
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json)
Hash identifier: VPNjzj5nB/Omo4/2UGP6wBtj5RP+XYkf1b7toaepC1w=
Subject key identifier: 24:C8:88:C3:D9:2D:CA:A5:44:61:71:EE:42:CE:11:29:F9:37:07:6C
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial: 3593
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
Manifest number: 358A
Signing time: Sun 04 Oct 2026 14:59:26 +0000
Manifest this update: Sun 04 Oct 2026 14:59:25 +0000
Manifest next update: Sun 11 Oct 2026 14:59:25 +0000
Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: bElpS3ECcv9FJc+4QIeCJ1tedtoiOV16mKUT3t1VaYk=)
2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: FqlE9fSFXdXS5GIVYg88FabUhHOpGkCxLxf9baIvlL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13715 (0x3593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Validity
Not Before: Oct 4 14:59:25 2026 GMT
Not After : Oct 11 14:59:25 2026 GMT
Subject: CN=6ac269ce-546b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:c3:7f:fa:4a:5d:52:b8:d4:c3:9a:42:23:
dc:6b:67:b1:58:04:d6:b7:72:bd:13:ab:17:15:37:
c2:b6:95:2e:da:6c:2a:c1:a0:da:93:30:a8:a2:d8:
c7:a5:5b:fb:5d:5b:0c:19:6b:5a:bc:0d:f4:bb:0e:
71:b1:b9:e0:1e:4e:9e:e2:ec:9f:5e:43:4e:de:f1:
00:18:0b:16:f3:f7:d5:31:4a:73:72:a9:b3:f4:6a:
23:33:bc:ce:70:10:52:7e:ff:62:dd:54:31:44:e9:
b2:b9:7e:68:df:f8:8a:7b:47:fa:e8:3b:7a:c4:31:
8e:6a:8a:36:4d:e4:9c:d1:11:da:bb:1c:29:ff:ec:
72:cf:f7:b0:0e:87:0a:11:b0:7b:99:6b:6a:d3:d7:
11:d7:18:be:d2:b7:3e:2d:33:ad:72:44:d9:7b:09:
f8:2c:16:2c:6f:cf:64:bd:f7:19:63:8b:af:6c:2d:
e5:83:24:ac:69:47:1b:8e:17:89:49:4a:ca:e0:11:
cf:26:1a:34:55:6d:20:d5:28:2b:cc:fc:b4:79:cf:
8c:51:2d:16:54:87:df:8f:6f:36:a0:40:10:fb:c1:
20:ef:6a:01:d2:ff:1d:78:b3:bc:b7:20:d0:ad:d5:
e0:d0:76:ef:92:13:bb:a2:f6:e6:fb:52:2f:25:a1:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:88:C3:D9:2D:CA:A5:44:61:71:EE:42:CE:11:29:F9:37:07:6C
X509v3 Authority Key Identifier:
keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8b:09:c2:de:79:aa:dc:6b:3b:c7:9d:9c:4e:e0:66:6a:d6:
c9:2c:cb:af:21:78:0e:7f:ff:4f:ff:e5:f4:cb:36:13:21:a2:
7e:a4:1e:05:8e:b6:11:e4:88:12:8f:d3:6d:3c:a7:7b:cd:97:
66:9a:d3:e9:ff:c9:1f:41:cf:05:47:13:0e:83:f8:99:cb:07:
77:fd:60:31:19:ce:b7:55:31:87:22:e1:fe:f3:f6:a3:9c:b0:
ab:ee:e0:bf:5d:bc:20:cf:51:6c:71:e4:0b:03:3b:4a:c1:8a:
0c:ae:dc:49:22:a8:2d:1d:a6:d1:f9:a7:65:85:96:ab:2e:dd:
b9:5b:4b:c8:bf:f9:29:03:b7:27:88:73:29:78:67:ad:28:d9:
e0:7f:54:75:d9:a4:4a:e8:77:7c:e1:91:31:3d:be:8e:24:27:
fe:fe:ef:14:be:82:a2:39:ec:69:d4:71:0f:48:f8:36:c3:c9:
cb:e4:3a:df:cf:34:a9:97:62:a5:75:04:c3:2f:7e:b8:65:da:
00:87:9d:42:c4:55:5d:02:42:f2:44:5c:a2:84:c9:43:fe:c5:
27:51:01:55:0b:7b:b4:da:44:f6:fa:b8:dc:49:ee:cf:86:bb:
a1:8b:26:15:88:be:38:f1:8d:5b:39:93:98:fc:d0:72:54:e4:
0f:3c:7a:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVGRjMxMTAvBgNVBAUTKDdBNjYxMDUxOTQ1Q0UyRThGQjRBRTZERTYzQjI4NDc4
QjBDRUQzNUUwHhcNMjYxMDA0MTQ1OTI1WhcNMjYxMDExMTQ1OTI1WjAYMRYwFAYD
VQQDEw02YWMyNjljZS01NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxNXDf/pKXVK41MOaQiPca2exWATWt3K9E6sXFTfCtpUu2mwqwaDakzCootjH
pVv7XVsMGWtavA30uw5xsbngHk6e4uyfXkNO3vEAGAsW8/fVMUpzcqmz9GojM7zO
cBBSfv9i3VQxROmyuX5o3/iKe0f66Dt6xDGOaoo2TeSc0RHauxwp/+xyz/ewDocK
EbB7mWtq09cR1xi+0rc+LTOtckTZewn4LBYsb89kvfcZY4uvbC3lgySsaUcbjheJ
SUrK4BHPJho0VW0g1SgrzPy0ec+MUS0WVIffj282oEAQ+8Eg72oB0v8deLO8tyDQ
rdXg0HbvkhO7ovbm+1IvJaESjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTIiMPZ
LcqlRGFx7kLOESn5NwdsMB8GA1UdIwQYMBaAFHpmEFGUXOLo+0rm3mOyhHiwztNe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZGMy9DRUFCQjRFNjFE
OUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1ajdTdWJlWTdLRWVMRE8w
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VtWVFVWlJjNHVqN1N1YmVZN0tFZUxETzAxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUZGMy9DRUFCQjRFNjFEOUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1
ajdTdWJlWTdLRWVMRE8wMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPYsJwt55qtxrO8ednE7gZmrWySzLryF4Dn//T//l9Ms2EyGifqQeBY62EeSI
Eo/TbTyne82XZprT6f/JH0HPBUcTDoP4mcsHd/1gMRnOt1UxhyLh/vP2o5ywq+7g
v128IM9RbHHkCwM7SsGKDK7cSSKoLR2m0fmnZYWWqy7duVtLyL/5KQO3J4hzKXhn
rSjZ4H9UddmkSuh3fOGRMT2+jiQn/v7vFL6CojnsadRxD0j4NsPJy+Q63880qZdi
pXUEwy9+uGXaAIedQsRVXQJC8kRcooTJQ/7FJ1EBVQt7tNpE9vq43Enuz4a7oYsm
FYi+OPGNWzmTmPzQclTkDzx6yA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 00:57:57 2026 by rpki-client