
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier: AqJAQbZ090xqbB6fnulrCci7ii4ZlA6l1kWXNWC9WCw=
Subject key identifier: 75:41:D0:CC:70:92:BF:A8:F0:8B:57:C1:AB:2D:92:A5:F3:C2:79:75
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number: 0222
Signing time: Wed 22 Jul 2026 15:30:21 +0000
Manifest this update: Wed 22 Jul 2026 15:30:20 +0000
Manifest next update: Wed 29 Jul 2026 15:30:20 +0000
Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: AWYYl8ewctjkLwlzK5GOKemnze+qVsFrJjQG8iJVYr8=)
2: 94DAF6C241DE11F1A57436B1B5833773.roa (hash: ENNabAU4MMdkkOdqYyMduppz6I3AhhGmINhrVynFFMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Jul 22 15:30:20 2026 GMT
Not After : Jul 29 15:30:20 2026 GMT
Subject: CN=6a60e20d-5b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:da:ef:1e:61:06:1a:2e:a0:67:84:53:b5:
4b:b6:6a:24:d8:9c:76:f7:dc:cb:4d:2f:41:32:ff:
48:71:f5:cc:5c:90:f4:6f:49:c1:90:e0:ef:6b:4e:
9e:b6:a3:76:5f:ba:39:22:26:d6:92:4e:df:55:d9:
9d:37:af:d0:57:71:66:dc:87:02:ad:49:44:ff:9e:
da:84:ac:6c:8b:94:99:e2:ff:d9:f3:56:56:26:8e:
3d:0e:17:a5:cb:6e:73:7a:6b:b4:aa:41:30:c6:22:
e9:c3:f2:bd:16:4f:e5:5d:0c:bf:e4:e3:d1:cd:3c:
1b:15:56:f8:2c:1d:2c:57:ef:4c:af:ee:bb:c3:6e:
8b:22:94:17:20:97:ed:48:0c:b3:4c:0a:86:a6:f5:
be:a3:88:81:45:13:00:e4:7e:ec:2d:2e:bc:a5:34:
52:96:0c:af:11:f4:8e:2f:9c:48:6f:81:6f:4f:89:
4c:2e:e9:76:78:d2:19:18:4d:8a:50:9f:c3:e4:df:
3e:9b:93:88:a8:14:a1:2d:cc:78:35:e0:74:68:a6:
24:e4:f9:77:1e:eb:91:b2:06:02:51:82:78:54:88:
0e:eb:b5:91:7c:a0:0c:32:bf:d8:75:ff:af:44:f0:
ff:e4:2e:6d:a1:cd:3f:75:9d:ba:4b:1e:2f:65:41:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:41:D0:CC:70:92:BF:A8:F0:8B:57:C1:AB:2D:92:A5:F3:C2:79:75
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e4:05:d4:e2:a0:fb:f2:dd:66:c7:1f:3f:6d:39:7f:20:00:7a:
71:41:01:46:ad:79:8a:52:a8:02:06:c3:c4:8e:ca:85:35:0d:
9c:7a:03:64:48:45:83:f0:90:8a:f8:a0:c5:3a:b8:40:24:11:
0c:79:6c:10:f3:8e:a5:54:66:96:39:ba:60:b3:cf:3e:40:e6:
18:af:29:a0:00:6c:ac:1b:7a:4f:4d:47:6b:bb:57:7f:14:0b:
85:77:65:7d:90:c4:17:3b:0d:af:07:70:7b:c0:2d:3a:eb:5e:
61:5c:0c:54:e5:73:89:86:f0:60:19:00:dd:a6:85:f3:27:99:
c9:99:f7:12:e8:21:19:c9:9a:c8:10:bb:ca:d1:62:70:35:93:
a6:0e:35:2f:30:e1:60:1c:96:9e:69:6f:0b:0f:0f:a3:87:3a:
a8:65:db:42:93:61:f3:19:7c:b9:9b:1d:1b:09:91:d1:f0:75:
ff:27:26:d4:e8:a8:be:8e:b3:27:1a:41:78:ca:f7:16:41:c2:
a1:c0:1e:68:1e:a5:96:bc:b1:e4:3a:e7:56:f8:fe:a6:ae:fd:
43:ce:e4:4e:23:6a:e1:50:2e:b9:96:5c:d1:95:a1:2d:ac:00:
ba:4a:44:0a:4f:bb:83:0b:e8:de:fb:88:e6:7f:d6:8c:da:d3:
2c:36:fb:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0
RTdCNDNCMTcwHhcNMjYwNzIyMTUzMDIwWhcNMjYwNzI5MTUzMDIwWjAYMRYwFAYD
VQQDEw02YTYwZTIwZC01Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+fa7x5hBhouoGeEU7VLtmok2Jx299zLTS9BMv9IcfXMXJD0b0nBkODva06e
tqN2X7o5IibWkk7fVdmdN6/QV3Fm3IcCrUlE/57ahKxsi5SZ4v/Z81ZWJo49Dhel
y25zemu0qkEwxiLpw/K9Fk/lXQy/5OPRzTwbFVb4LB0sV+9Mr+67w26LIpQXIJft
SAyzTAqGpvW+o4iBRRMA5H7sLS68pTRSlgyvEfSOL5xIb4FvT4lMLul2eNIZGE2K
UJ/D5N8+m5OIqBShLcx4NeB0aKYk5Pl3HuuRsgYCUYJ4VIgO67WRfKAMMr/Ydf+v
RPD/5C5toc0/dZ26Sx4vZUFGzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVB0Mxw
kr+o8ItXwastkqXzwnl1MB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD
NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16
MWtjVG9mYkVocUJPZTBPeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA5AXU4qD78t1mxx8/bTl/IAB6cUEBRq15ilKoAgbDxI7KhTUNnHoDZEhFg/CQ
ivigxTq4QCQRDHlsEPOOpVRmljm6YLPPPkDmGK8poABsrBt6T01Ha7tXfxQLhXdl
fZDEFzsNrwdwe8AtOuteYVwMVOVziYbwYBkA3aaF8yeZyZn3EughGcmayBC7ytFi
cDWTpg41LzDhYByWnmlvCw8Po4c6qGXbQpNh8xl8uZsdGwmR0fB1/ycm1Oiovo6z
JxpBeMr3FkHCocAeaB6llryx5DrnVvj+pq79Q87kTiNq4VAuuZZc0ZWhLawAukpE
Ck+7gwvo3vuI5n/WjNrTLDb7/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:53 2026 by rpki-client