
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json)
Hash identifier: L9h6NvCJKl2m9Hwt9rp8HrPzC+L5Hbnci1Ck0djHT6M=
Subject key identifier: 40:78:4E:29:01:33:84:D1:43:98:DB:D6:6B:09:7F:2C:29:BA:58:49
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial: 357B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
Manifest number: 3572
Signing time: Tue 18 Aug 2026 15:01:40 +0000
Manifest this update: Tue 18 Aug 2026 15:01:39 +0000
Manifest next update: Tue 25 Aug 2026 15:01:39 +0000
Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: zH0mZpTDmyjyJXVMJJj3C5TLaYkQ6YvKobC6Zb758+A=)
2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: FqlE9fSFXdXS5GIVYg88FabUhHOpGkCxLxf9baIvlL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13691 (0x357b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Validity
Not Before: Aug 18 15:01:39 2026 GMT
Not After : Aug 25 15:01:39 2026 GMT
Subject: CN=6a8473d4-2679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:89:0e:b0:3e:c5:1a:d3:20:62:48:92:cc:
6c:6f:82:1c:4c:b8:fe:90:91:55:ce:e5:1e:69:bf:
51:a2:e3:54:f8:89:08:b8:ed:2d:97:90:65:05:3b:
5c:64:42:c2:01:52:bf:70:c8:d5:f8:9e:fe:08:3d:
1c:cf:70:23:54:8e:f8:e9:d4:2f:51:79:7c:c0:04:
63:70:f2:dd:64:f6:8a:18:0c:d4:d9:69:5e:00:1f:
38:9f:b5:de:fb:63:d6:48:6e:e6:38:5d:fd:68:af:
d4:d9:67:d1:df:19:37:a7:de:2d:67:d3:2b:3c:29:
83:05:3e:dd:37:34:3c:0e:8f:58:13:bb:ee:84:47:
93:66:4c:f2:8d:c6:0d:92:03:44:14:95:ba:2d:5f:
89:7a:5b:bf:7b:fe:36:a4:a2:09:f4:11:88:c1:8c:
6e:aa:05:64:64:d7:32:e8:45:8c:56:1e:58:ac:1f:
fe:fe:63:f0:8d:60:0c:26:2a:f4:bc:41:f8:55:4e:
d2:a5:9b:02:08:7b:30:a2:80:1c:ad:fe:3c:58:10:
e9:bf:8a:d5:a2:bd:9e:1d:45:a0:50:8d:c0:e5:65:
89:4d:3c:0b:19:86:4c:2c:88:3e:48:16:e7:8c:4f:
d6:2c:9d:d2:d2:8f:8a:27:99:3c:5f:52:b5:96:5f:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:4E:29:01:33:84:D1:43:98:DB:D6:6B:09:7F:2C:29:BA:58:49
X509v3 Authority Key Identifier:
keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:8d:ef:82:26:5b:62:71:bf:bf:9b:d5:a9:31:7f:40:74:33:
a0:17:c2:4d:dc:00:ae:07:1f:90:c1:2e:8c:95:d9:2d:5d:13:
97:49:63:22:3a:e8:d6:ad:9e:af:5f:78:2b:af:d9:e2:b5:5b:
87:c2:b2:8e:78:18:91:e3:89:c3:e1:49:67:d4:a8:51:f1:25:
02:57:f9:d2:c5:e0:f4:da:43:0f:99:57:b9:8c:ae:2e:da:d1:
34:01:87:8c:b8:7f:2b:74:b9:e9:cf:9b:22:d4:84:93:eb:48:
2f:0f:fd:99:f4:37:5e:a8:0c:e6:42:8c:86:03:e9:1d:4c:34:
c9:ce:29:5f:e6:0b:95:fe:c5:e5:4c:29:b4:fe:31:3c:2c:b3:
ec:00:88:f2:d2:64:ef:db:cb:42:8d:6b:d8:f0:71:ea:9b:06:
cc:70:d9:80:26:bc:cd:51:57:8c:e8:13:ea:92:c3:ee:a2:ba:
5b:11:07:e4:02:49:42:eb:32:2b:e4:f1:b1:2a:e3:18:2e:a6:
3d:a7:d7:0a:50:ca:fb:33:ba:c3:12:08:8e:a2:ae:8a:7c:ef:
bf:dd:64:de:aa:a8:1c:80:98:c0:52:d5:a4:a0:c8:9f:7c:52:
80:10:b5:6e:15:87:06:e9:e8:f1:f8:6c:b2:11:c0:d1:a6:5d:
e2:a5:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:55 2026 by rpki-client