
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
File: eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft (raw, json)
Hash identifier: 2yGoO1qdwZqjEYVZhO7nDeEHehU69ny8DxfKPrU66ZU=
Subject key identifier: 6C:6C:25:AC:7D:F8:3A:44:16:4F:40:DB:8C:74:DB:05:25:E0:16:F5
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Certificate issuer: /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
Manifest number: 02A3
Signing time: Sun 15 Nov 2026 01:46:27 +0000
Manifest this update: Sun 15 Nov 2026 01:46:27 +0000
Manifest next update: Sun 22 Nov 2026 01:46:27 +0000
Files and hashes: 1: eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl (hash: EhLGFrC6xXbA506LJL28t38kMbeF4r0T0xWlMzlvBCQ=)
2: C435BF20EE8E11ED8FA7F510C4F9AE02.roa (hash: BZscUCX7IhkjB5Rqk/Ke36ARUEJ+TcCUWg6alfYd0Kg=)
3: 83EB3618E98C11EDAE292D56C4F9AE02.roa (hash: dIjx2t56GxFvxvyFg+cDW0AhnNMB+827Yme4aAWCsQA=)
4: 93D558E84A8411EE8643216EC4F9AE02.roa (hash: VJ/KnQ9R2yTYoCx2rXGG1qTr2dAgeyV+ZpeINc4EFnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 01:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134858, serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Validity
Not Before: Nov 15 01:46:27 2026 GMT
Not After : Nov 22 01:46:27 2026 GMT
Subject: CN=6af90ef3-53c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:ad:6d:92:c9:02:6a:eb:bd:49:d8:be:a6:
0d:d1:5c:7c:d4:62:b5:fc:d4:b4:6b:d9:5a:b5:50:
0e:b6:80:31:58:24:a3:86:4d:34:66:bf:53:a2:2d:
95:02:11:f4:71:02:b7:b2:a3:02:e7:9d:79:e2:7e:
64:61:8c:33:fd:1e:8d:a4:97:c0:fc:4a:67:b7:39:
9c:cc:b3:1e:5e:75:f9:fe:49:19:b6:c6:9b:92:7d:
d8:3a:41:2d:bc:2f:5b:a5:da:3b:01:58:ea:7d:26:
c0:6f:aa:1f:dd:ee:9e:a7:f7:03:e4:32:0e:f4:f7:
d8:ab:ff:13:fe:ed:69:f1:f8:f6:e3:72:9b:7f:a2:
16:30:11:5c:ce:e7:9c:53:12:5f:3a:df:bc:06:f3:
41:53:51:07:68:71:d0:c4:1e:6d:50:ca:e5:26:36:
f3:5a:88:2c:17:78:b3:98:08:d9:c1:03:aa:1c:7f:
5d:20:ae:29:1a:dd:86:59:2e:40:ec:fc:04:39:07:
1a:6b:99:f2:e4:5d:e1:1f:7b:6e:b2:a7:d1:94:ac:
69:ed:87:55:18:40:76:0d:41:a7:f8:5f:85:69:8f:
5c:ca:2d:34:35:01:16:a8:01:f7:83:25:5c:7f:68:
f5:f3:bf:34:ad:7d:55:80:39:4d:b5:2b:da:10:75:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6C:25:AC:7D:F8:3A:44:16:4F:40:DB:8C:74:DB:05:25:E0:16:F5
X509v3 Authority Key Identifier:
keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:4b:d5:fb:c0:70:09:c5:ff:2b:d5:18:84:b7:f2:65:4a:16:
a7:99:34:21:6e:5b:96:23:e6:e3:37:3f:9d:8f:66:73:c8:6b:
6a:c7:50:59:1a:27:96:62:e6:22:b1:03:88:b7:22:bd:0d:ef:
28:95:6d:e6:01:39:56:68:e2:c5:3c:74:4f:11:ec:ed:48:f4:
ce:e8:fe:98:b8:d2:ae:78:ec:72:1d:bc:ab:24:b3:f3:84:13:
46:92:fc:11:00:50:a0:ff:14:23:b1:2f:7d:2e:32:2e:20:93:
9b:ce:4b:ac:8f:29:55:6d:0f:76:93:3a:59:bd:c2:47:9d:c3:
9f:ab:63:db:6d:54:5d:31:b8:88:78:7b:9b:0d:7d:fd:60:54:
99:99:9e:f1:29:48:08:d3:57:e5:df:b4:22:7c:69:3b:d0:0f:
6d:9b:08:60:09:e1:5c:c1:a9:6c:67:06:60:fd:28:e7:1a:da:
43:f7:8e:0b:c5:5a:09:78:86:59:d3:1a:17:e5:4b:f1:0c:fa:
aa:fb:4c:49:08:8e:12:59:56:3c:83:57:d1:44:79:0c:8b:b5:
57:97:86:eb:5e:57:39:96:76:52:55:51:09:42:d1:6c:4c:15:
a1:6a:37:24:b9:85:5a:60:9d:32:b5:31:ba:6a:9e:f5:eb:a1:
89:0a:0f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:12:01 2026 by rpki-client