
$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
File: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft (raw, json)
Hash identifier: hRIETDZlVU6u0Hi6+/mxkKJ23mSVmIYoJ4zP15v2kbE=
Subject key identifier: 37:81:6F:EC:CD:5D:5E:0E:25:19:4A:45:22:16:57:4D:52:3A:55:A1
Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
Manifest number: D4
Signing time: Wed 25 Mar 2026 05:57:52 +0000
Manifest this update: Wed 25 Mar 2026 05:57:51 +0000
Manifest next update: Wed 01 Apr 2026 05:57:51 +0000
Files and hashes: 1: 0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl (hash: W/Mfyh0J3oeeYns5OOJ0mJJcL2fdC1UC8n6XB5+wsZ8=)
2: 9A54CDE2348011F086A8BD61C4F9AE02.roa (hash: pZ/IuFjNSaP5mWEh2joWSRI7X8KU75Bz1DpqY2aQSvM=)
3: 7151B356EAD411EFBA2AB40EC4F9AE02.roa (hash: tVJVMY/89KF907+NMLI3bnlJnvz83r7ofpq8v/2Sjfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788
Validity
Not Before: Mar 25 05:57:51 2026 GMT
Not After : Apr 1 05:57:51 2026 GMT
Subject: CN=69c3795f-27eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:fd:0f:3a:bd:f6:ae:64:b7:a8:c4:f6:3f:
dd:a1:e6:fe:22:e6:95:8e:c1:38:26:68:c7:f9:0c:
ce:60:1a:7e:e1:69:19:61:9c:34:62:5f:b0:a8:f6:
8d:1a:cb:2e:d9:bb:f9:01:cf:ed:fc:e8:73:0b:1e:
6c:9c:6e:b1:6e:3e:53:ae:9a:03:dc:a0:40:39:33:
dc:0c:ac:a4:96:bb:82:4e:98:54:51:52:db:54:6b:
79:38:35:e9:3d:94:ba:bb:a2:0c:92:10:43:8a:a5:
be:c7:ec:fd:e1:77:77:a1:7f:e4:be:ba:fc:d8:27:
30:1c:d4:e5:a2:4f:3a:f1:5a:2f:44:2b:48:73:74:
33:b2:00:e6:19:43:42:5e:92:30:e9:32:01:fa:87:
7e:dd:71:94:a9:d3:27:9d:d0:1d:40:03:fc:ad:da:
af:27:db:37:27:bc:50:c4:ae:ec:bb:db:e6:59:18:
37:94:e1:99:16:cd:d8:c2:1e:ba:39:c7:5f:f2:aa:
47:ee:99:d3:2d:89:25:74:2f:6f:0c:5b:c8:a1:3a:
a5:e0:c9:24:a1:6d:2f:7d:5c:ec:65:ee:0b:71:cc:
68:90:ec:0c:4e:c8:e8:87:49:c2:b3:9b:0f:08:ed:
67:fb:85:9b:00:b9:8c:44:a4:8e:24:65:89:c7:7c:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:6F:EC:CD:5D:5E:0E:25:19:4A:45:22:16:57:4D:52:3A:55:A1
X509v3 Authority Key Identifier:
keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:8f:ab:66:9e:2a:5b:4a:33:5e:34:33:8a:8a:99:63:bd:2b:
2a:ed:ef:61:3c:43:20:91:b2:e8:20:c8:03:87:10:5c:2b:3d:
f0:29:4c:c9:62:99:c4:85:3c:4d:80:3f:3d:07:99:4b:7a:9d:
93:cb:a7:3a:89:7a:ae:0f:44:5f:e2:ef:9f:6e:93:c0:23:8d:
26:e8:bb:1e:e1:7a:85:40:7f:4d:86:4d:85:35:3c:f0:3f:ac:
eb:c3:5b:e4:5d:9f:bb:d9:3f:58:32:fc:fe:b9:dc:97:17:a2:
9d:1f:c6:d3:fa:49:97:4e:52:58:9f:a0:49:e8:8a:9a:4d:3d:
75:c3:1e:68:e2:9a:1c:80:f8:e5:78:cc:60:15:6f:b8:a1:40:
43:90:33:0d:a1:b0:24:f6:30:22:d7:0e:c7:f3:3f:3a:70:fb:
36:dd:29:1a:93:70:93:96:23:6c:7b:76:2f:45:c1:08:e1:5e:
f2:58:8e:f4:3c:ff:90:e7:7b:30:5a:70:f5:40:0c:45:a7:4f:
e5:21:94:12:e5:11:7b:7b:1f:e5:a4:8f:ae:1c:dd:ff:a6:c2:
e8:7d:7a:92:0c:2e:7b:b5:e6:18:d6:93:b3:0c:63:b8:f5:4c:
ce:cb:32:fe:4a:77:9a:7f:46:93:d2:87:5b:0f:ff:5b:ef:88:
80:c9:89:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:08 2026 by rpki-client