
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier: kdAuu10W+/wa/vEJc50YNj+66c+MT3jTfXXhahJVbEk=
Subject key identifier: 64:B2:CE:C5:08:19:C0:5C:C4:E8:37:5E:D8:A0:61:2F:70:18:87:6E
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number: 0153
Signing time: Mon 01 Jun 2026 05:50:45 +0000
Manifest this update: Mon 01 Jun 2026 05:50:45 +0000
Manifest next update: Mon 08 Jun 2026 05:50:45 +0000
Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: C38o6kC27Kaf/N/Kpj8ztsqj9JiHMnkJT1EpR4nlj1w=)
2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: sWmhw22xeirzBkTQzvvE9hJncBsWONWyuiN7pZYxdxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Validity
Not Before: Jun 1 05:50:45 2026 GMT
Not After : Jun 8 05:50:45 2026 GMT
Subject: CN=6a1d1db5-cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:55:7d:9f:b1:21:65:1b:db:23:af:fb:41:
4f:c7:d2:3c:ff:3e:aa:de:d9:55:a4:ee:4b:dc:75:
11:f0:36:54:11:c0:ee:8e:c3:8a:eb:74:35:c2:de:
07:b5:45:47:cb:8e:8d:c8:5c:92:8b:99:fb:0a:a1:
1e:d8:0b:c6:db:74:d0:83:44:f9:62:3e:28:bc:eb:
08:d1:c3:a3:6a:35:80:14:58:65:8c:48:ba:41:3a:
f8:ed:33:9b:ce:bc:c2:fa:cb:46:ac:54:01:62:7b:
4f:d6:15:54:3e:86:f6:18:08:be:04:05:14:d4:8f:
ca:48:85:f5:af:14:67:68:fa:19:ca:1a:f2:34:06:
8c:2c:e0:0b:ab:1d:3a:28:76:d3:f6:24:99:aa:5a:
cc:8b:ae:fc:46:b7:d8:fd:f5:ee:6c:68:dc:86:3d:
a9:c7:08:c5:80:85:6b:53:3f:8f:aa:a3:97:21:af:
fd:34:00:d4:62:1a:a0:e6:d2:ad:30:c9:ee:15:08:
a1:af:3c:d1:8a:25:bd:14:40:b8:ef:a1:16:79:76:
15:82:7c:de:25:5c:e3:51:62:f0:78:31:5a:74:46:
a7:4e:f8:15:9c:7c:bf:c8:f7:3b:96:b1:2f:84:05:
16:53:0d:f7:0e:3b:ab:a1:94:1d:93:e6:0d:4d:31:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:CE:C5:08:19:C0:5C:C4:E8:37:5E:D8:A0:61:2F:70:18:87:6E
X509v3 Authority Key Identifier:
keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:d4:28:66:d8:dc:48:c0:59:43:ff:87:2d:93:6c:80:68:
2e:58:d3:92:0a:85:16:b5:c4:f6:8e:25:f4:56:e1:bd:03:5f:
83:9e:de:8b:c1:b7:cc:44:f1:31:01:39:c6:90:cd:2a:24:e6:
13:14:7b:01:7c:de:a9:d1:11:f2:69:7e:cc:19:28:81:14:25:
28:24:15:b0:59:a7:d5:97:30:00:24:50:60:94:80:f5:ca:30:
62:a4:25:8a:f0:d9:d5:2f:0b:e0:88:aa:4e:aa:00:f4:3a:05:
df:d9:cc:a6:7b:fc:74:fe:aa:bf:de:63:59:ee:99:d0:6b:2c:
a1:d5:03:d4:3a:46:65:1b:b7:a7:10:e6:26:22:c6:32:9c:b5:
61:96:68:6a:19:bc:36:6e:5a:a7:2d:8b:88:ef:3d:2d:ee:f6:
0b:1f:20:36:56:ee:51:b8:ab:bd:24:db:aa:b6:5e:4d:5b:fa:
7a:37:37:8d:72:cb:b3:40:5a:c0:2a:6b:1f:9b:93:80:b8:83:
fe:e5:fc:c9:fa:d2:f0:9a:3c:99:e9:7a:8f:17:83:a9:a1:83:
16:a3:b9:7f:c7:21:07:6c:a1:29:de:83:ef:14:b4:e8:19:22:
d6:06:a0:e0:5d:13:16:fc:23:1b:0d:a7:ae:b4:20:fb:18:99:
32:ed:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:29 2026 by rpki-client