
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier: ZJfa5htphYMX3Jk5AVjDM6lPhNFk46IPCz7CJEsD75Y=
Subject key identifier: 4B:CE:57:A5:32:BE:F5:46:79:B8:DB:B1:0B:84:65:A8:AA:33:0B:40
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number: 0244
Signing time: Tue 22 Sep 2026 15:23:23 +0000
Manifest this update: Tue 22 Sep 2026 15:23:22 +0000
Manifest next update: Tue 29 Sep 2026 15:23:22 +0000
Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: Hc1p+J4KsM0WDDMG7duQu26YeZ5l06vXUJaL8abWHyA=)
2: 94DAF6C241DE11F1A57436B1B5833773.roa (hash: 9AeXOOMXpBY5Hw+qh02itkG4wf9hqR+y5ENFHPEiYrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Sep 22 15:23:22 2026 GMT
Not After : Sep 29 15:23:22 2026 GMT
Subject: CN=6ab29d6b-5093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:2b:1a:2c:b5:7c:5f:d1:e3:bb:1e:9a:84:
88:e9:3b:45:3b:ca:65:68:9f:98:4a:15:d9:1a:65:
94:f5:54:0b:3c:98:a5:26:87:c9:27:9b:62:ab:4d:
5e:4f:04:c3:26:d0:af:dd:e7:ee:96:f2:37:e5:92:
c9:b3:46:a2:34:72:49:83:1b:6a:34:02:49:72:72:
b6:3c:96:42:bf:ca:8d:e7:c1:c0:6e:34:14:6f:a8:
58:8c:e7:c9:6d:d7:7b:ee:80:72:c6:d3:5e:4d:83:
d9:ce:c0:3d:6a:bd:00:73:25:ee:27:62:7c:c8:73:
94:b9:5f:6b:a9:3a:e5:a6:6f:00:74:22:df:78:b4:
7f:36:85:77:54:4f:92:87:3a:13:96:cc:03:4b:e6:
c6:64:ef:a7:f3:f3:6f:3f:c8:76:10:ed:f0:db:90:
13:74:13:19:e1:ee:13:08:dc:1e:ef:49:b3:57:ac:
17:03:a6:b4:03:74:79:ad:3b:a1:24:99:15:49:1e:
b1:d3:50:e7:2a:9e:e4:fe:89:06:ce:d2:a1:6c:d5:
a3:32:cd:23:3d:ff:fc:c1:ae:c1:8f:be:18:57:a9:
e1:87:e3:11:9c:90:f8:a6:b9:8d:29:70:70:0e:72:
3f:bc:bb:eb:63:d5:e6:dd:18:1f:70:ea:08:de:7e:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:57:A5:32:BE:F5:46:79:B8:DB:B1:0B:84:65:A8:AA:33:0B:40
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:21:a3:93:04:f7:9b:08:25:81:0a:f4:5c:ab:7b:35:6a:2c:
e8:f9:7d:bb:f9:c6:c2:72:f3:37:de:9b:e8:40:a8:a4:4a:b4:
c1:0b:34:bc:d1:97:fd:7b:d7:3c:c2:2c:aa:ae:0f:56:13:06:
a4:57:b6:0e:e2:0f:41:e8:b4:02:3e:1d:66:00:c1:0d:81:a2:
bb:cf:72:f8:17:95:80:bf:9d:aa:15:71:68:48:1f:cc:ba:bc:
d5:aa:79:1d:23:29:1d:9a:8d:c9:08:8e:c5:af:3c:37:fa:e0:
c3:93:bc:3f:a5:f1:93:4b:ce:ef:da:ca:c4:14:68:f1:7f:d4:
44:d8:0c:80:05:9f:16:78:a0:bc:27:84:a7:46:b2:88:1c:63:
38:1b:04:5b:a1:04:ac:a6:54:e7:14:65:4c:6f:fd:bd:4f:af:
fa:cf:0f:b1:b6:e6:61:fb:78:c3:c5:b7:1e:c4:9b:70:79:96:
bd:6d:e5:1f:09:1f:31:fc:34:2e:a2:69:39:e0:d8:82:07:9f:
60:cf:44:ff:57:9e:f1:d2:f5:44:a7:8c:b1:bc:a0:a3:41:d1:
b0:fc:17:44:02:0b:8d:1e:0e:52:b6:49:ab:48:0f:bb:5a:8c:
70:e7:56:8b:1d:66:4f:c5:48:14:df:59:cd:8d:ce:ea:42:58:
4c:0a:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:40:31 2026 by rpki-client