
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier: Rz+xJ9zTPuT/t7sfWeGCGIcoY4vupcNfcekTpcsnnbM=
Subject key identifier: 7F:6F:C9:47:FB:8E:60:65:FA:D7:A0:59:CA:77:3C:20:F5:82:C4:5F
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number: 01EE
Signing time: Thu 16 Apr 2026 15:24:55 +0000
Manifest this update: Thu 16 Apr 2026 15:24:54 +0000
Manifest next update: Thu 23 Apr 2026 15:24:54 +0000
Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: TsVP/hrKMOBdNOKEgVO7eC+8x+v4JLMQGF/SWbWg/xY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Apr 16 15:24:54 2026 GMT
Not After : Apr 23 15:24:54 2026 GMT
Subject: CN=69e0ff47-7a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:86:6b:bd:c0:bb:84:64:f4:16:00:a3:9e:
6f:7f:2a:ae:fc:a7:32:fa:b6:2b:86:cd:d0:33:99:
62:f3:df:63:a6:7c:31:b5:39:00:61:ac:d2:54:af:
4e:75:1a:ea:7c:02:5a:69:51:10:7e:47:c2:07:73:
c8:21:44:aa:10:a5:ea:f6:8b:b9:9d:82:66:24:49:
31:57:f0:6e:ef:a2:07:81:6f:39:18:88:04:68:58:
6d:71:e6:40:df:7e:8f:c1:bf:91:8d:d4:58:72:b6:
9a:91:97:0f:b9:65:1f:fe:68:a7:e3:43:d2:32:36:
d4:2c:9e:3e:0a:15:12:16:c2:7a:ce:23:fe:c4:69:
e5:ef:20:f1:cf:7d:9c:42:a5:25:ca:07:38:2b:01:
9b:cb:63:8d:19:17:f0:d9:23:e3:6f:44:82:80:4a:
1e:34:41:82:ad:b5:4a:f7:60:f9:18:8e:d9:12:62:
f2:b5:f1:98:76:5e:6e:80:16:09:c4:5a:fb:be:47:
d1:34:13:49:bf:1c:da:9b:a5:e3:3c:96:d1:14:32:
31:a1:b8:95:07:ce:0d:53:94:03:4b:40:06:48:9d:
4a:08:f0:8d:c4:f6:d9:c3:02:3e:21:55:8c:83:90:
46:a8:ec:34:17:24:0b:ea:93:37:0c:d4:e5:5c:8c:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6F:C9:47:FB:8E:60:65:FA:D7:A0:59:CA:77:3C:20:F5:82:C4:5F
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:63:78:27:cb:dc:3a:0e:d5:72:11:ff:47:dc:27:4c:cd:85:
30:28:01:c1:57:9e:4b:f1:82:62:47:0a:eb:42:d4:38:cd:66:
a0:8b:20:a3:f3:a0:dd:f3:ba:f4:ce:8a:b5:63:81:bb:3d:43:
8c:b7:2b:e5:62:5f:8b:d6:4d:fe:df:e0:ec:1d:4f:dd:90:a8:
b5:34:67:2b:fe:b1:79:d1:cf:3a:79:8d:31:3a:aa:9b:db:97:
33:0c:e1:04:1e:66:d7:ff:98:f0:25:15:b3:72:32:3c:12:01:
e3:bc:bb:30:b5:f8:1c:80:8b:01:9e:07:1d:a9:9e:92:fa:35:
0e:0f:b4:c3:10:50:2a:3f:87:7c:5d:a0:57:cf:58:24:45:79:
89:60:31:39:b3:a0:01:f2:04:86:5a:50:d2:e4:32:47:04:5b:
b4:41:72:e8:dc:4d:ec:6b:3f:a1:3f:e9:37:94:97:b0:31:69:
9d:98:a0:44:a7:61:e3:b4:07:7c:bc:99:88:79:77:6f:bb:fc:
fc:d2:55:90:05:d0:01:99:7a:65:9d:03:6f:f8:d8:24:ae:89:
30:9d:74:f0:18:d7:69:80:02:b8:45:81:b5:65:79:eb:2b:c5:
d0:22:9e:c9:be:eb:80:f6:70:16:fa:e6:e1:50:0f:42:14:fd:
f5:5d:9d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:11 2026 by rpki-client