
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier: VH2UBkilh6wJ4+87LXBS1yijgZ1FHwwENdgVWYgloSc=
Subject key identifier: 00:AA:E5:9D:9F:03:86:0D:1A:47:41:C6:FC:C4:CD:39:F4:46:A3:45
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number: 01E2
Signing time: Tue 24 Mar 2026 15:23:51 +0000
Manifest this update: Tue 24 Mar 2026 15:23:50 +0000
Manifest next update: Tue 31 Mar 2026 15:23:50 +0000
Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: J2tSg6FiPXscaLFmAEmtYuNSU54gbyhUpTSWE37IkN0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Mar 24 15:23:50 2026 GMT
Not After : Mar 31 15:23:50 2026 GMT
Subject: CN=69c2ac87-105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:24:f3:61:e1:79:ea:8b:f9:83:f0:c4:8f:
71:84:ba:95:cc:4e:4e:8e:d5:16:1f:4d:69:16:a2:
56:09:79:d6:e4:31:9f:e0:c8:b1:20:f5:06:90:8a:
e0:32:ff:f7:c2:2e:6e:53:b0:55:a8:05:3e:d9:04:
12:30:d7:32:74:1b:59:18:98:19:d7:6a:de:ee:b5:
0b:67:af:06:59:95:db:01:74:73:e1:df:84:f1:9b:
97:4c:ee:db:25:eb:d6:85:ed:04:ac:09:ca:06:49:
74:93:f4:37:ad:45:79:1d:27:7a:1d:7f:49:8c:82:
1f:da:bc:63:9e:7f:32:eb:f0:ad:f5:89:98:7b:e7:
9c:fb:b5:42:80:ea:cd:6a:5e:29:41:99:19:fd:1f:
97:df:f3:97:e4:62:a0:4f:d8:48:58:54:0c:cd:61:
9d:b3:c4:4b:c7:fd:00:a4:a3:c5:65:ec:86:ac:8d:
04:bd:ba:93:3a:ee:bf:18:2d:cd:db:38:86:6f:57:
a3:b9:bf:58:4e:41:e1:80:42:e3:bb:81:84:36:c5:
6d:35:47:a8:49:cf:57:8a:ae:c5:15:27:37:d0:2e:
d6:db:ca:0f:1f:60:66:9a:6f:67:45:82:2b:42:a6:
27:c3:74:7e:7d:d9:2d:58:66:e5:e9:7a:5a:c7:e4:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:E5:9D:9F:03:86:0D:1A:47:41:C6:FC:C4:CD:39:F4:46:A3:45
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:80:52:eb:33:1b:42:dc:7e:4d:b3:1a:bd:de:c1:00:11:98:
36:c0:ba:8e:4f:f2:0b:3b:a1:db:2a:f4:fb:21:6e:b2:08:da:
0d:eb:07:59:16:87:6f:55:b4:9c:3a:3d:20:b4:6e:8d:bc:f1:
18:47:1b:39:10:76:7a:ed:e9:2b:c3:69:c6:9a:81:ec:5b:0d:
49:bf:78:f5:16:2b:5b:af:d2:01:65:02:f8:6b:0f:21:f3:b2:
c6:eb:86:59:d9:6f:cd:74:98:4a:14:68:69:82:a3:33:08:09:
e1:cb:2e:97:d1:83:31:17:32:b5:a3:5b:fe:1e:b9:d5:68:57:
58:ed:6a:da:91:a2:de:f0:29:73:03:f0:4a:e8:f8:fc:cb:34:
2d:cf:8e:36:9d:f6:e5:88:0e:c6:8b:2b:4a:b9:b7:92:2e:76:
4a:41:be:7e:e4:2e:cf:9b:33:c6:2a:fc:0d:71:9a:d1:c9:82:
26:48:c2:d6:9f:4d:fe:bc:58:8a:6d:dc:73:65:76:44:3e:b6:
6a:50:42:43:38:ab:67:1e:ab:f9:24:9a:16:20:c5:8d:c0:76:
56:a8:5e:08:0f:90:d7:65:64:e4:77:9a:40:2b:6d:44:65:b9:
73:7e:ad:11:14:2b:89:88:39:c2:98:ac:b6:4c:dc:9e:84:5e:
54:9c:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:17 2026 by rpki-client