
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier: 9viHann63Rtd6BKO0O1vVPFDgTFOKISHQCkSlU5Tp3M=
Subject key identifier: 69:83:28:56:9B:A2:FC:8F:61:42:03:EA:B7:7B:F7:69:62:76:EF:85
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number: 0216
Signing time: Wed 25 Mar 2026 02:18:38 +0000
Manifest this update: Wed 25 Mar 2026 02:18:38 +0000
Manifest next update: Wed 01 Apr 2026 02:18:38 +0000
Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: uF+irUuLhRz13x2l2VkEOM9xa74hLFM46LRrO0UbRQI=)
2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: QWRcixf8QLc7IkGmviGZNSC4YSR65CJzVUK/LtjPM4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: Mar 25 02:18:38 2026 GMT
Not After : Apr 1 02:18:38 2026 GMT
Subject: CN=69c345fe-048c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:8e:95:52:be:e1:6f:88:7b:c8:27:98:8a:
f1:0c:4a:79:83:58:2d:43:69:6e:d4:07:aa:f9:ed:
96:94:31:81:56:c2:e4:e0:63:8e:60:72:94:a2:0e:
4f:78:34:5a:6a:f1:15:98:9c:33:b8:63:f8:68:7c:
59:7a:b1:6d:b9:d0:dd:ff:a0:ca:e7:fd:c4:03:e7:
9b:79:74:ad:e8:15:08:81:f8:08:db:a8:a4:89:82:
c1:ee:b8:94:6e:00:a3:9c:f3:81:fe:49:54:13:6f:
01:c0:44:68:e5:6f:78:a7:0a:07:62:1d:ca:ce:44:
0b:5d:6c:db:70:75:cf:36:4e:f6:a1:05:1a:cd:72:
0e:05:f0:02:6e:b8:43:f9:1c:a6:b3:13:62:13:81:
91:bd:c9:0b:a6:68:c0:31:c1:88:ae:5b:a2:3d:a7:
59:1f:cd:34:4b:9e:f2:ce:9e:a2:aa:d0:06:11:cd:
a8:c1:07:28:b3:32:93:3c:b8:26:37:11:ba:c2:74:
f6:e8:1b:25:a8:fd:67:5e:b1:18:41:79:c2:3a:fa:
9f:8d:db:07:71:42:c0:be:d3:b6:a4:c4:0d:19:3a:
7b:9d:a7:68:37:94:23:ef:42:57:86:52:ee:5b:da:
ad:9c:9b:4c:d4:ed:e1:82:7f:6f:ea:4b:21:68:83:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:28:56:9B:A2:FC:8F:61:42:03:EA:B7:7B:F7:69:62:76:EF:85
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:6a:fd:48:23:1f:10:d2:59:13:06:88:95:16:ca:bd:09:de:
c0:83:49:e4:53:0f:9f:90:5e:12:e9:3f:94:81:78:32:3f:24:
0a:c2:91:e3:51:22:07:b4:7d:fd:f9:da:84:58:6f:87:74:29:
53:28:24:8e:7f:a6:7c:20:ca:ac:91:77:c6:90:ea:8c:db:e9:
81:43:be:3f:6a:cb:b7:c5:78:82:0d:6a:9f:6e:22:34:13:c2:
6a:91:00:3d:f1:ba:d5:b1:6a:8c:18:85:4a:3f:88:01:ee:09:
4e:57:01:b8:78:ec:4e:71:66:d1:2d:c9:94:f9:cf:fc:7a:41:
2b:cf:87:b2:56:df:f9:b2:97:61:07:c3:be:fd:20:ab:bc:06:
86:55:d2:7e:42:c9:47:78:59:b9:03:51:81:4b:4a:a1:f9:f7:
b7:0b:e5:ee:7a:0f:8e:e8:72:aa:90:8e:ad:03:3b:e1:79:2c:
f0:69:12:52:6b:6e:1e:1d:45:ab:45:81:11:3b:86:69:5a:98:
c1:26:49:2e:e9:a9:d9:33:77:03:12:c8:10:f9:b2:58:3e:1b:
f1:fd:2f:a0:8f:a5:53:e8:b6:02:29:a4:ce:cc:42:e8:63:2c:
04:b9:87:87:4b:f9:c5:18:58:7b:1b:d8:50:30:19:ee:2e:38:
d9:66:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:18 2026 by rpki-client