
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier: wr88Y+53XmBPUXiNNvHNy7Y49T12wMvnm0o4yIZixZQ=
Subject key identifier: A6:AD:93:14:EB:8F:F6:65:5F:EE:41:EA:BF:D1:9A:53:34:CE:FE:1D
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number: 019D
Signing time: Sun 05 Apr 2026 03:44:17 +0000
Manifest this update: Sun 05 Apr 2026 03:44:16 +0000
Manifest next update: Sun 12 Apr 2026 03:44:16 +0000
Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: I6vDh2y0t/U5NSDxL48sW+fwnF35r1htes2JUJc/4rc=)
2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: snLtGNX/R2DW6Vtfs0FBnEL4/BkZ4v63NpPkeUhXcvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Validity
Not Before: Apr 5 03:44:16 2026 GMT
Not After : Apr 12 03:44:16 2026 GMT
Subject: CN=69d1da91-4eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:40:aa:a3:a9:9e:bb:2f:52:ea:88:0b:ac:
cb:63:02:c2:96:26:46:d6:79:b0:f8:21:5d:9a:10:
e5:24:b9:6a:ee:e0:69:27:15:16:11:74:78:23:4a:
66:31:63:89:6d:4d:73:ce:1a:c5:d1:28:88:c8:39:
73:2b:f5:83:bb:98:29:82:f0:91:0c:13:8f:26:30:
84:05:d8:cb:54:18:aa:54:1b:bc:d1:63:d0:41:df:
c1:a2:13:0a:8f:d9:c7:6c:7d:b8:8c:40:a0:fa:0b:
b7:1f:d7:e3:87:90:25:71:8f:41:cc:5e:eb:c5:94:
8d:64:81:4b:d6:8c:89:d2:c0:2e:79:a1:5a:c1:39:
6e:0f:63:a2:c2:74:83:9b:b9:f6:95:7a:92:cf:28:
38:14:2d:f2:a2:49:aa:e0:b9:bc:81:89:78:96:9b:
4a:dc:af:5a:f2:65:0c:a3:bd:03:9e:5f:14:65:b2:
60:7f:60:e3:0f:87:8a:e4:5a:fe:0b:ae:e6:86:c2:
0a:61:c0:6f:73:1e:fc:15:2e:f9:fa:28:3a:82:9a:
f2:25:66:64:00:08:95:52:b5:e3:bf:b7:7d:9e:f6:
70:0e:ae:a5:9c:9e:0d:39:84:5a:93:8f:d2:e6:a8:
ae:80:7f:83:db:a0:80:00:03:9e:e7:c5:f3:03:1d:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AD:93:14:EB:8F:F6:65:5F:EE:41:EA:BF:D1:9A:53:34:CE:FE:1D
X509v3 Authority Key Identifier:
keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d1:31:97:56:a7:48:4c:6f:95:e1:89:52:ee:77:df:2a:ec:
04:7c:36:a1:d0:49:71:e7:f3:b6:4f:34:f0:dc:ff:8c:76:46:
6c:e8:9d:c6:08:47:1e:01:d7:5c:38:4d:ce:75:a5:57:7a:64:
e6:ab:f9:83:c1:60:42:0d:34:79:68:41:4c:2d:84:73:d0:c4:
69:a4:66:ad:70:bc:30:49:82:c7:ba:92:26:b8:4a:65:4d:cb:
48:36:8b:da:94:73:39:cb:de:a8:b6:5c:4f:37:2d:c7:a5:d1:
37:17:d0:e6:c6:33:7f:30:f0:17:99:ff:b3:23:18:4b:08:0a:
37:f7:b3:6a:0b:93:03:e0:a6:81:83:07:a2:fb:e0:30:55:7c:
52:cd:19:1c:7c:29:0f:e5:52:9a:19:ef:5f:89:9c:59:17:ea:
89:20:98:71:c8:7e:64:59:6c:33:70:ec:ee:fe:de:43:01:5d:
99:ce:e1:d2:89:c6:8c:fd:cd:01:29:a1:66:61:cb:f4:fe:a1:
28:80:e7:6a:7b:d4:10:15:0e:a2:0f:b4:e0:aa:93:53:8b:24:
c3:e8:29:d6:7e:b9:f3:3d:ae:64:0b:d2:fa:5a:0e:84:dd:d8:
d2:14:aa:04:24:ca:2f:82:dc:e6:fb:57:a4:d4:24:2f:f1:d4:
bb:8b:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:44:10 2026 by rpki-client