
$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json)
Hash identifier: JXkZAY6vZQr7hUjDVUMqWNV3Z7e4HxUNDupsjXRwj+k=
Subject key identifier: 35:2E:1A:AF:EF:6B:38:AA:7D:D4:56:4D:D4:E8:9F:14:EF:5A:22:99
Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Certificate serial: 027C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
Manifest number: 0276
Signing time: Sun 01 Mar 2026 02:29:21 +0000
Manifest this update: Sun 01 Mar 2026 02:29:21 +0000
Manifest next update: Sun 08 Mar 2026 02:29:21 +0000
Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: JOgq7CKX2aH4FyNRQ+1QwiF/LOycAfPx1bukKTXu4Dc=)
2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: UfOYe6RywBqkEJraeZHWTOUfrLHgXDOJgx5fH4IP4aM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Validity
Not Before: Mar 1 02:29:21 2026 GMT
Not After : Mar 8 02:29:21 2026 GMT
Subject: CN=69a3a481-dfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:14:e7:25:a3:67:02:c2:59:87:c9:40:16:
fd:c0:ab:a5:0b:ba:33:65:ad:88:0c:f4:3b:67:07:
de:c7:7d:6a:6e:8a:3a:90:4e:87:d2:e2:ab:98:c3:
5f:11:60:97:6c:82:67:1c:db:c2:5a:6a:86:51:f8:
f0:6d:a5:43:38:a9:ad:85:e1:7f:47:72:2c:af:b4:
7b:e3:de:c2:7f:ad:31:f0:da:65:cf:2c:11:61:4c:
69:a5:99:dc:6d:60:a7:c5:35:43:2c:e5:f5:ff:62:
e6:de:d6:90:b4:5b:d5:c6:59:b8:ca:8e:7a:9f:cb:
0e:31:4c:5f:47:9b:3c:d7:c2:a6:7b:5a:a1:29:20:
3c:63:ca:ed:c8:38:5b:fe:f8:f2:6e:aa:9f:c7:1b:
3e:49:bc:8e:22:a0:09:ee:e1:0d:2e:fe:a3:6e:af:
2a:b6:de:5e:c2:21:28:42:fa:0b:ce:e9:7d:37:a5:
84:0d:bd:6e:53:ec:e0:de:19:70:66:b3:ca:7e:63:
17:68:b7:4e:ef:6f:60:1e:a9:4e:4a:0e:d7:8d:1c:
d1:49:d7:d2:22:e7:ec:83:0a:32:f6:d0:d5:f9:7b:
ea:04:f0:bf:c1:38:c1:e0:ef:70:54:33:a1:9a:b6:
d0:a9:ce:f4:d9:86:2e:55:86:9b:bf:d7:d7:37:25:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:1A:AF:EF:6B:38:AA:7D:D4:56:4D:D4:E8:9F:14:EF:5A:22:99
X509v3 Authority Key Identifier:
keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:ce:01:81:33:56:05:2c:0e:c2:96:67:bd:b0:5d:c8:c5:70:
4e:71:ed:1c:dc:ed:51:e7:fd:1b:19:e1:51:64:19:b7:b6:90:
c1:0a:b9:e7:5a:87:52:48:15:7d:b8:4b:fc:12:22:45:4b:9e:
6a:58:eb:fe:99:83:b1:e5:7d:2d:b0:51:cc:bf:82:98:96:1d:
8b:9a:65:6a:3c:a1:25:8c:79:25:1b:2c:73:20:08:ca:0f:8c:
19:ad:c5:78:70:41:51:1e:da:c1:b6:5f:bb:30:2b:eb:11:82:
94:46:d2:96:6e:44:c2:9e:77:31:6f:dd:c4:f5:51:b3:1f:4b:
4f:0e:42:16:01:d5:30:58:16:c8:df:a0:8e:b4:88:b9:94:02:
ff:44:3f:45:99:26:0f:92:5a:44:3a:83:b9:2b:23:20:16:1c:
b1:f7:06:d5:8e:c4:77:4e:89:60:5b:74:04:ab:aa:88:d9:b7:
d2:ad:2a:2d:13:a7:64:fe:3e:ac:42:c8:29:f5:c8:2f:ff:52:
17:ce:44:05:b2:0a:25:d2:26:1a:72:74:f3:48:5a:1b:8e:6b:
19:d7:38:29:90:ba:53:63:f4:56:03:8f:de:63:a7:2d:a5:c8:
3a:05:44:7c:08:44:ac:76:81:8a:79:d7:19:77:e0:33:0e:cd:
8d:7a:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:00 2026 by rpki-client