
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier: ZfmSJ0vJagZ6vU2iKzayYc9M6mQdbvaKEyH4bq4cwyw=
Subject key identifier: 65:AE:10:CE:9C:67:BF:50:9F:5D:18:D5:09:3B:9D:23:5D:02:5E:01
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number: 0164
Signing time: Fri 13 Nov 2026 05:15:12 +0000
Manifest this update: Fri 13 Nov 2026 05:15:11 +0000
Manifest next update: Fri 20 Nov 2026 05:15:11 +0000
Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: In14aeLnwWla3sAmPAdWbTpHB+Jn5TP8ZbYxh5cmiK0=)
2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: OlddN+1Btn05jfz7izHATCAFLY0/IBXnBfKOwKNZEMU=)
3: C168AD504F2C11F1ABC5AA8AB2833773.roa (hash: L5WX9m+gsDcb4Xkr5gwSf+uci5kp8CuE133PRLJNs5k=)
4: 9D269AE068A111F1B35136357747A888.roa (hash: Gf69RYkyEiyVqtQXBLOZ3FGll0UR1zPQP9SnHZMHYUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 05:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Validity
Not Before: Nov 13 05:15:11 2026 GMT
Not After : Nov 20 05:15:11 2026 GMT
Subject: CN=6af69ce0-9608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bd:e5:0a:11:d8:01:fa:5a:ee:9a:57:dd:46:
fd:4c:d6:45:85:bd:4b:85:73:73:22:d8:3d:29:3c:
1d:af:60:f7:62:1a:1d:52:4f:32:b0:fc:83:ec:d5:
34:fa:1c:87:8f:6e:d9:a0:1f:88:18:ec:18:bb:4c:
77:d5:3d:8c:01:52:9d:ec:fd:e5:b6:80:a7:2d:4d:
76:a0:b5:7e:0a:c8:17:79:a8:43:30:f7:79:6f:90:
6f:65:c0:9f:a6:d1:08:58:92:c7:bd:6e:b4:5a:30:
16:46:8a:cc:1c:91:74:65:70:90:1a:bb:be:23:71:
b9:f6:f0:1b:9b:7b:1a:57:d6:30:da:53:a6:cb:57:
9d:a6:62:b3:b4:09:52:09:7d:1a:b5:aa:1e:d9:c1:
68:38:fc:7d:1a:43:ca:db:f9:f4:5c:87:21:d4:42:
ef:62:b0:3d:ae:d0:b6:02:1e:83:71:c9:65:79:d5:
3b:cc:7b:d2:39:f7:06:b1:90:e2:4a:a3:2c:03:85:
27:3f:bd:c9:62:2e:ec:0c:3f:58:98:e3:13:90:91:
80:6d:2e:4a:a9:7c:db:fe:8a:5f:fd:b1:6e:f6:9a:
25:29:77:4c:04:5b:37:cb:81:4c:48:62:a5:fa:88:
8d:1f:5b:dd:33:f1:da:73:b1:6e:2f:6c:f2:e8:d7:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:10:CE:9C:67:BF:50:9F:5D:18:D5:09:3B:9D:23:5D:02:5E:01
X509v3 Authority Key Identifier:
keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:81:1b:f5:0d:3a:f4:18:f6:fc:73:8b:85:fe:3b:03:2e:c0:
58:c4:1c:30:4b:06:79:1c:34:58:b4:89:15:c6:54:25:67:1a:
a2:b5:93:2f:d6:e2:11:8c:d2:32:30:02:b4:9d:a1:33:9c:78:
3d:92:ee:90:8f:aa:cd:44:b0:b9:af:e8:f0:f7:89:5a:f2:a3:
a0:d6:a1:3c:9a:16:31:23:a2:b1:d9:fb:3e:85:c1:12:64:3b:
fb:0c:54:a4:e4:a5:d7:a4:13:16:db:4c:4e:ff:79:1d:ed:9d:
39:c2:b5:2c:e4:73:9a:0a:8d:40:1e:51:9f:aa:c9:2d:e8:79:
4f:38:04:7a:45:6c:3f:5a:67:d8:b1:91:30:e3:ba:74:89:d2:
53:8d:f5:3b:48:34:0b:5a:fa:9a:ad:79:bd:38:28:88:28:12:
44:23:b2:c7:76:39:3e:82:3e:80:57:f1:37:7f:60:86:29:85:
24:0b:e4:56:96:31:48:e2:5e:e0:42:63:78:27:5f:8c:eb:89:
e9:f8:a7:cf:19:38:f7:82:38:29:cd:ab:2c:07:26:5f:d4:be:
61:a9:24:5a:45:43:a6:77:2a:e2:14:45:56:72:9f:1e:7c:be:
09:f5:f0:d5:98:1b:f2:d3:14:6f:49:01:62:33:02:81:aa:20:
74:aa:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 07:28:35 2026 by rpki-client