
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
File: eErjDFQTMvpDt1Y83AGwLtG9nFA.mft (raw, json)
Hash identifier: 7kRf9EhMwHeksNLlnh91hbXQeOhOiUAtAFnbO6YpS6g=
Subject key identifier: BB:14:BA:34:8A:56:DB:BF:DF:3F:4E:5E:65:04:CB:09:9E:2E:1C:72
Authority key identifier: 78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
Certificate issuer: /CN=A916BCBA/serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
Manifest number: 30
Signing time: Fri 27 Mar 2026 08:14:10 +0000
Manifest this update: Fri 27 Mar 2026 08:14:10 +0000
Manifest next update: Fri 03 Apr 2026 08:14:10 +0000
Files and hashes: 1: eErjDFQTMvpDt1Y83AGwLtG9nFA.crl (hash: vCKUvIBfPBwXJv5Z1weo7m47b05A6uItppI7TIe9Q+s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 08:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCBA, serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Validity
Not Before: Mar 27 08:14:10 2026 GMT
Not After : Apr 3 08:14:10 2026 GMT
Subject: CN=69c63c52-7806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:29:be:4b:9b:a1:38:96:82:97:34:d3:97:
57:37:48:7a:50:95:74:1b:dc:b7:ae:e9:32:3d:93:
55:83:35:63:5c:8d:83:8e:90:fd:8d:f6:ed:fe:be:
a9:3b:9d:86:3c:70:95:7e:f4:29:13:be:e0:39:c4:
58:df:e0:af:45:72:fd:1f:c8:10:66:aa:59:21:65:
6d:0d:48:e8:8b:bb:62:a9:9b:56:7f:8d:6c:e1:2e:
33:29:48:07:fe:ea:6f:96:36:c9:fa:5e:06:a8:df:
03:52:93:99:2e:32:3f:77:dc:dc:ed:f7:4e:41:53:
1d:de:19:af:6f:e6:df:87:7f:4d:4b:71:ac:15:d2:
aa:55:4e:33:9e:51:c2:20:8e:60:02:49:82:41:b1:
6f:8d:cb:b1:e3:e9:d5:94:44:5e:f4:eb:90:9f:b4:
51:53:05:c3:53:0d:82:43:17:d7:b3:09:c2:06:43:
e9:d9:ad:7b:f7:8a:06:16:86:6d:c5:9f:9f:6c:dd:
33:af:b7:a2:30:a8:d5:06:8f:93:6c:e8:d6:d5:23:
82:f0:c3:51:0a:79:d4:2e:21:a0:6f:a7:49:e6:2c:
a5:d8:a1:b4:93:b6:78:22:80:9a:0a:f4:38:ca:d5:
0f:dd:80:90:f7:6e:c3:3d:64:93:9e:99:1e:bf:9a:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:BA:34:8A:56:DB:BF:DF:3F:4E:5E:65:04:CB:09:9E:2E:1C:72
X509v3 Authority Key Identifier:
keyid:78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:55:c8:3e:b3:84:f7:7a:67:03:bf:b3:22:d8:26:5e:01:20:
53:89:f6:85:cb:34:02:c0:d4:bc:55:94:26:f7:b4:96:7b:a5:
ad:18:97:c4:32:b8:a8:dd:7e:b3:a8:59:65:88:4b:2a:01:4a:
ed:1b:8d:29:7f:f6:66:76:5f:7f:3d:8c:53:9f:2b:c3:b9:85:
83:9f:db:93:d6:ef:95:91:a6:ce:56:d1:e5:28:6f:21:4b:d7:
48:a9:bf:b7:e8:ac:c1:36:94:3f:d9:0c:f4:85:bd:44:a3:1c:
04:6b:90:bd:f4:86:0a:91:51:18:40:b3:20:88:94:3a:c9:9f:
18:4d:11:aa:5e:89:3e:24:a5:d4:ed:0c:1a:51:9b:3c:33:bb:
b7:94:4d:44:b3:8c:19:40:77:27:64:b0:e4:a4:56:ab:66:63:
7d:99:3a:bc:98:ff:e1:72:1f:a0:6e:6f:6c:01:65:c6:a7:9b:
d2:b5:1c:14:2f:83:79:5e:ca:3c:23:3f:37:33:fa:e8:b9:07:
da:c5:82:40:7b:7e:bd:66:da:39:66:2a:a8:07:48:34:8a:b9:
07:1c:07:ad:2d:9b:8f:6c:54:01:8b:eb:fa:2d:8b:c2:2c:e6:
71:c4:33:a4:04:60:00:48:76:f6:57:b7:ba:ab:e8:37:6f:7a:
ee:90:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:25 2026 by rpki-client