:b9:18:06:9b:d9:3e:90:02:5c:c0:
7c:6e:cc:fa:ed:ce:19:f3:64:3c:fe:db:79:2a:72:
54:00:2a:cb:73:cb:2c:70:4d:43:46:24:9d:b3:cd:
2e:a6:1a:af:3e:6a:19:eb:a0:98:bf:74:e5:3f:50:
1b:fb:15:24:47:e3:13:3e:67:fe:32:9f:4f:7f:ba:
40:3f:ea:e3:25:b1:12:66:9a:2a:62:1d:f9:ed:26:
e7:6d:1a:f9:5b:5c:c6:d4:73:5f:1b:07:a9:f4:61:
74:5a:94:2b:63:82:a7:29:e2:d1:16:fc:e2:f4:83:
15:83:47:19:cb:f2:9a:53:94:7b:58:50:ca:89:52:
73:38:ab:63:38:2d:4d:67:dc:c3:d7:d7:ba:56:24:
cd:5c:8c:1b:bf:6a:50:3b:e4:f7:50:e6:aa:f4:01:
71:dc:a2:11:84:4f:ef:8c:42:39:49:83:65:af:01:
0f:8b:83:fc:07:01:fa:74:f3:6a:3c:09:0a:0b:e1:
48:2e:08:70:0f:45:fe:45:6f:f5:92:1b:50:a3:ce:
04:08:8d:63:1b:50:fc:4c:57:18:34:dd:b8:f5:6a:
e1:fa:d3:21:30:98:87:d2:89:45:4a:d6:27:23:85:
ed:6e:af:32:d0:79:56:05:4d:25:b9:98:88:ae:23:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5E:0A:62:BA:9C:22:90:17:36:54:CA:F1:8B:E1:31:8A:B2:A7:86
X509v3 Authority Key Identifier:
keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:15:ce:9f:00:12:1a:ce:03:18:3e:35:06:7d:da:f2:d6:4b:
d8:22:3c:0d:5b:cb:42:a8:48:07:ad:d1:4c:e5:11:6c:e5:22:
c7:8c:d7:30:f5:99:cf:6b:e8:44:e6:a3:49:ea:6a:a9:c3:af:
10:e5:86:f0:c8:0b:36:1d:6a:a0:02:e4:ea:63:c8:11:d9:e8:
7a:55:31:5f:ee:e8:32:31:a3:d0:d6:b9:03:1e:ec:de:f4:21:
c9:9a:89:ec:07:4f:e2:60:41:78:a9:9c:0d:db:47:b6:34:31:
de:ea:56:87:a6:ea:14:6e:d8:b6:77:2b:9d:5a:e6:1e:f0:36:
d1:17:93:eb:20:71:e1:5e:09:ae:85:86:0f:ab:1a:fa:ea:96:
98:2e:7c:fb:b7:58:7b:ed:5b:1e:30:21:5a:a9:4f:1e:04:42:
f6:cb:08:3f:99:f5:fc:29:0c:18:3f:c9:6b:9e:6d:af:bb:6d:
19:ce:36:a0:7e:d1:ca:af:0c:5a:10:8c:33:f4:2c:02:12:f1:
04:d0:51:53:88:a5:5c:71:a4:c6:d8:95:74:d5:a9:3d:b9:47:
2a:5c:ba:bf:ac:f3:ea:8d:51:a2:e6:92:8f:62:38:c1:be:68:
f7:71:b7:62:d1:67:c4:78:b9:ed:8b:27:e5:84:9b:be:6c:0f:
65:5b:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:26:13 2026 by rpki-client