
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
File: euliL4NM9MbPWtGpivB9UBVFpL8.mft (raw, json)
Hash identifier: pq5XKbCMcKkH5r2gi5P4HvaCovXWJvI84/JSHxXN+iM=
Subject key identifier: EF:15:CB:C1:59:A3:B1:78:B9:34:F3:76:8D:E8:C0:B8:48:7F:B7:DA
Authority key identifier: 7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF
Certificate issuer: /CN=A9142661/serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
Certificate serial: 0AEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
Manifest number: 0ADF
Signing time: Tue 24 Mar 2026 19:13:44 +0000
Manifest this update: Tue 24 Mar 2026 19:13:44 +0000
Manifest next update: Tue 31 Mar 2026 19:13:44 +0000
Files and hashes: 1: euliL4NM9MbPWtGpivB9UBVFpL8.crl (hash: 6mt6xtmG5V6SKCLWH8DRklFmzZwp9UzH2R5SsBy/R14=)
2: 944D40F08C8C11F087CFCD6EC4F9AE02.roa (hash: 7JjDplswrjiBa9IFWWuFgtdWSRIlCL4fuL7Pk89nQAQ=)
3: 53F9A80E8C8C11F0877C6061C4F9AE02.roa (hash: qfXHOGwgMLAG6F6e/vVzEU0onRnXoyQ51zQlwRaqFEw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl
rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142661, serialNumber=7AE9622F834CF4C6CF5AD1A98AF07D501545A4BF
Validity
Not Before: Mar 24 19:13:44 2026 GMT
Not After : Mar 31 19:13:44 2026 GMT
Subject: CN=69c2e268-fa30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:82:21:b7:e6:f0:f3:c0:95:9c:67:98:46:
3b:c7:d4:a4:d7:e6:8a:42:3d:b0:82:e9:7f:c7:42:
81:d3:d2:40:75:49:5c:8e:5c:4c:f4:75:8c:81:06:
5a:8e:67:66:f7:03:e0:2e:83:71:25:e9:cd:27:9d:
21:51:6a:8b:83:ea:4e:6e:ff:46:0e:fa:26:44:5b:
20:a0:a9:90:91:ee:3e:e1:ad:6a:24:a2:68:67:6a:
27:0b:c0:80:82:f5:6b:98:db:30:ef:cf:c3:f8:c1:
97:54:c1:f7:b4:51:00:c1:eb:ae:c2:14:a0:ab:43:
3b:dd:3a:89:29:08:a1:9e:f8:af:63:f9:4e:f3:5a:
33:6a:91:46:ea:27:62:5c:8b:88:f9:c1:78:0a:b1:
86:6b:73:3f:9c:0b:b6:d8:a3:fb:de:b2:35:cd:71:
e9:c3:c3:6c:2c:36:d0:5a:49:e3:d3:44:b4:6f:a7:
4f:67:87:c8:97:64:2a:88:49:8b:f9:6b:64:73:2c:
cf:0b:2c:84:57:c5:0b:4c:0d:be:7c:41:e5:bc:f6:
9c:79:28:b4:b3:6d:f2:88:a7:c3:49:97:ce:26:0f:
90:70:d5:06:48:51:cd:ae:df:df:7f:5b:16:b4:41:
39:d5:00:94:01:ba:cd:8d:62:b8:9a:94:9c:f1:51:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:15:CB:C1:59:A3:B1:78:B9:34:F3:76:8D:E8:C0:B8:48:7F:B7:DA
X509v3 Authority Key Identifier:
keyid:7A:E9:62:2F:83:4C:F4:C6:CF:5A:D1:A9:8A:F0:7D:50:15:45:A4:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/euliL4NM9MbPWtGpivB9UBVFpL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142661/4CC7727669BC11EAAF1B9F69C4F9AE02/euliL4NM9MbPWtGpivB9UBVFpL8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:51:e9:ee:a3:6a:e5:4d:be:ef:70:3a:33:d8:1f:f6:87:f3:
c9:b7:84:89:91:8a:f0:31:25:34:e7:44:08:87:9a:ff:13:f4:
4f:9d:a2:04:4b:0a:11:3d:2f:e2:0a:bd:94:6c:15:74:b9:ff:
e0:c3:22:95:b8:c6:77:35:2c:22:7d:9e:a1:3b:db:ba:69:d0:
7a:8d:70:ac:16:fa:9b:98:72:38:2a:b2:23:cc:4c:cc:74:0c:
12:d4:cc:c1:9d:f6:4d:44:60:72:f4:5f:7b:6e:94:45:73:72:
48:d4:6a:cd:97:1e:38:b6:77:e4:8d:76:0c:a1:9c:17:2e:9b:
cd:a2:29:51:e3:b8:89:07:ca:b6:2e:b6:f1:ce:21:b7:c2:d5:
84:19:ea:e6:66:2d:1b:4d:48:a5:b0:84:4d:d7:fc:8c:ec:c6:
66:f1:91:9f:b6:98:86:7c:af:af:4a:dc:60:d5:ee:05:09:34:
a2:fc:ff:b8:90:ae:8d:dd:49:70:93:85:9e:16:42:e1:0a:e5:
53:ad:92:6f:49:39:58:5f:fe:58:0f:13:f9:47:ec:a5:ce:ed:
11:76:26:5c:8c:25:fd:92:a8:c0:84:15:7f:60:37:ea:b0:89:
19:5f:c8:10:f4:0d:00:d7:c4:df:48:80:a0:bd:6f:ee:09:0b:
0b:22:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:48 2026 by rpki-client