
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier: GI4r8Xqy5JfSJfIiAF/60wkAt1ddk0aiXTRgkE8Rlqk=
Subject key identifier: FC:9E:D4:ED:9D:49:94:AB:DE:27:D1:2F:E8:E1:9E:4F:19:92:4D:FA
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number: 010B
Signing time: Wed 25 Mar 2026 05:17:11 +0000
Manifest this update: Wed 25 Mar 2026 05:17:10 +0000
Manifest next update: Wed 01 Apr 2026 05:17:10 +0000
Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: 0ZjN+tLQeP5pKBpv124Lsol4UzbAn8KC+M5uMUVEX7c=)
2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: XBhJyYS78iAwLwaisddHiLLfaefoeg69NKzL67ACpjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Validity
Not Before: Mar 25 05:17:10 2026 GMT
Not After : Apr 1 05:17:10 2026 GMT
Subject: CN=69c36fd6-7363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:15:18:24:0c:d7:bf:42:fa:18:75:28:ce:
4d:15:ca:78:d0:25:e4:ce:dc:42:a2:32:85:8e:0f:
b2:b2:cf:be:9e:fd:9c:60:3f:3e:18:df:ab:a4:3d:
8c:81:8c:4f:7a:2d:a8:2f:1a:ef:eb:b3:57:42:60:
84:2b:43:dc:ff:e2:3f:7c:c7:a7:93:57:95:13:87:
f1:e3:07:11:73:e8:03:82:c5:1f:cc:7a:f4:9f:a1:
cf:d8:e8:61:ff:fc:e9:8b:6f:bf:2b:62:eb:90:58:
4b:83:39:1d:d6:49:14:25:09:5f:67:d6:c5:2d:df:
cd:4c:1b:4c:ff:43:0c:9c:21:a3:75:86:bc:d4:8b:
49:ff:30:3c:15:64:a5:bf:3b:fb:7c:fe:2f:4c:35:
77:f1:ea:62:a4:77:f6:11:e2:3a:5e:5e:25:7b:db:
1d:da:07:7e:73:8c:b6:40:ce:5d:d5:3a:dc:2a:22:
f4:e9:ff:0d:8a:d7:b9:43:c1:3b:41:25:f6:1f:67:
3f:71:f6:07:95:cc:fb:6a:d7:a1:1b:16:40:69:0f:
25:9d:af:8d:a6:f0:64:f8:d1:87:0c:2c:d0:00:83:
e8:f9:f6:21:fb:2c:0b:1a:e9:d8:05:95:a0:a9:57:
34:4e:2a:fb:06:5e:40:5b:94:37:44:1b:0a:ea:20:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:D4:ED:9D:49:94:AB:DE:27:D1:2F:E8:E1:9E:4F:19:92:4D:FA
X509v3 Authority Key Identifier:
keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:cc:55:8c:42:8d:4c:11:5a:8c:fb:16:db:42:30:97:e5:
6b:12:f1:50:52:45:9b:6b:cf:d3:61:62:93:1a:dd:55:0a:d9:
bc:ee:a1:44:83:a0:6a:e4:f2:03:6b:c8:14:d0:cf:a1:bd:95:
6b:9b:b2:38:a9:57:82:9e:68:a5:9b:26:47:52:c3:ab:4d:1d:
b1:ee:23:6c:88:ec:29:64:42:26:8d:57:0d:d3:74:0c:f5:28:
5c:8b:8d:45:ee:8b:bb:ea:4e:9a:23:49:31:1b:01:29:83:62:
f4:dd:01:3f:96:87:ef:a5:d2:83:a0:61:0d:a8:52:14:bc:f9:
69:af:6f:a0:95:4e:6c:e9:23:39:38:80:15:61:bb:bf:1b:9c:
93:f7:33:6f:b1:0c:e4:5f:89:db:cc:34:f0:ff:79:10:e6:f2:
53:15:96:6c:0c:88:a6:ca:d9:1c:ba:37:01:13:93:2f:0d:35:
1a:f4:84:7a:4d:de:01:77:d6:73:90:24:a5:07:55:bb:94:f8:
82:2c:37:78:eb:28:64:8e:8c:7f:81:d8:d4:b4:5e:44:5b:9b:
14:3b:54:d8:40:30:c6:fc:40:e5:9f:28:b0:da:48:75:d5:e7:
34:5f:37:74:5c:6f:b2:a7:b1:24:7b:03:02:54:5e:88:6d:cf:
51:78:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:41 2026 by rpki-client