
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json)
Hash identifier: nQ3XsOgYVQ14d8loPaIVq4mxAG2w+0ES0HDC5rgImXc=
Subject key identifier: F6:BB:B2:5D:31:8D:C7:71:31:3A:39:51:B2:09:A7:24:FA:49:82:4E
Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
Manifest number: 0187
Signing time: Fri 11 Sep 2026 05:00:01 +0000
Manifest this update: Fri 11 Sep 2026 05:00:01 +0000
Manifest next update: Fri 18 Sep 2026 05:00:01 +0000
Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 9Cokkz0j+pYYQ5rleyrsfAXIafYzE7m7uLKCGcX8eII=)
2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: 9p5HLgmT1CdIHAjr4jafHOekxC05g0RlL/udgHGc7xY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl
rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Validity
Not Before: Sep 11 05:00:01 2026 GMT
Not After : Sep 18 05:00:01 2026 GMT
Subject: CN=6aa38ad1-ddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:75:24:3d:2b:ca:6d:43:f0:ca:2f:32:c9:
31:45:4c:7e:d3:00:2a:98:d8:04:d5:f5:05:1f:2c:
51:5a:5d:6d:a9:f5:91:d1:40:d6:cd:75:88:b6:55:
60:80:58:ba:0a:d0:fe:6a:80:a2:ce:5c:1d:a8:5b:
65:20:74:e1:e1:2e:12:90:2f:f2:1d:68:71:01:75:
a7:48:d9:6a:c1:ab:b6:97:e9:fc:3c:a3:d3:a9:2a:
11:ff:0a:da:7d:71:a9:56:40:50:39:18:be:30:d4:
c0:0d:61:57:30:e5:ad:38:39:36:0b:98:5e:4c:0f:
08:17:d9:dc:1e:2e:40:7f:37:12:53:df:bd:fd:23:
4f:ea:6a:22:6e:54:b1:4c:1f:50:42:8a:b7:68:ba:
8d:81:81:49:0f:3e:ce:f4:be:fb:d3:98:0a:21:01:
a0:86:30:f2:ab:ae:b4:4e:21:48:e2:69:f3:8a:2e:
e2:f1:7f:d4:54:9a:ba:12:3b:af:c9:3f:c8:66:9a:
72:09:24:6a:4d:b5:ca:0c:4e:f2:52:b2:48:64:bd:
51:f5:c0:58:0b:57:a3:6d:5c:19:e5:16:70:67:9e:
d6:68:1a:44:44:68:c8:bc:12:9f:10:c8:63:00:7b:
9e:de:f4:c6:83:84:10:60:bf:4c:9c:73:b0:4b:a9:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BB:B2:5D:31:8D:C7:71:31:3A:39:51:B2:09:A7:24:FA:49:82:4E
X509v3 Authority Key Identifier:
keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:73:96:24:a9:61:8f:7c:b1:9b:fc:bf:cb:21:8c:ff:2f:
99:e1:a6:11:fe:dc:02:11:c9:45:05:db:c3:45:57:68:2b:b7:
e0:ec:ef:ea:17:93:f6:c4:be:48:4f:df:bb:b8:ef:dc:10:72:
9a:84:31:19:48:12:f1:db:14:bc:f1:ad:d6:92:74:e7:26:f9:
1c:a5:0f:c0:01:da:97:7c:41:fd:06:53:0a:b3:d4:15:89:6b:
37:b8:a7:96:f9:31:6c:b2:92:b6:27:93:d7:b5:80:64:d1:af:
bc:5e:21:66:4c:e0:17:16:da:55:7f:fe:a9:b2:a0:df:b7:85:
2b:eb:31:2b:ff:1c:16:ef:a8:6e:7b:2d:69:f3:a7:89:cc:03:
78:b4:2c:44:e2:1d:7c:c0:d2:ac:07:0e:5f:66:06:82:d7:22:
a8:21:88:22:55:df:ee:42:56:4e:1e:77:2a:03:21:3c:80:fc:
b4:0e:57:2e:7f:45:e8:09:36:78:b1:5b:08:8e:53:6f:54:ac:
bf:e4:e4:7a:6e:70:01:77:87:7c:36:12:7c:48:a2:4a:71:75:
ed:b1:d6:b8:a6:4e:9d:4b:60:12:5c:68:e9:af:ad:cc:ee:64:
3f:1f:8a:3b:d6:2d:5a:56:a5:4d:9a:c9:c8:86:cb:e9:2e:3e:
be:3e:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:07:41 2026 by rpki-client