
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier: M7turCO/r5jKL4qDBkXgiLlRShib6zTq0rz6WvtG16U=
Subject key identifier: F7:9F:BF:3E:38:31:64:17:5F:E5:1C:84:1F:84:BE:99:9A:32:EE:BD
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number: D3
Signing time: Mon 31 Aug 2026 07:12:14 +0000
Manifest this update: Mon 31 Aug 2026 07:12:14 +0000
Manifest next update: Mon 07 Sep 2026 07:12:14 +0000
Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: ByoW849UUu7bCch89r1vEsk7poUkn9jW0unVYbYvUzc=)
2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 07:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Validity
Not Before: Aug 31 07:12:14 2026 GMT
Not After : Sep 7 07:12:14 2026 GMT
Subject: CN=6a95294e-77f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:49:3d:a4:1d:d3:a4:c2:9e:4c:f9:84:4b:
0b:49:0e:23:72:a5:4f:2e:0c:23:f9:2c:36:65:a8:
39:64:05:96:9e:08:67:f3:57:32:97:ef:bb:f7:cd:
98:a8:21:1b:c5:a7:f6:ec:14:5c:fe:3c:2f:52:07:
4e:c4:c9:f3:fb:c8:1d:90:12:45:2c:41:cd:69:61:
74:f9:d1:18:15:a7:17:93:86:58:7c:60:c9:7b:4e:
44:ec:1f:3b:99:71:ad:b5:d5:07:70:35:28:20:ef:
6c:bf:a2:61:04:26:c8:77:35:eb:5c:17:21:83:ef:
47:9b:ab:f3:d1:fe:2f:4e:23:1c:c0:bc:21:f2:e0:
28:18:99:7b:a8:ef:3f:48:34:fc:a1:f1:5e:e4:95:
21:79:71:bd:88:9f:f7:e9:8a:ff:a8:21:90:e5:d6:
20:2a:75:36:7f:22:7b:5a:18:d6:be:25:84:fb:e5:
81:63:30:85:bc:eb:8c:04:e0:7a:73:2a:89:1b:9a:
e1:a0:ae:40:15:ca:13:92:96:7b:a1:0c:56:48:83:
e8:7a:0d:91:90:75:14:f7:f9:d3:e3:5c:9a:dd:3c:
75:a7:c8:be:e9:e5:e0:2d:b3:98:9b:4a:77:96:3d:
b0:48:21:78:c1:70:0a:a4:72:89:fb:43:8a:80:87:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:BF:3E:38:31:64:17:5F:E5:1C:84:1F:84:BE:99:9A:32:EE:BD
X509v3 Authority Key Identifier:
keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c2:ce:35:bb:e0:6a:10:8b:d4:b8:18:ec:46:3a:81:ed:09:
dd:da:27:70:ee:7f:c7:11:fc:2a:7f:15:90:53:a2:5b:1d:ed:
6a:d1:ca:9c:04:12:e0:c6:e4:54:c3:55:e9:2b:78:24:e8:87:
12:80:f9:94:0a:29:d1:f2:8c:81:cf:e5:6a:3b:59:69:96:fc:
c1:e6:a1:24:59:4b:7e:e6:58:74:00:c1:4e:e5:7a:71:d4:aa:
63:7a:9d:80:d6:de:32:4c:be:69:1e:96:0a:97:e1:c3:bd:e9:
be:89:2c:d4:a4:6a:19:eb:69:01:b9:12:1f:61:1f:ea:dd:c7:
2b:b5:90:3b:9e:c5:7d:06:20:71:af:05:5a:f0:d8:3e:c8:dd:
49:bc:e6:6f:54:d5:aa:87:97:24:36:e6:a3:be:f6:f0:c3:d3:
ee:2a:c5:57:61:4c:b3:e4:9c:ff:90:ff:0e:33:08:2a:91:b5:
5d:8b:79:cb:fd:98:9d:97:9f:e7:f5:43:d7:0d:1d:ee:42:78:
a2:e3:0c:35:fa:c0:d1:0a:f0:f9:7f:04:5a:83:bf:b7:cd:46:
7c:6d:78:82:2e:73:23:40:ea:20:d4:27:1f:8d:6e:59:c1:b5:
e3:cc:fb:13:8a:f7:9b:d3:7e:55:0b:b4:9a:55:d1:48:d1:27:
90:40:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:38 2026 by rpki-client