
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File: EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier: PdL0ZPso7tfwDg0AsFFNfh9sR2yS6LYqjXDxqeJriBk=
Subject key identifier: 27:24:EB:CD:EE:19:91:22:A7:7D:6B:E3:96:FC:54:94:B2:D5:A1:39
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number: 01F4
Signing time: Tue 29 Sep 2026 04:00:10 +0000
Manifest this update: Tue 29 Sep 2026 04:00:09 +0000
Manifest next update: Tue 06 Oct 2026 04:00:09 +0000
Files and hashes: 1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: tpGcQnsVmxAiBG2h5oEUFYxJVpp7asQS0nk6BRpgTr8=)
2: 229253A4A1F111F084328A39C4F9AE02.roa (hash: aK9ms8XFrER6p5FpbdAfuu9FASk86jIAEzY+JMQ1USM=)
3: 235D2836A1F111F084328A39C4F9AE02.roa (hash: E3Vh4QPukKhgUpPpZhB3O+U89F6/91Jfk8D+jDf2eYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Validity
Not Before: Sep 29 04:00:09 2026 GMT
Not After : Oct 6 04:00:09 2026 GMT
Subject: CN=6abb37ca-85c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:3b:01:2e:21:40:bf:b4:af:01:46:14:98:
50:ad:96:ec:ae:72:74:75:97:b2:65:a8:89:3e:99:
e3:53:62:54:04:f9:8c:fb:8d:74:19:3a:5b:b3:ee:
0e:20:62:f4:e4:a0:17:17:38:ca:dd:fa:09:a8:7c:
f8:7f:33:d5:74:bc:c9:d1:b3:2d:99:4d:ae:bd:c6:
e7:6d:9f:3e:70:96:05:38:72:d7:63:6c:ef:2d:2b:
44:73:80:59:bd:c5:24:e9:9c:56:c5:cf:4d:e0:97:
66:7d:cb:23:b3:da:0f:8d:94:00:e6:ae:1f:a0:45:
5d:9c:ca:68:43:cf:1b:91:e2:89:53:59:98:22:f0:
67:9c:97:bf:9d:c4:99:a4:11:92:18:bc:fd:1c:b2:
5e:03:fb:9d:5c:78:ff:af:1d:b2:4f:66:60:3c:a9:
d2:cd:8e:0e:6b:98:5f:7b:82:f6:6c:86:4d:ea:52:
ad:2e:ad:7d:9e:bd:ab:1f:1b:71:6c:83:13:90:f5:
03:70:b0:24:2e:db:8a:02:e5:80:2c:d0:9b:06:d6:
99:3a:d6:08:8a:42:3c:d9:64:37:13:1d:04:bf:1c:
ac:46:40:a6:30:d3:b9:4f:0e:f8:d4:c9:33:ef:c8:
ac:b3:8a:52:c4:71:e1:3e:6f:87:c0:2b:a8:a9:14:
0f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:24:EB:CD:EE:19:91:22:A7:7D:6B:E3:96:FC:54:94:B2:D5:A1:39
X509v3 Authority Key Identifier:
keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:77:42:74:0c:59:d0:48:88:e9:e8:94:a1:61:28:dc:f2:
32:44:ef:ec:c9:6f:f0:05:ce:21:71:54:dd:d0:0e:ed:40:cc:
89:5d:11:57:86:36:cf:40:c3:98:4c:4f:00:49:e5:ab:48:3f:
ee:e8:cd:f8:2d:2f:a3:25:ce:5e:dc:e8:d4:8b:ad:71:be:bb:
96:89:e8:d7:cb:2b:3a:21:93:82:0b:76:d7:5d:1d:f0:dc:f1:
f3:57:f7:91:cb:75:38:fc:05:04:de:f1:98:8a:6f:d8:f7:e4:
11:d5:2e:93:c4:32:7a:56:77:bb:59:88:62:b3:87:cf:78:e8:
9f:e6:b3:ce:c6:00:26:d4:d9:9e:99:05:65:a2:aa:81:4f:40:
f5:a3:a7:f2:e7:5d:86:d5:b4:06:14:ec:64:e5:d1:cc:40:74:
76:1d:84:8b:2b:7f:ec:b3:6a:50:b3:1d:21:eb:a6:65:32:03:
05:6f:16:28:07:f9:35:de:a5:0b:d5:88:af:aa:93:56:25:e4:
f1:70:36:8f:cc:2a:79:c1:60:e6:5d:4e:3b:29:27:fe:bb:a6:
8c:5b:45:ea:09:b0:16:67:cf:45:f5:f4:6b:ab:1b:8b:bc:89:
90:7f:d3:70:72:57:50:a4:a9:b9:84:4e:9c:4c:3f:06:33:70:
36:8f:f6:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5NDkxMTAvBgNVBAUTKDEwRTA1MDJGM0QzODJFOEMxNTY2RUNDQzJBMTIxQjZD
NDM5REU5NzcwHhcNMjYwOTI5MDQwMDA5WhcNMjYxMDA2MDQwMDA5WjAYMRYwFAYD
VQQDEw02YWJiMzdjYS04NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0s7AS4hQL+0rwFGFJhQrZbsrnJ0dZeyZaiJPpnjU2JUBPmM+410GTpbs+4O
IGL05KAXFzjK3foJqHz4fzPVdLzJ0bMtmU2uvcbnbZ8+cJYFOHLXY2zvLStEc4BZ
vcUk6ZxWxc9N4Jdmfcsjs9oPjZQA5q4foEVdnMpoQ88bkeKJU1mYIvBnnJe/ncSZ
pBGSGLz9HLJeA/udXHj/rx2yT2ZgPKnSzY4Oa5hfe4L2bIZN6lKtLq19nr2rHxtx
bIMTkPUDcLAkLtuKAuWALNCbBtaZOtYIikI82WQ3Ex0EvxysRkCmMNO5Tw741Mkz
78iss4pSxHHhPm+HwCuoqRQPAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCck683u
GZEip31r45b8VJSy1aE5MB8GA1UdIwQYMBaAFBDgUC89OC6MFWbszCoSG2xDnel3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0OS8zRjI0MkFDMkU0
RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExvd1ZadXpNS2hJYmJFT2Q2
WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VPQlFMejA0TG93Vlp1ek1LaEliYkVPZDZYYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODk0OS8zRjI0MkFDMkU0RjMxMUVFOTkxMDE0MzhDNEY5QUUwMi9FT0JRTHowNExv
d1ZadXpNS2hJYmJFT2Q2WGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAELF3QnQMWdBIiOnolKFhKNzyMkTv7Mlv8AXOIXFU3dAO7UDMiV0RV4Y2z0DD
mExPAEnlq0g/7ujN+C0voyXOXtzo1Iutcb67lono18srOiGTggt2110d8Nzx81f3
kct1OPwFBN7xmIpv2PfkEdUuk8QyelZ3u1mIYrOHz3jon+azzsYAJtTZnpkFZaKq
gU9A9aOn8uddhtW0BhTsZOXRzEB0dh2Eiyt/7LNqULMdIeumZTIDBW8WKAf5Nd6l
C9WIr6qTViXk8XA2j8wqecFg5l1OOykn/rumjFtF6gmwFmfPRfX0a6sbi7yJkH/T
cHJXUKSpuYROnEw/BjNwNo/2/Q==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:33:43 2026 by rpki-client