
$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json)
Hash identifier: NiJys/AA02P7OP18p2IMY2x6A8AWxppIapDh9fIBzqQ=
Subject key identifier: 0C:E8:28:65:82:FF:E5:14:32:A2:A3:E7:C2:2C:3A:41:64:68:1C:C4
Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Certificate serial: 12DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
Manifest number: 12CF
Signing time: Wed 20 May 2026 17:02:58 +0000
Manifest this update: Wed 20 May 2026 17:02:57 +0000
Manifest next update: Wed 27 May 2026 17:02:57 +0000
Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: /npIBOav2guqCyEqzTYiyfr5VM5sxXuSyQkHGFQ6GH8=)
2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: W1AVNjvXiALIc751cRSzggmADJNyklSoFWJXhsq/Le0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4830 (0x12de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Validity
Not Before: May 20 17:02:57 2026 GMT
Not After : May 27 17:02:57 2026 GMT
Subject: CN=6a0de942-12e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:6c:9a:21:11:c7:69:7f:ef:62:6e:1b:a7:
71:b7:42:de:04:d1:c7:56:c7:09:31:a1:76:fd:dc:
d1:09:30:5b:3e:4e:ad:8a:71:3a:bf:86:4e:79:a9:
36:d6:ce:2e:e8:a7:1e:4a:ba:d2:64:84:e0:76:e7:
22:1e:f7:6b:60:a6:ab:6c:07:b3:1e:5e:fa:ff:8f:
c1:df:07:3b:35:7e:fd:e0:39:8a:7c:a4:50:71:ee:
b7:09:44:f2:d5:7d:0d:f3:40:c0:c3:eb:47:a7:c7:
0d:90:b7:c5:ed:15:fe:35:d2:39:b0:21:71:9b:56:
31:8c:e8:56:ff:81:6e:25:39:36:31:1e:5a:48:da:
8d:66:48:52:5d:56:2d:d5:ab:00:5b:f0:d4:df:38:
12:be:f6:64:41:bd:68:9d:ec:dc:78:ca:62:9b:9e:
b3:fd:4c:60:a7:b8:9d:b6:2b:7f:88:bd:d8:c9:f7:
1e:07:b2:5a:e8:30:c4:89:71:d3:6e:8b:3c:f4:6f:
4c:a2:a5:72:26:df:7d:49:3b:ba:08:b0:bc:59:3e:
e9:64:d6:7e:0d:19:ff:d3:f3:62:1b:52:6b:99:ff:
45:24:70:3e:4b:5f:fd:53:af:26:1c:9b:9c:89:9d:
ed:6b:b1:45:b9:33:9a:75:95:67:83:2c:f7:ee:33:
d2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E8:28:65:82:FF:E5:14:32:A2:A3:E7:C2:2C:3A:41:64:68:1C:C4
X509v3 Authority Key Identifier:
keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:b1:17:26:35:d4:12:e7:02:42:3f:0a:3b:72:bd:ce:ff:4f:
6c:6e:4e:26:38:69:68:d0:0f:c3:55:80:40:b5:68:b3:21:43:
57:e6:8f:0d:84:2b:cd:ca:4b:ee:a3:a9:ff:97:f4:9c:20:d2:
93:70:f5:8b:ec:73:c6:e7:ec:95:61:98:ec:c1:57:08:7d:26:
ee:d1:d3:fc:20:23:70:08:06:b7:3a:ba:93:ff:c4:e4:94:44:
ea:01:64:4f:aa:35:90:fa:f6:a7:bd:d0:9c:32:e8:bf:36:d7:
e7:ce:07:a9:d7:71:90:a3:18:2a:b3:6d:4a:35:73:d4:ec:aa:
8b:9c:f0:41:27:ad:cd:dd:9a:fe:57:98:11:4a:ae:48:be:28:
39:e1:9e:81:a9:15:5d:02:9b:d1:97:52:6d:5a:17:17:48:ec:
13:94:46:5a:f9:0f:8c:ce:76:bb:bf:c6:46:01:19:9f:e9:18:
05:35:57:2f:c8:73:ca:2c:56:ab:42:ba:80:5e:87:77:67:ab:
7a:f0:d4:2c:0d:e5:48:c9:0d:a8:3c:5a:7a:02:03:2a:be:f4:
6f:c1:3a:c2:2c:5a:6d:97:2e:4d:5c:2f:b2:79:79:42:41:8b:
b1:76:66:bd:0f:1d:aa:09:b4:53:c2:c1:0d:46:c2:53:d1:ee:
cd:84:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:33 2026 by rpki-client