
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier: Ow5AHXFZVrHzQzmYEDKVnN6NjMoqom0es57wS5gWlIw=
Subject key identifier: 5F:70:C1:B7:D1:D7:F5:CA:E3:AA:9D:7A:88:37:4F:08:30:71:9D:EE
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number: 01D2
Signing time: Fri 17 Jul 2026 04:41:03 +0000
Manifest this update: Fri 17 Jul 2026 04:41:03 +0000
Manifest next update: Fri 24 Jul 2026 04:41:03 +0000
Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: dNiyDU9JoeC9zVNtlFZ3c985rY2CCvZUOa7xNQCZpV0=)
2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: sg5RK8LADXzmH369qo3Kwz612CokrUc7M6Afz3E8p9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 04:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Validity
Not Before: Jul 17 04:41:03 2026 GMT
Not After : Jul 24 04:41:03 2026 GMT
Subject: CN=6a59b25f-16d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:95:96:04:26:7d:bc:a9:d3:48:d3:a5:82:
84:d2:67:6b:1c:e7:c3:8c:3f:35:2f:99:cf:4b:2c:
53:89:b7:d2:e7:ef:04:c6:84:37:e0:6e:45:15:20:
3f:0b:8c:0d:a2:ca:15:2a:1c:2d:03:9e:46:38:a9:
de:d3:1d:f3:c9:8d:2b:bf:fd:1e:30:33:35:44:8e:
39:bf:1e:be:34:3c:81:74:36:cf:c4:a5:03:42:19:
52:f3:b7:32:d3:c2:32:ef:92:8e:c0:45:27:e5:94:
c3:44:05:2e:16:e1:a2:0d:9a:c9:50:ce:8b:bd:5e:
5e:33:d3:e8:59:77:28:6f:b3:5a:87:5f:06:4e:17:
08:62:56:88:cb:94:d3:44:46:f5:6e:64:27:f3:fc:
74:92:4e:f0:1d:38:db:19:6c:7b:51:f4:30:ee:dd:
9a:ed:19:ef:0d:d4:f4:6a:a6:3a:6e:8d:b4:e0:bf:
77:73:e0:9c:f4:3d:d3:d8:52:96:c6:cf:cb:1a:f5:
6e:90:67:65:f1:5c:1c:1b:c9:e5:e1:2b:4a:0b:f2:
5a:03:1d:18:93:81:fc:72:96:b1:da:48:a3:81:af:
5a:35:35:1e:12:90:95:df:3d:bb:dc:8e:6e:f7:c2:
09:01:79:ed:20:ef:ae:56:29:bb:3a:ce:9c:28:5e:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:C1:B7:D1:D7:F5:CA:E3:AA:9D:7A:88:37:4F:08:30:71:9D:EE
X509v3 Authority Key Identifier:
keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:79:fb:ff:da:61:fd:3c:2f:8c:bc:db:70:d8:f0:b7:ad:55:
26:a9:e0:e2:5c:90:82:db:a7:37:1c:7f:55:8b:7b:59:2c:d9:
6b:b5:da:4e:a9:77:85:84:34:71:f3:2e:98:e3:bb:de:1b:ff:
3d:f7:57:e2:1f:2e:a1:1e:2b:f3:c9:3a:12:9a:e5:2a:8a:7d:
c0:d5:68:e8:d4:dd:18:fd:a0:af:b7:6c:8b:dc:d4:66:41:a4:
79:c4:6b:84:e2:9b:ec:64:9e:d6:86:7a:0c:ac:50:f6:4e:ff:
d6:a1:f6:62:14:a5:8e:bd:21:50:bd:c0:34:94:e4:b3:05:ce:
2a:b2:a8:36:7e:56:c9:a5:7e:33:c8:c9:d3:29:7b:6c:d4:0e:
cf:de:01:bf:76:b2:5d:cf:71:05:3a:08:6a:0a:3d:62:ac:52:
31:8b:fb:85:21:06:41:1c:fe:98:98:9a:d6:2b:63:99:c6:97:
4b:71:bd:ea:f2:9f:7a:fa:e8:37:e0:cb:9e:1d:75:62:a4:ca:
99:bc:de:a4:c7:bd:38:f3:3d:26:33:48:95:ff:f1:2b:20:8f:
33:e8:43:33:83:0a:df:16:59:1b:c8:f5:f3:a0:40:90:9c:0b:
0b:81:26:1c:ad:7c:9b:97:d3:95:88:d5:a1:b1:2f:f2:cc:26:
73:78:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:28 2026 by rpki-client