
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File: ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier: NoM4hNGtqdV+wbgJIUkcCUjSHR/9yizarbh3ATi4/H4=
Subject key identifier: 38:B4:22:D0:63:C2:6A:44:84:AD:2A:72:26:57:81:BF:9A:65:64:BA
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer: /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial: 03ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number: 03B7
Signing time: Tue 13 Oct 2026 00:52:09 +0000
Manifest this update: Tue 13 Oct 2026 00:52:09 +0000
Manifest next update: Tue 20 Oct 2026 00:52:09 +0000
Files and hashes: 1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: YPVX1/+DA4uN33bRyqRwTl5ajLHjftQouTuc4974Ex4=)
2: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: cKewtt8SgAEp19Mdq7crsI4kqR26T3STaRhxrBMFeAg=)
3: D84149CCEBAB11F090F576B05F6F56BC.roa (hash: hJz6pu98ti8mAR+MVo7nXFlkux8V4L70Mk2QQCM3jdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 00:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Validity
Not Before: Oct 13 00:52:09 2026 GMT
Not After : Oct 20 00:52:09 2026 GMT
Subject: CN=6acd80b9-752b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:b0:11:fd:54:1e:63:ae:cc:27:08:01:ae:
4a:f5:da:f3:bf:ba:b6:fc:32:85:ec:c1:a7:bb:33:
c4:88:12:e8:59:f0:0f:96:91:a0:62:07:4f:d2:6c:
71:b3:3b:b3:1e:c6:f8:67:ea:96:32:6f:58:92:1b:
3e:75:05:74:cf:c2:91:96:cf:20:13:74:ea:39:7d:
6a:f3:07:3a:c1:b5:3d:24:b3:48:7e:b9:ef:ed:d0:
e2:0b:8e:30:60:bf:3e:e3:97:2a:23:6c:57:cd:dd:
da:d7:c1:a1:3a:90:0f:4f:63:58:a6:c1:1a:9b:16:
b7:52:e9:1f:e2:c9:0c:23:67:6a:17:e2:c8:17:77:
3f:76:51:8c:1d:dc:89:1b:c8:e4:e4:f4:1e:94:c8:
30:05:1c:ea:a2:a4:4e:a3:77:d6:cf:90:1f:11:45:
57:cd:df:04:2c:93:66:e4:b3:ca:a9:6f:37:43:ed:
1f:75:8a:86:c4:7c:40:9b:34:b5:ff:ba:c5:05:8a:
c0:3e:cf:da:67:87:cd:3a:6c:5d:26:0b:af:4e:e3:
91:d6:af:32:bb:e1:95:36:73:0c:24:2d:ea:8d:ca:
78:62:24:14:0b:1c:39:f0:74:67:fb:2e:14:19:88:
ce:3f:20:f9:0d:e0:8f:fe:cc:cb:fb:54:47:a0:08:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B4:22:D0:63:C2:6A:44:84:AD:2A:72:26:57:81:BF:9A:65:64:BA
X509v3 Authority Key Identifier:
keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f8:24:c5:a6:6e:0b:a8:d9:1a:10:d1:4c:4a:88:ff:74:d9:
cc:80:99:7e:8e:af:a2:b2:68:07:d7:a2:4c:88:78:12:c1:80:
b7:c6:e9:be:ed:7c:d9:70:e0:a8:c2:f7:dc:e7:1d:50:c7:b5:
17:28:30:0f:7e:85:7c:eb:38:bb:9c:59:65:73:9b:63:ab:4a:
9f:34:cb:41:b2:65:54:00:02:bf:c8:f4:78:94:8d:fc:f4:2e:
96:8f:84:8c:ff:0b:9c:d8:52:0c:4a:65:51:e7:37:ec:dc:44:
cd:43:a5:6b:9a:bc:e5:f2:ce:32:b8:73:b6:0f:d3:9c:be:58:
3e:1a:ab:79:cd:eb:28:d9:78:96:df:e3:3e:ef:32:47:fb:22:
a0:28:da:3c:d6:c4:5c:23:b8:fe:02:a6:ad:68:b8:10:a8:cc:
85:7e:08:e4:64:c8:db:62:3e:5e:b8:dd:1e:ac:f3:81:d6:02:
e3:13:2c:a1:cb:54:d4:4f:c1:2b:52:a8:fc:b0:2d:3a:b7:5e:
98:4b:f0:c9:d1:4e:a0:37:28:60:08:0c:fd:70:02:22:5d:e5:
55:ce:9e:a4:89:66:87:2b:40:59:3f:e3:36:0c:92:2b:59:03:
9b:98:97:cb:b4:9a:61:03:69:ef:36:9f:2b:d6:22:36:73:ac:
a7:d3:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:52:35 2026 by rpki-client