
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier: Z17Q+bjWWaJ5MYOihRJ1Co1q8xjr/H5B3LHSaoeIHH8=
Subject key identifier: C1:C8:C1:B2:F7:C4:34:E8:D6:26:5F:C6:C4:40:72:91:7B:48:62:41
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial: 0304
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number: 02FF
Signing time: Sun 05 Apr 2026 01:00:26 +0000
Manifest this update: Sun 05 Apr 2026 01:00:26 +0000
Manifest next update: Sun 12 Apr 2026 01:00:26 +0000
Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: 1rlO/380QvV0X0oE1jHU+JcYeYJOhgWwmshKsQ5hAB8=)
2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: DPKmCzo8hJ9V5Pt+bf8wNdW3775xVd0a/v/XhzNF8ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772 (0x304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Validity
Not Before: Apr 5 01:00:26 2026 GMT
Not After : Apr 12 01:00:26 2026 GMT
Subject: CN=69d1b42a-3f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:7b:78:9a:5f:6d:e3:6a:a8:4a:42:50:2d:
a6:19:d2:80:52:84:84:9e:1a:9e:78:07:c7:d7:ee:
43:ad:7c:17:a5:97:3e:fe:40:92:3d:aa:1b:3f:09:
de:e6:8b:7b:3a:2f:cc:f0:8c:1a:f2:d7:58:7d:9a:
3c:b7:74:66:fd:4b:d9:c4:51:6f:e0:9d:69:71:86:
66:58:07:6b:e4:c6:d5:c9:9f:2c:63:15:29:54:f8:
2d:f5:18:ac:ae:53:9e:6c:12:0a:8c:a0:f7:de:bc:
60:68:59:76:ab:8a:5c:5b:59:7b:1f:68:7f:8f:84:
5d:25:5c:59:1f:c4:86:3b:7a:a6:fc:c7:23:1e:59:
df:69:48:54:3d:c1:a2:0e:e6:62:f7:93:71:32:e7:
a7:1b:fd:33:f7:f2:8a:b5:52:67:f5:ef:47:13:c3:
5e:0a:e1:ae:84:aa:8b:24:19:e9:f3:06:93:ee:7f:
79:f1:dd:e6:e2:e8:58:1e:ac:f5:c1:84:75:42:a1:
d6:05:26:30:d2:a6:1d:2f:94:ad:2d:4d:50:62:8a:
6d:58:e7:40:97:7c:73:89:e8:cd:9f:1d:48:04:2a:
4b:d3:d5:5b:6e:c0:b3:ca:01:be:ee:0b:e5:56:54:
42:e9:09:f6:30:e8:d0:35:91:50:0f:26:0b:6b:0b:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:C1:B2:F7:C4:34:E8:D6:26:5F:C6:C4:40:72:91:7B:48:62:41
X509v3 Authority Key Identifier:
keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:af:e9:f3:bc:ab:76:fc:ce:62:89:60:af:30:4f:88:54:18:
4d:c0:a0:6f:ce:b7:6d:fe:98:87:5c:24:d6:18:ce:5f:36:94:
9b:4a:2e:da:db:d7:62:c3:9d:0f:07:be:f7:ca:4a:47:dc:61:
24:94:c1:56:58:60:80:1a:a0:2b:47:3d:6e:35:81:e1:52:22:
c3:89:23:45:3a:ed:b3:db:bc:05:44:ea:66:f3:db:3c:85:7b:
87:7d:14:f5:98:b4:4f:ca:9b:38:a8:b2:1a:26:fb:c2:c2:06:
1f:f1:a0:cf:c3:4f:34:b9:91:8d:47:01:dc:f7:8e:b0:80:d6:
ac:74:3b:3f:ab:fa:c8:c0:a8:38:9c:4d:2f:ad:2a:33:5a:14:
8a:35:35:a7:92:ad:39:e5:36:40:81:d0:72:b2:b4:35:06:0c:
87:59:ee:b2:8d:a8:0a:29:26:76:d7:e7:a6:80:84:59:39:2d:
ab:21:2d:3c:f9:43:87:72:21:4e:c4:5a:54:44:3e:a6:18:56:
97:00:11:36:07:89:e9:0b:d0:3a:50:96:eb:91:10:68:32:19:
fb:4f:86:ea:ed:8e:9f:0c:e0:48:d8:a8:63:10:65:f2:f5:4d:
de:a6:fd:99:ec:2d:44:4b:a1:18:74:80:1a:54:81:a2:d3:85:
81:89:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:41 2026 by rpki-client