
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File: EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier: kxRovwA9oY3p1po2VyFIUNriVwIqSlrNTNy1aY39VuE=
Subject key identifier: 41:79:C1:3E:D6:26:17:E2:4B:AB:22:6C:ED:3D:CC:96:B6:4F:EC:26
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number: 0192
Signing time: Wed 25 Mar 2026 03:53:13 +0000
Manifest this update: Wed 25 Mar 2026 03:53:13 +0000
Manifest next update: Wed 01 Apr 2026 03:53:13 +0000
Files and hashes: 1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: WUj/Vias9z5cMN22dw/uEk2RIuklH7etxfAdfCwN9Zg=)
2: 235D2836A1F111F084328A39C4F9AE02.roa (hash: 9k6+Xj+W+Lqv1+Yo0t+v/d771PSS2yGUc+XPXaL3AnM=)
3: 229253A4A1F111F084328A39C4F9AE02.roa (hash: YOyCJ71TebX1l/yy1zYnl+ETDJGSru1yrNBDf999HOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Validity
Not Before: Mar 25 03:53:13 2026 GMT
Not After : Apr 1 03:53:13 2026 GMT
Subject: CN=69c35c29-2c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:3c:38:36:cd:eb:a9:ae:a7:63:45:da:bb:
34:f4:9d:d4:32:c4:d8:15:00:0e:51:00:f4:b5:24:
e3:95:2c:f7:66:f2:59:8f:9d:74:9f:de:f8:37:a8:
5a:88:b7:a4:49:df:df:6a:4a:07:b6:38:c5:09:45:
12:0c:d5:a4:1d:02:90:73:4c:2a:dd:e8:ae:18:d9:
69:19:e7:0e:4a:62:cd:a5:8f:fa:94:23:95:5e:70:
80:3b:fa:48:8e:07:9a:a4:e2:57:6c:45:a1:fa:43:
95:9d:e2:a5:59:1c:9b:2e:8f:f6:f7:25:74:db:1a:
98:92:06:25:13:4b:91:ab:aa:c6:ea:95:47:33:68:
1e:ec:07:6e:2f:bf:16:0c:23:73:5f:7e:e9:ac:f4:
91:ec:29:bf:4c:50:f0:ce:1f:60:f1:a1:b8:30:2d:
44:98:16:da:bd:00:d0:ee:ea:47:30:c2:ec:98:e7:
43:d7:41:bf:d5:4f:9f:36:6d:f8:00:76:c5:27:b3:
7c:b1:26:ff:48:fc:a9:2b:b6:27:c1:65:4e:00:d5:
72:4e:ca:90:6c:4c:5b:e3:13:a7:cf:e4:e7:91:06:
5d:16:44:bf:c3:b5:c1:01:c2:59:75:f2:11:09:3b:
7b:3b:36:75:8d:16:c4:08:78:85:26:3b:69:98:be:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:79:C1:3E:D6:26:17:E2:4B:AB:22:6C:ED:3D:CC:96:B6:4F:EC:26
X509v3 Authority Key Identifier:
keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:98:95:8d:11:9a:ff:18:2d:73:ba:a7:c1:45:6a:88:60:1d:
12:dd:a1:48:9e:d2:a7:2a:b7:0f:1c:f4:70:bf:01:24:4f:3c:
b5:8e:87:84:30:f3:c0:9b:9e:7d:b5:43:22:fb:84:73:69:5a:
d3:53:33:5e:ea:0e:e3:38:e7:1f:2f:da:61:ca:a6:2e:ae:66:
f8:b3:a3:dd:64:9c:1f:0d:4a:7c:24:76:62:44:5a:88:54:04:
7e:3e:cc:92:5e:79:37:1a:44:f1:ae:42:39:4f:93:8d:31:77:
d5:ed:11:12:91:1c:39:c9:05:88:4a:84:23:8d:9c:dd:7e:53:
3a:62:5e:2d:bb:6d:8a:eb:2e:29:c3:eb:88:5b:7d:44:ec:d7:
da:25:41:6f:41:c9:75:6b:15:68:ef:3c:8f:cb:57:d9:d3:9c:
d4:97:96:16:5b:f3:00:69:7a:7d:e9:7d:23:22:bb:d7:ed:c3:
34:4e:74:04:ff:69:57:d0:d8:73:7f:5c:f8:fa:73:24:c9:91:
ce:a3:8a:55:5e:aa:b0:59:51:14:f9:bc:92:34:58:c5:cf:a0:
fa:ae:6e:22:05:47:eb:ca:10:e3:bc:b1:a4:0a:cc:70:73:09:
30:c2:d9:6c:4f:91:b4:f5:cb:7f:25:87:50:79:87:2f:88:17:
a5:a6:f5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:38 2026 by rpki-client