
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier: R855cspfdlvF1BOpThrr1QcgCTsAz/pJPGSf+4+Q8gE=
Subject key identifier: C6:1E:79:51:5B:0A:EF:00:0F:6E:8C:D9:1D:5B:EE:5F:CE:48:F6:3D
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number: 014C
Signing time: Fri 17 Jul 2026 06:19:22 +0000
Manifest this update: Fri 17 Jul 2026 06:19:21 +0000
Manifest next update: Fri 24 Jul 2026 06:19:21 +0000
Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: UcK5af65njeo1I/bXVRU7uVut+FLGaFgRn5A66cHUAk=)
2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Validity
Not Before: Jul 17 06:19:21 2026 GMT
Not After : Jul 24 06:19:21 2026 GMT
Subject: CN=6a59c96a-3d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:70:22:2e:a0:23:b3:3d:9f:f9:db:9a:a9:ea:
5b:3d:a8:04:34:0b:9f:d2:ec:06:41:04:56:76:2a:
c4:c6:bd:96:bd:b8:2e:b0:46:67:35:99:76:9a:04:
0f:47:c0:26:4e:d9:2e:7b:31:5e:cc:99:e9:38:9c:
9e:58:0b:10:9f:cb:db:ca:5d:6b:27:7c:cc:87:6e:
70:46:d0:0c:db:05:05:3f:37:77:fa:a7:95:93:b8:
8d:fc:90:c2:96:d7:36:2d:ff:b6:94:e7:55:33:a7:
74:3e:4e:52:7d:70:0d:9c:c4:60:47:83:d7:82:b2:
5e:08:93:8f:82:c1:8d:da:10:86:10:e0:ff:0a:22:
33:9c:a8:88:02:0e:52:75:89:18:35:50:e1:44:d7:
3f:cc:93:e1:3a:79:04:ba:b6:53:a5:3c:5e:a2:17:
d6:cf:37:ba:a7:09:61:45:99:38:a6:87:85:37:e1:
35:fc:89:0a:6d:86:ea:c5:ea:dc:a7:a8:50:fc:e1:
41:a8:d5:a5:d4:71:b9:e3:e0:20:73:f9:28:a4:ab:
b2:bd:1c:ff:45:12:7c:4c:02:b4:28:c7:d3:4f:e1:
59:39:4a:f2:58:29:d9:38:70:e3:24:87:ea:22:77:
5d:10:48:5f:9d:4e:84:ac:bd:7a:c5:ff:2e:24:e8:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1E:79:51:5B:0A:EF:00:0F:6E:8C:D9:1D:5B:EE:5F:CE:48:F6:3D
X509v3 Authority Key Identifier:
keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:8d:ba:b3:91:b4:ec:77:76:b1:01:97:ad:44:43:c4:ee:
d9:23:fa:d9:22:3f:bc:8a:5b:ed:a9:0c:06:95:55:fa:7d:27:
ec:8a:08:a7:74:26:56:c4:ce:d2:4c:2e:09:26:3e:7a:68:eb:
7f:21:19:3e:c0:fd:8b:4b:45:9d:7e:f9:87:81:58:9e:ce:3a:
00:77:c9:1f:94:67:8d:22:49:e8:92:63:a5:c5:27:7a:3f:9a:
d3:9e:01:b3:40:4d:cf:5f:8e:f0:2b:3a:07:00:f6:5e:b0:e9:
2d:d7:b2:cd:55:b6:1c:83:22:70:9d:4a:fc:04:c1:f4:f2:b9:
aa:29:e2:9f:19:d7:6b:b6:67:c6:bd:d4:22:dc:49:a7:1d:c4:
2f:0a:fd:79:9d:2c:ae:3e:5a:b3:bd:6d:50:2c:aa:96:be:ca:
d7:28:5a:34:35:19:c6:d3:c0:83:8a:ef:95:42:d6:9c:13:bb:
d8:f5:dd:aa:29:0e:85:65:a2:3f:00:25:fc:7b:c0:77:57:d5:
3b:5a:1c:26:ac:8d:8d:7f:0d:91:fb:53:ca:6f:eb:24:ce:ee:
64:c3:07:eb:03:66:24:92:60:f2:1e:c9:1e:8c:14:91:30:8d:
14:dc:0c:87:be:0a:0e:eb:fa:8a:d9:0e:12:1e:61:33:02:ef:
3c:a1:e3:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I2MzMxMTAvBgNVBAUTKDEzRDdBMTNCNDIzQkI2RTg3QTFBNzVCNzQ5M0YwQkMx
OUQwQ0VBQTMwHhcNMjYwNzE3MDYxOTIxWhcNMjYwNzI0MDYxOTIxWjAYMRYwFAYD
VQQDEw02YTU5Yzk2YS0zZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8nAiLqAjsz2f+duaqepbPagENAuf0uwGQQRWdirExr2WvbgusEZnNZl2mgQP
R8AmTtkuezFezJnpOJyeWAsQn8vbyl1rJ3zMh25wRtAM2wUFPzd3+qeVk7iN/JDC
ltc2Lf+2lOdVM6d0Pk5SfXANnMRgR4PXgrJeCJOPgsGN2hCGEOD/CiIznKiIAg5S
dYkYNVDhRNc/zJPhOnkEurZTpTxeohfWzze6pwlhRZk4poeFN+E1/IkKbYbqxerc
p6hQ/OFBqNWl1HG54+Agc/kopKuyvRz/RRJ8TAK0KMfTT+FZOUryWCnZOHDjJIfq
InddEEhfnU6ErL16xf8uJOj5HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYeeVFb
Cu8AD26M2R1b7l/OSPY9MB8GA1UdIwQYMBaAFBPXoTtCO7boehp1t0k/C8GdDOqj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EMEFCOTNFNDg2
RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1aDZHblczU1Q4THdaME02
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjYzMy9EMEFCOTNFNDg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1
aDZHblczU1Q4THdaME02cU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATyCNurORtOx3drEBl61EQ8Tu2SP62SI/vIpb7akMBpVV+n0n7IoIp3QmVsTO
0kwuCSY+emjrfyEZPsD9i0tFnX75h4FYns46AHfJH5RnjSJJ6JJjpcUnej+a054B
s0BNz1+O8Cs6BwD2XrDpLdeyzVW2HIMicJ1K/ATB9PK5qininxnXa7Znxr3UItxJ
px3ELwr9eZ0srj5as71tUCyqlr7K1yhaNDUZxtPAg4rvlULWnBO72PXdqikOhWWi
PwAl/HvAd1fVO1ocJqyNjX8NkftTym/rJM7uZMMH6wNmJJJg8h7JHowUkTCNFNwM
h74KDuv6itkOEh5hMwLvPKHj0w==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:48 2026 by rpki-client