
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier: QPM2MWp9GjChz2AMh4YhymHxJQomfqZSCwmELVBTyig=
Subject key identifier: 06:8E:8B:12:9B:99:A9:2A:EB:06:A2:71:3D:4A:A6:67:01:D3:FA:D6
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number: 0200
Signing time: Sun 11 Oct 2026 03:47:04 +0000
Manifest this update: Sun 11 Oct 2026 03:47:04 +0000
Manifest next update: Sun 18 Oct 2026 03:47:04 +0000
Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: ju3P3adq5iVxhN652OEtRzfDN7DJUXKasHAPm/xQYgA=)
2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: bmD/DsE+tY3JlHkV3Sz9uaxYc6XsX1W6cL8D8Zq/OGo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 03:47:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Validity
Not Before: Oct 11 03:47:04 2026 GMT
Not After : Oct 18 03:47:04 2026 GMT
Subject: CN=6acb06b8-b695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:8c:bf:e1:7b:c2:f4:6a:2c:b7:ef:6f:ca:
da:d7:85:ae:e7:33:87:bc:1f:00:7c:28:ee:81:b8:
c3:c0:d2:1e:72:8e:10:ce:3c:6e:aa:48:c2:f2:8d:
d9:b7:a9:b8:43:ce:65:44:f4:c1:8e:f0:3b:cc:6b:
3b:4e:db:22:77:2a:d2:07:78:8d:7c:98:ab:df:16:
91:8a:a8:ce:23:12:71:9f:e2:4e:21:19:91:29:a5:
44:65:89:ba:1c:0b:ca:3f:22:f7:19:e8:63:7e:8f:
0b:be:be:a2:62:de:f1:22:a3:ea:ec:48:d1:25:ab:
5e:a7:0b:20:cc:a4:06:0e:a8:88:a5:76:b1:d6:11:
56:8e:ba:de:e3:a7:9a:ae:2b:ab:59:00:10:e6:21:
37:78:e6:22:ab:e9:6f:79:0c:3d:2b:85:d7:c6:ce:
04:d7:5d:ce:0e:37:d4:23:3b:39:09:d9:bb:ca:ca:
63:95:24:48:02:7b:bb:ab:98:24:d5:28:c5:12:36:
a5:1f:f1:ae:69:c7:32:67:33:e5:43:80:86:23:4d:
41:8f:43:11:2e:0b:be:0b:23:ab:4d:49:6a:bd:d9:
da:4f:d9:1e:b7:0f:b6:12:1f:4e:1a:80:73:0f:16:
07:8b:04:25:52:8b:6a:c1:1c:57:8b:02:40:ab:32:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8E:8B:12:9B:99:A9:2A:EB:06:A2:71:3D:4A:A6:67:01:D3:FA:D6
X509v3 Authority Key Identifier:
keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b9:46:c1:57:8d:11:aa:29:a3:01:42:a3:b3:34:b3:af:09:
d6:c2:81:14:b4:a6:80:1d:30:18:1d:61:86:4f:5f:44:33:00:
a3:2d:b6:41:2f:d7:03:36:12:21:c0:94:6e:9d:9d:7c:16:c2:
aa:95:88:d5:46:f4:24:21:dc:a4:4f:93:e3:77:28:69:b8:8b:
db:2a:08:33:04:16:04:4a:98:da:59:8b:be:fd:f1:29:e9:e7:
51:b0:92:20:cf:ee:67:97:ea:aa:b5:5e:3f:c3:bb:f8:ff:80:
d2:4b:71:2c:23:47:0e:79:2e:bb:65:68:83:97:c3:92:fb:ad:
6e:f5:f5:37:89:a8:ec:7a:c8:f5:26:6b:45:df:50:5c:cb:45:
b8:41:b8:cb:12:02:f8:17:2e:1d:af:1b:31:27:d3:89:b6:7e:
ce:7c:9f:9f:77:cd:bb:a1:ce:d0:77:3f:b6:e8:d9:7f:57:04:
6b:01:a6:f3:ff:2d:11:9c:6c:3a:ff:29:60:c3:2c:0f:0b:68:
9b:87:37:cf:f9:42:9b:b0:a2:8f:11:6b:ce:ab:33:13:89:15:
e2:52:df:35:ce:ab:7d:72:0a:db:ac:33:70:32:d2:c6:cd:11:
3d:29:2f:c3:99:93:10:63:f8:15:bf:a9:1a:ff:88:c8:48:f5:
0c:dd:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:14:03 2026 by rpki-client