
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File: ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier: mn+dLPSAJF6OGeGwjeRfEDKzz5YFHNCb83S0xOVLb0U=
Subject key identifier: 55:EB:F5:35:1B:F9:4E:48:B3:F0:52:70:91:1D:19:32:F6:88:38:ED
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer: /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial: 0322
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number: 031D
Signing time: Wed 03 Jun 2026 01:13:36 +0000
Manifest this update: Wed 03 Jun 2026 01:13:36 +0000
Manifest next update: Wed 10 Jun 2026 01:13:36 +0000
Files and hashes: 1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: gs+6Z5/vrPrqFf6Y9h/Ma3DRd1P1WhdaDojSIp8CJEs=)
2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: DPKmCzo8hJ9V5Pt+bf8wNdW3775xVd0a/v/XhzNF8ok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Jun 2026 01:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 802 (0x322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Validity
Not Before: Jun 3 01:13:36 2026 GMT
Not After : Jun 10 01:13:36 2026 GMT
Subject: CN=6a1f7fc0-90ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:04:a8:19:3d:e2:ac:07:76:c1:41:f6:d2:
3a:87:58:2e:d6:6b:f2:95:f6:7e:f0:da:7b:bd:f1:
8b:8c:c8:15:b4:4b:d3:07:4a:13:58:e6:ee:d9:7a:
7e:1a:63:51:cd:95:9a:9e:c8:43:da:01:82:67:bd:
e9:e4:b6:c5:80:00:bb:02:74:cc:e6:75:09:ab:89:
83:aa:6a:ca:d5:e2:44:ab:f3:51:87:d8:88:96:57:
5c:17:4c:fd:6f:6f:29:e4:79:2f:aa:76:44:b1:88:
8a:98:00:dc:8c:81:62:39:d0:e6:d2:c4:3b:1b:4e:
02:94:db:bf:be:70:84:bb:de:bf:25:d6:12:f0:7e:
e2:9a:ab:70:5a:8f:9d:a7:b3:13:ec:ad:b7:df:a8:
47:d5:11:f2:34:2e:d1:f5:73:bd:89:55:b2:05:4e:
af:c0:f2:f7:7b:6b:5c:0e:d7:02:50:e0:2c:94:d3:
42:92:38:29:85:c0:df:ac:01:98:b9:3c:fb:4a:b9:
db:f9:81:c0:49:a3:aa:a1:1c:5d:ea:35:f5:a6:eb:
42:18:ea:c9:9f:a7:d6:0b:34:fe:ef:f4:19:04:82:
ac:40:7d:d1:af:9c:fe:05:9a:6b:4c:54:f5:38:5a:
a0:88:0a:fd:17:4f:10:65:9f:8c:58:00:e0:43:fd:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EB:F5:35:1B:F9:4E:48:B3:F0:52:70:91:1D:19:32:F6:88:38:ED
X509v3 Authority Key Identifier:
keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:4f:69:f9:8b:76:1b:93:46:6e:df:58:7e:0f:3d:10:8a:a3:
19:6b:98:c1:a7:f8:af:da:ce:dd:ae:b7:45:e1:76:ae:b0:b9:
81:e5:4e:b4:f0:28:5f:9c:d4:4b:ca:78:22:21:c9:fe:05:32:
12:03:08:d4:30:a3:98:8c:88:1d:4d:ef:54:b6:92:45:1d:08:
98:3a:fc:af:6f:f9:77:f2:d9:80:87:ba:25:cd:22:3b:27:42:
1a:1e:01:5b:f8:e7:db:cf:1e:02:83:9b:90:32:74:c7:c2:d1:
c4:56:fb:71:3e:89:ac:ab:12:5a:b3:18:38:0c:3e:bc:47:a0:
c8:5b:73:f5:9d:53:b6:95:da:50:89:96:0a:5d:9d:1c:44:4d:
4d:ac:34:1d:8b:6e:2e:90:94:e7:b9:4d:ee:1d:c1:83:2c:c5:
f5:07:41:56:3a:28:88:0d:57:d6:66:d0:29:39:9e:ab:8b:0c:
a2:17:cb:d0:ad:dc:6c:81:98:e2:01:07:23:e7:05:9f:04:2e:
75:10:eb:eb:47:62:b9:86:6c:c7:21:c9:b6:1e:ec:35:b5:b9:
7b:cf:a4:a0:6b:a9:34:ee:c8:12:c3:03:04:77:b7:77:b0:45:
53:8b:e9:7d:09:95:57:2c:05:96:0a:a2:0a:89:00:6f:03:64:
94:84:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:20:48 2026 by rpki-client