
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
File: EgCNureMsx8plOFITqPyQnS50ag.mft (raw, json)
Hash identifier: WRRIh3muoACde7hX9plq0vCyisIE5pYsmolHFNb0Pv8=
Subject key identifier: 50:84:63:17:1F:97:BF:12:75:30:6A:B1:FD:92:95:9C:D3:EB:49:55
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Certificate issuer: /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial: 0C85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
Manifest number: 0C72
Signing time: Thu 26 Mar 2026 18:31:45 +0000
Manifest this update: Thu 26 Mar 2026 18:31:45 +0000
Manifest next update: Thu 02 Apr 2026 18:31:45 +0000
Files and hashes: 1: EgCNureMsx8plOFITqPyQnS50ag.crl (hash: hGUp0wcHVYb3soEVYyilzXrZ31McCZWEXO2llfFCh1M=)
2: A7544A6E1A7711EAA20A077FC4F9AE02.roa (hash: UhaA00QO71FGTQUD0VWs3wxmVzGoJFHHyhM7eiJ49EM=)
3: A80715221A7711EAA20A077FC4F9AE02.roa (hash: 5McH4gD86CTQ7kEkue+RSG4ZCCe7cULltnl+5iX5OE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112B4C, serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Validity
Not Before: Mar 26 18:31:45 2026 GMT
Not After : Apr 2 18:31:45 2026 GMT
Subject: CN=69c57b91-cbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:09:6c:f6:51:ea:ea:13:34:62:68:ca:36:
ed:a9:1a:32:8b:25:a3:70:96:de:26:9d:5d:ca:39:
68:d7:88:0f:bd:ec:09:ea:df:77:ca:8a:fd:79:80:
e0:e2:59:55:78:46:ee:ed:a6:ee:eb:7a:81:09:9c:
fa:fa:f9:80:06:77:12:d4:a2:b7:a2:fe:61:f6:0a:
9b:e5:6b:97:08:f4:04:1c:44:0e:cd:83:f1:4b:36:
01:10:c1:51:f6:43:62:be:89:aa:b0:4d:78:21:14:
91:7c:37:1d:e9:b4:8a:74:10:57:d8:ca:ea:a6:11:
a6:92:15:e9:d8:a9:34:34:12:dd:f1:49:7a:62:cd:
9b:4e:8a:ad:58:be:6c:ab:f1:c4:ba:dc:7e:b7:dc:
cd:5b:49:22:b5:9d:97:b2:e3:15:b8:6f:89:99:83:
7b:14:e6:b6:ea:3e:7c:3b:6a:a7:a7:6f:a1:16:23:
e2:66:55:a6:e6:9d:64:80:67:52:92:c1:95:d9:1f:
c3:58:bc:ef:1b:5f:ac:12:a2:29:a2:9a:f2:87:fa:
43:6f:b1:5f:f9:73:6f:20:5f:e2:cf:a0:2e:4f:22:
6f:f7:da:f0:49:f3:17:98:be:84:b5:66:18:1c:79:
2f:ba:35:83:62:c0:56:2a:44:5e:29:52:7c:04:17:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:84:63:17:1F:97:BF:12:75:30:6A:B1:FD:92:95:9C:D3:EB:49:55
X509v3 Authority Key Identifier:
keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:50:40:55:e5:c8:12:53:f5:cd:d8:b9:af:86:50:df:42:bf:
6f:ee:fe:94:f5:33:aa:e6:b4:e1:a4:b6:f3:4a:26:d4:97:f1:
41:e2:e4:2a:dc:4f:fc:8a:1d:2b:a7:69:13:d4:9f:10:58:5b:
60:93:d5:5e:7b:ed:5a:a5:7c:34:dd:96:59:a7:b4:65:ec:13:
1e:19:a7:3a:10:cd:e9:26:13:82:79:a7:29:24:4c:bf:1b:e2:
8b:7f:1b:a3:6f:26:f9:96:85:f5:79:a9:d7:63:0f:64:8f:47:
e5:e5:32:8e:fa:ca:ee:46:47:13:55:0f:7c:35:1d:4f:d6:f6:
3a:f2:6f:69:e9:76:61:c5:00:a9:ac:49:68:b1:b2:8a:3e:e3:
1a:78:d0:b2:bd:80:fe:b6:b8:22:1a:2e:9d:7c:e5:62:0e:60:
7f:a7:09:24:e2:6a:c5:d7:26:cc:e6:ad:73:50:f0:66:56:70:
37:34:a3:4b:8b:59:63:62:ea:54:fd:42:a3:ea:e3:a2:06:24:
a8:96:c5:c4:7e:29:a8:fb:22:3f:54:9c:10:89:f9:f2:48:55:
86:dd:35:de:4f:27:f4:c6:d2:a0:24:11:5f:4d:46:36:7d:cf:
0f:6b:70:00:e3:37:02:f6:b4:e5:e8:14:7c:ec:01:6e:16:34:
8c:25:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:29 2026 by rpki-client