
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier: tK/GdobPdCt2yA7e0F0RMYbMbiH230WF4ueAGKvmF/g=
Subject key identifier: 2D:94:73:2A:80:23:07:E5:B2:31:1F:0B:D5:33:38:98:54:AF:17:E9
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number: 0222
Signing time: Fri 17 Apr 2026 02:34:49 +0000
Manifest this update: Fri 17 Apr 2026 02:34:48 +0000
Manifest next update: Fri 24 Apr 2026 02:34:48 +0000
Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: q8Hx4N4a8q9e2nt8/nHee4VWwx+hkgzKoDs3C7ESoUQ=)
2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: QWRcixf8QLc7IkGmviGZNSC4YSR65CJzVUK/LtjPM4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: Apr 17 02:34:48 2026 GMT
Not After : Apr 24 02:34:48 2026 GMT
Subject: CN=69e19c49-1965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:02:84:8d:5d:3f:79:af:e3:fd:c3:54:ae:
f6:af:8c:55:b5:03:1d:37:c1:ca:ec:f4:8b:32:13:
c1:26:4f:9e:62:d4:89:1f:a4:b6:f3:84:47:2a:5d:
1d:8e:0a:f7:df:78:77:7c:62:e4:67:a6:99:14:85:
e6:f5:59:65:c4:26:b5:0d:8d:a6:33:a8:30:df:8f:
7e:38:5e:1d:23:7b:6d:3b:5b:31:9e:e3:5b:58:40:
2d:4f:9e:15:a3:db:9f:42:9f:88:5d:3b:a0:41:2e:
3a:4d:80:02:af:9a:ae:bd:d7:68:10:29:3a:95:c0:
12:ca:15:a4:20:99:06:eb:be:4d:98:f3:23:bb:16:
a7:8f:06:74:ab:85:6b:7b:42:3f:da:24:e7:b2:c3:
36:31:4d:3d:5e:0b:b0:6d:f1:2e:ae:a9:eb:78:bc:
b7:0a:2a:d6:20:77:3c:0f:77:41:36:e2:9b:f0:61:
89:c2:19:e1:83:42:af:a8:0a:dc:dc:fb:be:b8:7b:
9c:8b:35:59:13:f7:53:84:ef:a0:d4:10:fc:7f:6a:
8d:2b:60:f5:4f:be:7d:c5:64:d9:e8:9e:04:66:40:
53:e5:ae:c7:e5:c2:8c:27:20:3a:0d:da:a6:35:9d:
a9:39:d3:13:05:19:41:da:c2:0f:1f:e2:f0:91:df:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:94:73:2A:80:23:07:E5:B2:31:1F:0B:D5:33:38:98:54:AF:17:E9
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6f:28:1e:a6:b0:88:e0:3f:1d:55:49:a1:86:95:16:3d:65:
e5:cd:29:04:1c:87:1d:65:f2:c9:c6:fd:12:ce:2e:ed:89:9a:
61:d3:45:5a:f8:a2:d2:35:a5:a7:f4:9b:9f:94:2a:7a:93:5f:
a8:ea:68:55:02:3a:46:ef:ee:22:25:b2:ed:c5:f4:52:33:3b:
e5:d8:7c:45:b1:de:d1:a3:ce:b9:53:80:c7:15:ce:9c:7e:4c:
bb:f9:f9:56:b4:8d:0e:38:63:bd:ff:92:9c:70:2b:4b:94:06:
5c:9e:46:43:29:e1:d1:cc:cd:b4:61:ae:c3:ad:c5:16:f3:76:
ff:12:8b:e6:f6:5d:84:64:74:cf:d6:75:21:57:64:5d:a8:af:
9f:9d:96:65:d8:96:9a:2e:5a:9c:25:5d:0f:4e:32:df:95:d1:
51:22:82:07:2f:37:a1:7f:f6:45:4a:e9:28:3d:d4:9c:49:86:
32:c5:22:27:09:4d:44:59:b3:45:a0:9b:0b:3c:b6:57:21:9e:
4d:96:c5:1e:c6:1c:0c:6c:ff:19:44:6a:50:a5:cc:a8:08:c8:
ea:f9:4c:f9:ff:50:eb:11:da:f9:df:57:2b:5c:f2:90:b5:76:
74:4c:58:20:48:2e:c5:73:91:88:b4:67:e0:84:f6:29:f6:b5:
9e:73:af:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0
MzI4NzIzQTAwHhcNMjYwNDE3MDIzNDQ4WhcNMjYwNDI0MDIzNDQ4WjAYMRYwFAYD
VQQDEw02OWUxOWM0OS0xOTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0T4ChI1dP3mv4/3DVK72r4xVtQMdN8HK7PSLMhPBJk+eYtSJH6S284RHKl0d
jgr333h3fGLkZ6aZFIXm9VllxCa1DY2mM6gw349+OF4dI3ttO1sxnuNbWEAtT54V
o9ufQp+IXTugQS46TYACr5quvddoECk6lcASyhWkIJkG675NmPMjuxanjwZ0q4Vr
e0I/2iTnssM2MU09XguwbfEurqnreLy3CirWIHc8D3dBNuKb8GGJwhnhg0KvqArc
3Pu+uHucizVZE/dThO+g1BD8f2qNK2D1T759xWTZ6J4EZkBT5a7H5cKMJyA6Ddqm
NZ2pOdMTBRlB2sIPH+Lwkd+hwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2UcyqA
IwflsjEfC9UzOJhUrxfpMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0
OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN
QllSV2pBWkt1QU5ES0hJNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArG8oHqawiOA/HVVJoYaVFj1l5c0pBByHHWXyycb9Es4u7YmaYdNFWvii0jWl
p/Sbn5QqepNfqOpoVQI6Ru/uIiWy7cX0UjM75dh8RbHe0aPOuVOAxxXOnH5Mu/n5
VrSNDjhjvf+SnHArS5QGXJ5GQynh0czNtGGuw63FFvN2/xKL5vZdhGR0z9Z1IVdk
Xaivn52WZdiWmi5anCVdD04y35XRUSKCBy83oX/2RUrpKD3UnEmGMsUiJwlNRFmz
RaCbCzy2VyGeTZbFHsYcDGz/GURqUKXMqAjI6vlM+f9Q6xHa+d9XK1zykLV2dExY
IEguxXORiLRn4IT2Kfa1nnOv4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:25 2026 by rpki-client