
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File: E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier: X2uOu0WQ+iQ8xeOY+sHLzNip0x1qiG//I82D8l0P2YU=
Subject key identifier: 54:C0:61:B9:95:F8:02:22:A8:D6:A7:BD:BB:95:88:B0:55:D3:D3:45
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer: /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number: 01AE
Signing time: Mon 01 Jun 2026 04:50:15 +0000
Manifest this update: Mon 01 Jun 2026 04:50:15 +0000
Manifest next update: Mon 08 Jun 2026 04:50:15 +0000
Files and hashes: 1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: X8uMiprS4HXeFHqYC2LpTSTQ5anHshU3k7bJBriH6UM=)
2: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
3: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Validity
Not Before: Jun 1 04:50:15 2026 GMT
Not After : Jun 8 04:50:15 2026 GMT
Subject: CN=6a1d0f87-a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:96:b3:00:2d:cf:b4:93:1d:49:c2:79:d8:
fd:72:65:4e:89:1d:e9:4b:38:2e:f4:a5:a8:44:f4:
5e:ba:d3:d3:c8:d3:dd:7b:7d:7d:cb:ba:e0:c9:bf:
86:da:ee:92:c0:f0:f8:bf:75:af:de:a7:aa:d3:cd:
e5:30:ba:80:da:0c:3b:20:fa:dc:01:3b:42:02:2d:
f0:4b:fb:7d:71:93:76:41:f5:69:d4:eb:ef:46:ad:
87:9f:41:5d:c3:83:39:f6:8e:5b:2b:8e:ab:9e:36:
4b:94:ee:5e:3d:0e:6f:77:c9:66:54:96:67:3e:99:
a9:cf:7d:7e:4f:67:b7:0e:99:8f:db:e3:ed:24:2e:
e3:64:87:20:7e:98:83:d8:6c:4e:e2:99:9a:46:bf:
bb:a1:13:a5:00:73:aa:24:ca:06:e8:c5:30:c9:8e:
6c:ea:cd:db:ae:81:2a:ac:95:d5:0b:fc:a5:b7:20:
97:6d:41:ea:c7:f1:75:52:27:ae:09:1c:63:53:a9:
aa:35:b9:8e:56:67:57:f7:1d:59:7d:bf:48:f6:43:
73:44:f8:a4:c0:dc:9a:49:d3:bc:8f:a4:e9:e9:e8:
f5:9c:34:de:63:45:c7:73:eb:fc:38:41:db:6d:04:
37:bb:4f:29:8b:50:9b:a6:b7:94:02:a6:1d:16:06:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C0:61:B9:95:F8:02:22:A8:D6:A7:BD:BB:95:88:B0:55:D3:D3:45
X509v3 Authority Key Identifier:
keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:45:e6:67:34:63:fb:ba:0d:6b:be:e3:2b:d8:bf:42:bf:20:
db:4f:ec:55:46:fc:46:7e:d5:68:fe:44:9a:88:a9:db:04:94:
aa:20:42:58:ae:93:4d:81:5d:0a:e5:02:35:86:72:0a:96:2b:
55:55:9d:99:3b:49:a0:c9:cb:85:f9:2e:f0:31:9f:dd:26:2a:
a3:08:49:06:25:64:b4:13:d0:d9:03:79:01:0c:93:b1:70:cc:
a2:8e:97:51:9c:44:46:05:96:48:80:34:6a:3c:65:df:8e:be:
6b:4b:b0:9d:9d:cc:a2:bf:d0:ac:13:0f:ff:42:41:50:92:c1:
03:10:28:85:ea:cb:c4:61:45:c8:c0:fc:dc:fc:16:2f:e6:01:
05:92:c1:b0:6b:42:bd:31:55:36:87:be:30:d9:62:9c:3f:f7:
24:e7:cf:fb:3f:8f:58:8c:0f:d2:ca:6a:5b:4c:ba:0c:a0:51:
a0:f0:ff:53:3d:5e:60:1e:6f:f3:73:3c:3b:eb:c5:1c:7c:59:
f1:c4:f1:af:5a:8f:46:ce:c5:18:8c:0a:86:ff:6d:5e:67:42:
5a:9a:ad:bf:da:f4:3c:8f:f1:20:5e:96:19:7c:18:10:1a:34:
17:55:e6:e0:8b:ac:b4:96:d6:71:b5:38:a4:0b:47:23:f6:64:
3a:47:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:31 2026 by rpki-client