
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier: PfGbUNMhgo17+/SQDHojRWzJBXf2zRwiK3y4JwxHnuc=
Subject key identifier: 8B:A8:23:50:FB:E2:F3:EF:82:0E:B3:15:44:42:BA:43:2E:79:1D:B9
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number: EC
Signing time: Mon 19 Oct 2026 07:09:50 +0000
Manifest this update: Mon 19 Oct 2026 07:09:49 +0000
Manifest next update: Mon 26 Oct 2026 07:09:49 +0000
Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: cMn+8ca88BIHiYF7oHo2Rta7x485Lbny8Rbc1YxOJ0s=)
2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 07:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Validity
Not Before: Oct 19 07:09:49 2026 GMT
Not After : Oct 26 07:09:49 2026 GMT
Subject: CN=6ad5c23e-ab54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:51:39:c2:7e:1a:30:3a:62:2e:35:69:38:
15:fc:91:6d:a2:f6:70:bd:98:2f:3c:48:6d:5e:01:
23:58:99:14:f6:89:89:f3:ae:b0:dc:1d:48:a2:bd:
c6:3a:78:00:a8:c5:db:92:99:30:a1:df:ef:98:05:
b6:b2:c8:22:ad:29:b4:bf:54:65:d2:83:3f:5b:8d:
d6:f1:8d:dd:76:21:87:d6:17:1d:1e:31:07:6e:ba:
99:c2:d4:a7:d1:0f:e2:b1:ad:22:82:46:6d:22:57:
60:96:fd:a2:74:36:48:0f:bd:db:95:37:6e:93:2a:
60:70:2c:83:4e:b2:82:56:4c:d7:28:c3:51:75:8e:
be:e3:1c:22:bf:8b:df:d8:ec:81:f9:66:ea:da:1e:
d5:54:67:17:5c:af:ec:5d:39:c5:29:13:17:3a:33:
fa:f0:2d:28:19:e6:79:f6:a8:56:84:c3:cd:01:d2:
ae:8d:24:53:09:72:9c:55:0d:b2:9c:84:21:7c:39:
ff:e0:dc:8e:0d:12:7a:60:bb:bf:6b:a5:42:92:05:
77:9d:da:ff:df:e5:db:0a:c6:38:76:87:19:78:04:
0c:82:a9:69:52:f2:33:83:50:43:be:ab:e7:a4:ae:
24:20:cb:5c:8e:56:54:95:ce:07:1e:c4:8f:b4:a5:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A8:23:50:FB:E2:F3:EF:82:0E:B3:15:44:42:BA:43:2E:79:1D:B9
X509v3 Authority Key Identifier:
keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6b:d9:fa:75:b6:21:5f:67:d9:7b:86:c1:d2:26:c6:98:32:
bd:7f:c7:9a:cf:76:2a:ef:85:f8:69:42:f2:31:f8:02:e8:15:
89:9e:26:88:ed:cc:dc:c1:50:d5:6b:37:16:74:3e:c7:95:17:
ad:e7:fe:2c:0c:3d:77:6e:89:d0:64:f6:b4:35:fd:20:72:2e:
2e:94:20:52:f6:bb:b0:d4:29:ec:6d:cf:ff:03:8b:01:e3:d4:
34:5e:4a:fa:b6:5f:7e:36:94:ad:16:07:8d:fd:e3:0f:27:8e:
29:7b:51:b9:0f:a8:f4:0d:c9:c6:87:c0:db:ae:73:b1:ca:21:
5f:74:fd:ed:b5:a3:fe:12:b3:aa:de:d3:4f:7e:f9:ec:6a:4b:
9c:c1:f7:9d:41:4b:f4:31:e2:f3:91:14:31:b3:a7:86:6b:c2:
c6:06:50:8d:8f:e3:be:21:b1:68:97:44:06:bc:63:c4:87:57:
ef:99:56:72:aa:f4:95:b0:0f:e5:19:a3:10:f5:22:6a:71:51:
9a:16:0d:f9:fc:73:db:8b:fa:39:e4:7f:a3:4c:6f:7f:04:06:
89:89:11:69:90:9a:d9:78:f5:38:52:08:0e:f5:85:cf:af:c4:
e9:fd:53:6d:c1:5c:84:bd:d9:3c:5b:3a:69:ca:3b:63:b8:3c:
a3:b5:f7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:46:53 2026 by rpki-client