
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
File: eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json)
Hash identifier: OOrd10o9JvyP0Uy1TwDcxzxTFujstAuWyoMcQrwmhaw=
Subject key identifier: A0:FD:52:2D:79:66:07:E5:4D:76:33:A5:7B:83:43:5A:52:F5:32:F2
Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A
Certificate issuer: /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
Manifest number: 012A
Signing time: Wed 19 Aug 2026 06:27:09 +0000
Manifest this update: Wed 19 Aug 2026 06:27:08 +0000
Manifest next update: Wed 26 Aug 2026 06:27:08 +0000
Files and hashes: 1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: KSXISQMI5+JwflEWK9ZIo7goUYVyTWEJ48dU/OhYP+g=)
2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: JpLGsHIY2yS8bZvm382sIzqCSLe8QgPUX8GSUQYq0TE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl
rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
Validity
Not Before: Aug 19 06:27:08 2026 GMT
Not After : Aug 26 06:27:08 2026 GMT
Subject: CN=6a854cbd-fe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:12:31:6f:81:95:e7:94:05:e3:1c:6e:29:
81:a3:86:5d:67:f7:37:a4:17:3d:46:72:83:17:9c:
1b:fd:62:73:16:e6:bc:c3:25:8a:88:bb:c9:0b:4e:
18:c8:aa:fe:d2:9f:06:36:54:1b:79:b7:3e:5f:2f:
25:2f:8c:d8:90:5b:58:29:91:eb:a7:04:1c:89:1b:
65:00:29:ad:2e:d4:8a:35:db:e7:84:a2:1a:b6:a0:
98:0f:e8:3a:ff:4d:1c:ba:8d:57:aa:c1:ea:e3:63:
ac:53:ec:d2:54:ce:90:6f:02:cd:6c:dd:e0:bf:32:
43:9a:28:1d:f5:9d:e1:f1:9d:67:e0:be:76:71:6f:
64:7a:2e:1d:a5:ee:95:90:23:c5:e2:00:de:a8:56:
c5:58:bf:ec:57:29:65:7d:cb:58:dd:46:13:f7:9d:
4a:d0:be:f6:e0:64:1b:7e:cb:1d:45:ec:f1:97:0c:
b8:f9:5b:29:12:b1:a8:59:02:3c:13:ee:e5:32:5f:
b8:17:00:50:0a:2d:4b:bf:68:01:55:d3:e6:dc:be:
71:71:e1:38:87:eb:f1:9e:41:d9:3b:d4:af:8a:13:
61:f7:af:a0:c2:71:48:bf:af:b1:3f:0b:fb:8d:10:
0a:df:39:91:6c:e8:bb:92:3f:90:70:cd:21:f7:12:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:52:2D:79:66:07:E5:4D:76:33:A5:7B:83:43:5A:52:F5:32:F2
X509v3 Authority Key Identifier:
keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:8e:cb:78:fb:8b:88:1d:28:37:f1:d8:ae:cb:74:49:c1:57:
62:82:1a:0e:5a:a8:65:11:d1:30:88:0a:67:89:f2:68:03:61:
83:a0:6d:28:df:26:26:77:26:89:bf:3e:73:a1:90:fc:ce:39:
98:ef:a5:f3:2f:c4:0a:72:37:56:27:a8:56:d7:1b:97:90:74:
11:d0:3c:db:10:b5:92:ef:73:d0:6d:63:31:ce:a6:a3:6f:a9:
a6:37:25:c0:22:76:a6:6e:a9:ee:53:c5:6f:23:70:e8:ac:3c:
66:ea:8c:eb:ce:79:c9:41:2d:2e:f0:33:0e:15:3a:35:3b:7a:
62:6b:22:a9:e0:19:ce:55:26:9b:5e:b9:dc:b2:61:45:7d:e9:
2f:6b:0b:40:14:fb:e0:6f:06:54:d8:b1:bb:2a:ee:e4:41:fa:
65:72:ef:79:0f:85:dd:1b:b9:b2:c3:1b:70:41:0e:fd:da:02:
07:be:12:1b:60:be:11:27:95:0e:29:cc:1e:45:ea:d2:b5:91:
be:d6:59:75:c2:d9:9a:91:e1:8d:ea:f3:26:08:ba:13:6a:59:
b9:4f:3e:af:09:21:9f:23:37:25:c4:85:ee:3f:2b:95:6f:20:
ef:b0:a4:fb:7b:d4:04:4f:89:14:d0:f6:e8:b4:af:88:43:0c:
48:d1:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:33 2026 by rpki-client