
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier: IqjrTC/QCTUKOsHBRzo4+zG4sBbZA6jrA05UtMC1mYM=
Subject key identifier: F0:C3:1F:7B:4F:F1:D1:AC:00:15:54:3D:24:AD:26:0B:3C:5D:31:7C
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number: 022F
Signing time: Wed 13 May 2026 02:46:44 +0000
Manifest this update: Wed 13 May 2026 02:46:44 +0000
Manifest next update: Wed 20 May 2026 02:46:44 +0000
Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: 1Dz1mnn0mDiNCUXaPEgZS8v66fe6e52+exsVW3VyXTc=)
2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: QWRcixf8QLc7IkGmviGZNSC4YSR65CJzVUK/LtjPM4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: May 13 02:46:44 2026 GMT
Not After : May 20 02:46:44 2026 GMT
Subject: CN=6a03e614-f0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:fc:c9:64:97:7a:ce:80:92:48:f9:09:73:
c7:5e:6b:84:4f:c7:cb:b9:c0:2f:75:44:79:96:e5:
16:0f:8c:67:b2:d9:55:2e:84:52:0e:1d:f8:56:dc:
e8:8d:4d:13:80:66:52:2c:ed:81:d1:52:2b:a3:e8:
e0:c6:b0:80:2a:fc:3f:5a:ff:dd:f7:5e:a2:64:44:
8a:fa:c8:bb:b3:ec:60:90:fb:7f:c1:bb:38:c4:f2:
97:bc:95:1a:d0:2f:55:3e:b6:22:e7:d1:27:7c:6c:
b2:19:6c:7f:de:1c:e3:de:9c:14:79:05:50:8b:dd:
20:7f:5c:ee:c5:9a:9b:d4:bd:9c:19:2b:95:cb:84:
8b:fd:ea:68:74:bf:87:22:9c:98:f2:ad:17:47:b3:
16:d4:d0:1e:26:a2:21:ba:fd:aa:49:f1:68:1f:de:
f4:51:6f:92:f2:9d:03:eb:29:36:37:13:c9:83:70:
f1:67:c2:5a:84:5a:2c:40:5d:e3:8f:5e:b3:81:77:
45:17:e1:0e:00:17:90:49:fa:ab:83:8a:7b:91:a0:
8b:1a:19:b7:37:94:d9:f9:83:0f:76:e8:b0:0d:8d:
71:3e:1c:f5:4a:79:8a:a4:c1:57:25:73:43:36:8e:
90:f7:c2:56:cb:38:61:00:57:70:2a:ae:3a:18:ea:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:1F:7B:4F:F1:D1:AC:00:15:54:3D:24:AD:26:0B:3C:5D:31:7C
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b4:90:b3:f5:e4:84:fb:e2:41:36:95:63:ad:09:85:56:1a:
c0:83:b5:06:00:30:f9:be:c7:0e:8a:df:c5:80:4c:eb:f6:fe:
e5:11:eb:27:e0:93:f3:c9:2f:ba:34:4e:c5:52:14:6f:17:ba:
6a:32:bd:bf:fd:08:83:40:21:d5:9b:a7:ef:8e:08:0f:1c:ee:
3c:0b:8b:ce:fd:ec:a4:fd:12:44:f8:4a:86:4f:9c:85:49:2c:
08:dd:14:ca:1a:d5:34:4b:9f:88:f3:a7:a3:3d:e7:6c:1f:61:
8a:0d:cb:b3:55:be:ee:b2:f7:02:ba:d1:b0:cf:d3:73:f4:6f:
c5:0d:c6:17:13:e8:6f:fe:40:d8:20:54:33:a4:8b:d9:a3:80:
be:ea:2a:0a:6b:55:1c:fc:a6:30:cb:c9:96:b8:59:e4:2b:3c:
5e:fa:64:2e:87:0d:91:52:4d:26:ad:86:b1:2b:61:0d:02:a8:
f3:a8:eb:a8:cf:ca:4f:ea:57:e7:fc:7e:58:16:82:ed:b1:3b:
df:6e:0a:6b:34:7e:f0:86:b3:d4:ca:6d:e3:29:3b:ed:e5:cc:
3d:2d:57:ed:19:fe:26:2d:19:37:aa:19:9a:35:6d:50:aa:fd:
3f:52:7a:04:a9:f5:f9:dc:bf:ba:3c:09:82:e7:3f:45:80:ad:
13:1b:4d:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0
MzI4NzIzQTAwHhcNMjYwNTEzMDI0NjQ0WhcNMjYwNTIwMDI0NjQ0WjAYMRYwFAYD
VQQDEw02YTAzZTYxNC1mMGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3NT8yWSXes6Akkj5CXPHXmuET8fLucAvdUR5luUWD4xnstlVLoRSDh34Vtzo
jU0TgGZSLO2B0VIro+jgxrCAKvw/Wv/d916iZESK+si7s+xgkPt/wbs4xPKXvJUa
0C9VPrYi59EnfGyyGWx/3hzj3pwUeQVQi90gf1zuxZqb1L2cGSuVy4SL/epodL+H
IpyY8q0XR7MW1NAeJqIhuv2qSfFoH970UW+S8p0D6yk2NxPJg3DxZ8JahFosQF3j
j16zgXdFF+EOABeQSfqrg4p7kaCLGhm3N5TZ+YMPduiwDY1xPhz1SnmKpMFXJXND
No6Q98JWyzhhAFdwKq46GOqqeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDDH3tP
8dGsABVUPSStJgs8XTF8MB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0
OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN
QllSV2pBWkt1QU5ES0hJNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApbSQs/XkhPviQTaVY60JhVYawIO1BgAw+b7HDorfxYBM6/b+5RHrJ+CT88kv
ujROxVIUbxe6ajK9v/0Ig0Ah1Zun744IDxzuPAuLzv3spP0SRPhKhk+chUksCN0U
yhrVNEufiPOnoz3nbB9hig3Ls1W+7rL3ArrRsM/Tc/RvxQ3GFxPob/5A2CBUM6SL
2aOAvuoqCmtVHPymMMvJlrhZ5Cs8XvpkLocNkVJNJq2GsSthDQKo86jrqM/KT+pX
5/x+WBaC7bE7324KazR+8Iaz1Mpt4yk77eXMPS1X7Rn+Ji0ZN6oZmjVtUKr9P1J6
BKn1+dy/ujwJguc/RYCtExtNQg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:38:25 2026 by rpki-client