
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File: EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier: lT+2fxHcVI/YeS1ibpz9Q9T9c3Ay+TH07m8kvVC2FLY=
Subject key identifier: 10:88:3A:44:EF:C8:82:1E:6D:D0:E2:E0:17:3E:95:01:12:A6:6A:89
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer: /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial: 0777
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number: 075B
Signing time: Wed 20 May 2026 21:43:17 +0000
Manifest this update: Wed 20 May 2026 21:43:16 +0000
Manifest next update: Wed 27 May 2026 21:43:16 +0000
Files and hashes: 1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: tSJSyKjUklthO84Qhn+/ksK33wBMuXjkAlZ+JcH4OqU=)
2: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: XPvB+vFL16oisT/9uSlsAmizDeWHyhaJXzNkKeUA27M=)
3: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: +jvdYVRVCKb9nHFb/a4hVukxgRDPU2GYfvLDSqD8lQ4=)
4: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: nuQ3iJE4qUrjbKGDrHmaszZM6UwWhBcBVHEy5WMqF5U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911 (0x777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Validity
Not Before: May 20 21:43:16 2026 GMT
Not After : May 27 21:43:16 2026 GMT
Subject: CN=6a0e2af5-f149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:e1:c8:ea:66:48:6e:58:20:e1:75:29:7f:
28:1d:4b:50:de:ea:49:51:2a:23:39:f8:5a:2d:74:
34:58:55:a9:50:bd:0d:f0:2e:24:44:e8:b1:64:d6:
d0:91:e3:f0:fa:53:0f:8c:67:fb:32:9b:9f:60:cb:
e5:95:7a:af:82:3c:73:fc:a9:e4:40:8f:69:1b:c0:
ca:b3:02:fe:1d:4f:9f:35:a5:12:fc:0f:71:d7:d3:
d3:79:97:01:7a:c0:a6:bc:ea:4d:f9:d7:cb:c3:4c:
38:cb:44:4c:9a:31:ca:dc:2c:97:50:1c:b9:63:08:
d2:5b:2e:1f:2e:c3:4d:91:cd:14:ca:e8:e5:63:05:
ca:da:a8:3f:75:f2:7c:ff:e5:c3:52:49:1b:4b:6c:
f8:38:44:76:b8:1c:33:56:ac:ed:d1:59:d9:f9:11:
cc:b7:2d:7c:3a:16:a6:19:78:59:3d:27:ce:6f:f1:
21:17:3e:91:32:16:69:f9:07:cc:68:77:bb:73:2b:
04:5f:61:51:70:a3:bc:8b:8a:0d:9d:4c:8f:13:75:
2f:17:7c:4c:e7:a9:bb:d6:47:67:33:fd:fc:94:ff:
32:7a:cf:a9:29:4c:19:f0:02:34:91:79:be:00:55:
8d:e0:47:b3:4c:ed:4b:88:ce:8c:50:b0:af:da:5d:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:3A:44:EF:C8:82:1E:6D:D0:E2:E0:17:3E:95:01:12:A6:6A:89
X509v3 Authority Key Identifier:
keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:69:87:aa:7b:27:46:25:29:9e:9f:42:1e:3d:27:4d:7b:cf:
7d:a6:7f:80:f3:8e:4e:41:d0:89:5e:22:c8:c0:19:45:0c:b3:
4f:5e:99:d7:dc:85:16:bf:79:87:e6:ac:fb:7d:e5:a7:eb:d2:
4a:3d:b0:39:ef:2e:ea:15:42:09:6f:c1:09:01:bd:5e:30:0b:
1e:78:60:ad:ff:23:60:fd:ce:dd:85:fb:d8:2a:03:a1:5c:08:
d9:89:44:d8:67:20:9f:10:72:8d:17:59:43:46:f8:30:29:76:
be:bc:1a:e0:dc:06:25:58:3c:fe:18:38:c7:89:47:6a:44:46:
5d:a3:44:fe:02:4e:64:d0:59:ae:ba:e8:86:e1:f1:f2:a7:f6:
66:1b:38:27:dc:de:8d:30:a9:3f:24:70:97:2d:55:5c:a3:a1:
9e:78:21:63:20:c5:b4:09:81:26:ac:66:fa:7d:ef:f2:5b:b7:
f1:63:05:24:e3:ea:30:8a:e7:88:83:01:cd:c7:ee:31:81:13:
5c:1f:6c:b5:b9:75:5d:89:a5:f5:4a:e2:c2:77:12:34:6c:f9:
30:10:ac:af:ce:30:f7:0e:cc:11:e8:80:fc:de:d8:ba:68:32:
af:9b:02:86:d7:0d:51:48:18:d4:f8:c0:dd:38:3f:ee:61:7d:
6a:f1:f9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:14 2026 by rpki-client