
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json)
Hash identifier: BgepYPEe1kXznv58ZfwzRQf63fdfocvSXrIYHrUv5WM=
Subject key identifier: 5C:FB:B3:9B:2A:FD:72:E1:21:64:06:81:4C:8C:14:77:75:A0:DF:92
Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
Manifest number: 013B
Signing time: Mon 05 Oct 2026 05:55:06 +0000
Manifest this update: Mon 05 Oct 2026 05:55:04 +0000
Manifest next update: Mon 12 Oct 2026 05:55:04 +0000
Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: N+TcKa+BD+/jdHtPtKeku1qgJCEjYLlGlxmi7rx7Chw=)
2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: 4I3YRfPKOjcovrac0D0sAzmoHXyKdCFAmDPBdA25KWc=)
3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: F3bFRPXukujKgVPzZhyYRW0y3adv8oLW0Md9EW8SZRU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177
Validity
Not Before: Oct 5 05:55:04 2026 GMT
Not After : Oct 12 05:55:04 2026 GMT
Subject: CN=6ac33bb9-a52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:80:c1:77:d0:36:3f:8c:e9:be:e4:1e:28:
58:06:12:b3:39:d5:f7:1b:b1:60:67:5c:c8:86:e4:
a9:d1:09:78:0b:98:6e:14:b9:0c:a7:98:77:11:da:
48:60:47:e2:65:16:80:05:c9:60:7f:e9:ae:15:34:
56:44:e7:30:e8:1f:49:ae:a6:55:73:4e:26:61:cf:
2a:10:f4:f7:a2:43:e3:13:60:53:b1:1c:a7:69:bc:
8e:cf:52:c8:7c:da:19:46:00:51:6d:49:bf:c2:e6:
ef:f0:2c:cd:39:b4:9c:62:bf:d2:28:c6:5d:d9:41:
d8:bf:12:ee:f9:33:c0:ea:67:b3:cc:60:dc:45:c2:
19:11:05:1a:cb:c6:fc:de:a0:67:48:25:54:f1:81:
b5:8b:77:9a:3c:e3:ee:0e:20:78:ad:4f:d7:d5:9e:
51:80:25:71:f2:29:79:fe:ce:b2:dc:38:16:0e:7b:
87:71:21:7f:5b:3f:9b:dd:b9:b3:22:fd:3f:93:7e:
2e:b9:fc:78:08:0e:73:8b:68:2a:60:ae:09:dc:4e:
9c:59:2e:11:82:cf:bb:f4:47:7c:16:55:b0:af:8d:
3d:99:0f:96:a1:2d:5f:d3:18:43:9f:07:0e:05:d2:
b9:ad:61:8f:51:fa:ca:43:98:6e:64:f2:20:9b:bc:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FB:B3:9B:2A:FD:72:E1:21:64:06:81:4C:8C:14:77:75:A0:DF:92
X509v3 Authority Key Identifier:
keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b2:84:c6:5a:05:b4:27:f2:11:a1:d3:62:53:b0:23:e2:25:
34:9a:6b:b8:af:14:a8:b3:86:7b:e9:48:4b:30:68:00:4f:0c:
4a:bc:cd:23:55:79:fc:9c:4d:0f:4b:9c:8f:01:1f:e4:40:06:
3d:49:1b:f9:4a:4b:66:2a:1e:c3:75:07:03:81:14:8f:47:0b:
00:8c:74:3a:46:73:71:70:df:03:78:64:63:84:e0:47:ac:82:
0d:fa:3c:91:a1:39:60:62:1a:c6:7d:19:ef:b4:90:d1:e2:8e:
04:34:3b:d5:6d:aa:ff:c2:21:df:a7:bd:d5:80:cf:aa:fb:2b:
dd:82:ca:a0:5e:0a:66:74:63:55:a0:55:35:73:20:28:6b:ca:
25:e5:37:49:37:88:34:27:d7:f4:1b:53:31:a1:a8:69:4f:bd:
b1:42:e2:76:d4:af:be:1f:ad:30:35:ca:8f:bb:63:2a:7e:18:
6a:38:27:2a:ac:22:80:3c:99:54:92:a2:2c:d3:25:79:bd:be:
43:f6:20:e4:8e:b8:0d:1d:b4:8f:91:14:77:e9:3a:15:67:c5:
a9:02:15:6c:d1:a4:1a:f5:b5:ec:15:18:ee:fb:b0:bf:c9:da:
09:13:e1:3e:fd:92:78:eb:82:57:4e:4d:5e:90:99:81:94:01:
81:5b:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:26:43 2026 by rpki-client