
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier: ZGaCvwgn9VXfcL4hotJOa3HDkjsCMjKrvFxN12NAQuc=
Subject key identifier: 1B:A1:BD:C8:8B:E5:30:BC:9C:91:01:EA:DB:12:72:08:5F:D9:4D:AE
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial: 0388
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number: 0354
Signing time: Sun 05 Apr 2026 00:49:05 +0000
Manifest this update: Sun 05 Apr 2026 00:49:05 +0000
Manifest next update: Sun 12 Apr 2026 00:49:05 +0000
Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: NBr9OKjFjo7VsPvjvGe1HvGaC0RQlqeO1THKPlPH9Ek=)
2: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: GQFU2SsTLAwSW2hwAuyStmN7C3ILGi9PMKMwLmksl+I=)
3: D84149CCEBAB11F090F576B05F6F56BC.roa (hash: 3GizWDTB/+ZAJYuEqA1GEBMiAzMJTBKziwTY9IY/fK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Validity
Not Before: Apr 5 00:49:05 2026 GMT
Not After : Apr 12 00:49:05 2026 GMT
Subject: CN=69d1b181-0cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:45:99:3a:54:16:60:81:61:6f:fd:5d:3e:d8:
99:29:10:1a:a6:2f:91:83:db:27:1a:f1:b2:7c:7c:
61:21:c4:07:bc:0c:ae:42:6d:b2:96:1d:ae:9a:6d:
bf:26:e8:0a:e4:6a:a0:ea:ad:11:56:f3:ce:5a:96:
1d:71:a7:e9:36:b1:5f:91:bf:f8:f9:57:17:d4:d2:
2c:52:e6:cc:ba:f6:7c:d5:56:2b:32:43:c1:b4:27:
48:2c:3a:3c:8e:46:3d:ef:43:78:c2:38:f5:2b:30:
df:75:cd:66:e7:e2:9d:23:90:4e:10:41:18:aa:42:
c4:9f:49:fd:3c:c6:e0:91:48:22:73:8a:96:e4:91:
a7:f4:a1:f3:8a:91:5a:32:58:fc:29:72:2e:a0:04:
04:aa:ad:46:ce:16:d5:92:ba:e5:ba:64:8a:a6:70:
53:d0:b8:dd:43:59:d5:3a:d5:78:ad:36:42:8a:75:
33:8c:64:cd:70:3d:0a:91:51:39:5b:31:91:d7:35:
ee:d7:03:c9:36:be:5e:43:5a:14:f8:38:6a:84:fb:
13:13:eb:49:2e:c2:c2:87:d7:41:92:25:9c:26:be:
44:14:1a:3d:fd:c0:01:07:43:73:9f:40:b2:16:44:
84:d5:84:9e:55:60:3e:1d:20:d8:8d:94:53:46:fa:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A1:BD:C8:8B:E5:30:BC:9C:91:01:EA:DB:12:72:08:5F:D9:4D:AE
X509v3 Authority Key Identifier:
keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:e0:a8:72:f3:90:66:82:42:59:3c:86:26:14:51:b3:b0:
c4:81:76:48:cf:78:99:af:8b:ae:5d:57:01:f1:fe:6e:ef:cf:
8a:e3:e8:a8:49:0d:b8:d0:bc:61:07:e2:84:6a:34:1e:ee:a7:
fa:ad:02:6a:67:2a:b7:85:4f:b6:15:42:a0:fc:30:c1:46:fe:
86:a8:fd:f9:7f:ce:c1:7e:3d:b3:95:4c:c6:c3:77:32:6e:ce:
b8:dc:12:44:02:c6:e5:35:00:13:bc:cb:fe:03:1c:fb:db:05:
4c:4b:57:34:d9:60:f3:bb:1b:87:16:dd:e2:c1:11:a7:fe:ee:
79:b6:c8:97:d6:8a:a0:43:a6:6c:0e:c9:9c:da:dc:61:d3:be:
f1:d1:58:2f:ee:96:6c:dc:82:12:a0:9b:db:a4:51:54:19:55:
10:97:28:6a:68:49:87:2a:11:21:59:82:66:8e:23:52:a5:d8:
c4:5e:82:d9:65:93:40:1a:89:5e:88:16:bc:24:d1:bc:b9:70:
58:e0:6b:cb:69:75:cf:78:e1:cd:42:06:57:a1:d5:36:cc:fe:
ca:5d:37:16:ed:01:ad:18:2f:d3:2e:b8:eb:37:eb:a2:08:0c:
30:df:ea:52:47:46:95:65:33:e1:c0:de:19:e4:be:2a:e3:ec:
38:9d:7d:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBENjkxMTAvBgNVBAUTKDEwM0ZBOEJERkZGQjlGMDU1NzA3MkM0NzMzMkI4MUE5
RTgwRUREMzUwHhcNMjYwNDA1MDA0OTA1WhcNMjYwNDEyMDA0OTA1WjAYMRYwFAYD
VQQDEw02OWQxYjE4MS0wY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5EWZOlQWYIFhb/1dPtiZKRAapi+Rg9snGvGyfHxhIcQHvAyuQm2ylh2umm2/
JugK5Gqg6q0RVvPOWpYdcafpNrFfkb/4+VcX1NIsUubMuvZ81VYrMkPBtCdILDo8
jkY970N4wjj1KzDfdc1m5+KdI5BOEEEYqkLEn0n9PMbgkUgic4qW5JGn9KHzipFa
Mlj8KXIuoAQEqq1GzhbVkrrlumSKpnBT0LjdQ1nVOtV4rTZCinUzjGTNcD0KkVE5
WzGR1zXu1wPJNr5eQ1oU+DhqhPsTE+tJLsLCh9dBkiWcJr5EFBo9/cABB0Nzn0Cy
FkSE1YSeVWA+HSDYjZRTRvqKoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBuhvciL
5TC8nJEB6tsScghf2U2uMB8GA1UdIwQYMBaAFBA/qL3/+58FVwcsRzMrganoDt01
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQ2OS8wRTE3N0Q1QTA1
OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253VlhCeXhITXl1QnFlZ08z
VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VELW92Zl83bndWWEJ5eEhNeXVCcWVnTzNUVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEQ2OS8wRTE3N0Q1QTA1OEMxMUVEQURENjYwMTFDNEY5QUUwMi9FRC1vdmZfN253
VlhCeXhITXl1QnFlZ08zVFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiAfgqHLzkGaCQlk8hiYUUbOwxIF2SM94ma+Lrl1XAfH+bu/PiuPoqEkNuNC8
YQfihGo0Hu6n+q0Camcqt4VPthVCoPwwwUb+hqj9+X/OwX49s5VMxsN3Mm7OuNwS
RALG5TUAE7zL/gMc+9sFTEtXNNlg87sbhxbd4sERp/7uebbIl9aKoEOmbA7JnNrc
YdO+8dFYL+6WbNyCEqCb26RRVBlVEJcoamhJhyoRIVmCZo4jUqXYxF6C2WWTQBqJ
XogWvCTRvLlwWOBry2l1z3jhzUIGV6HVNsz+yl03Fu0BrRgv0y646zfroggMMN/q
UkdGlWUz4cDeGeS+KuPsOJ19AQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:47 2026 by rpki-client