
$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json)
Hash identifier: nKJhiC2/f2AsEAnFY8Wvb1ZqXHeM9cKH9W7E+dFJ5vw=
Subject key identifier: 38:B4:C7:3C:88:6A:33:63:24:BD:E5:5A:FF:3B:02:C1:C8:12:D7:21
Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Certificate serial: 0C06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
Manifest number: 0BEE
Signing time: Thu 16 Apr 2026 18:47:17 +0000
Manifest this update: Thu 16 Apr 2026 18:47:17 +0000
Manifest next update: Thu 23 Apr 2026 18:47:17 +0000
Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: TeO+tXZHV0+mfoZ6CGDQ+RnFfGry/VAof89C+nfkQZw=)
2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: t5BPrYt2d7moj5Igyw76SgGR8OK2DAEcIiFq4FzUOVE=)
3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: 9JumQFAgpUzEW74gFO5Z3fmZifxROGpVHgiZnhG6Tag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl
rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813
Validity
Not Before: Apr 16 18:47:17 2026 GMT
Not After : Apr 23 18:47:17 2026 GMT
Subject: CN=69e12eb5-c9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:db:d5:49:85:ab:6e:09:c4:2b:84:63:23:
be:de:9d:31:ff:6a:bf:ed:3e:f7:ff:72:71:32:a3:
3b:a7:2c:35:13:ee:18:c2:e7:d8:e4:c6:39:81:d4:
eb:4c:4b:9d:1c:16:ff:1a:7a:be:5b:4b:1f:23:9b:
0b:b0:24:8a:d4:34:9b:ec:46:d0:a2:ff:c7:ac:8d:
cd:5b:99:9e:42:9b:3c:c4:b0:d5:56:71:ad:f0:56:
51:9e:2d:0b:ad:c4:db:0c:09:a8:7e:49:f3:b6:0e:
ac:86:00:3d:c2:41:a2:18:b9:87:cb:4f:c4:56:e8:
99:7c:89:34:03:47:0b:96:44:48:0c:71:20:0e:ac:
37:68:59:5d:10:50:fa:d7:38:2b:1f:07:88:c0:49:
ae:e7:77:ea:ae:d3:43:eb:b4:36:38:c5:d5:61:6b:
3a:17:bd:2c:ac:35:bc:d1:4f:29:17:7a:7d:0b:9b:
2d:18:ab:2f:24:ec:b5:13:cf:f9:6e:1a:0a:91:7a:
44:d2:e9:81:7d:e2:46:25:2f:1f:60:4a:22:7b:ad:
ac:e0:7a:46:af:a8:33:48:4a:a4:bd:28:c2:0b:2f:
27:5a:c5:1f:6d:b8:48:08:67:88:eb:43:40:a8:e9:
c5:98:d5:40:36:42:ed:fd:8a:46:fe:3c:d0:04:1c:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B4:C7:3C:88:6A:33:63:24:BD:E5:5A:FF:3B:02:C1:C8:12:D7:21
X509v3 Authority Key Identifier:
keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:98:3b:4d:10:1c:ce:71:d4:17:f5:66:f1:d2:9e:60:2f:31:
c8:2e:a7:1c:28:81:da:f3:a0:7d:68:bf:92:32:2a:b5:37:73:
c3:d0:ee:82:eb:80:bf:ec:93:b3:ba:22:93:f5:90:4b:77:2f:
23:54:ba:c3:a6:4d:71:6e:b4:3f:e5:06:59:58:20:d3:10:4a:
81:68:a1:8c:6b:51:86:1a:ff:bd:da:a7:af:77:76:1c:a1:4c:
ae:05:3c:e1:1f:ad:3f:a1:5a:a7:2f:50:01:1d:6f:1a:14:56:
dc:f1:70:81:d9:d6:60:52:58:d9:b5:b6:0a:fa:dc:a1:a7:b0:
56:ea:5e:29:2e:3e:15:86:0c:42:72:e6:90:04:30:f4:78:36:
1b:21:f1:c3:7f:7f:00:85:76:3d:6f:6e:09:3b:8d:8c:38:0c:
f4:1c:59:b7:c4:47:64:06:5c:6c:5c:bc:05:b4:ec:2f:d7:df:
31:3b:e2:92:a0:83:94:e0:a3:cb:a9:3f:3f:7c:9c:49:6f:ac:
ef:af:2c:90:97:5a:af:2f:0c:dc:38:e8:49:f7:6f:19:8b:c7:
9d:79:ea:66:69:69:ef:0e:a6:5a:41:13:39:c6:98:0e:32:7e:
a0:6e:39:01:c3:61:66:0e:6c:1a:35:57:11:4a:72:c0:71:e8:
7f:81:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:21 2026 by rpki-client