
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier: TLA96jqrI/rkGLPGF9wG9TD/q6XWoeY9vBQ04yEMud4=
Subject key identifier: EF:76:E4:BD:DA:70:5A:67:E7:80:72:A4:43:6F:86:C9:63:3A:C9:E0
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number: FA
Signing time: Sun 01 Mar 2026 07:18:51 +0000
Manifest this update: Sun 01 Mar 2026 07:18:50 +0000
Manifest next update: Sun 08 Mar 2026 07:18:50 +0000
Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: NGd8Ip7rrnBTNbnCx+bem7lc0F5S0D+rXSevmP8SKPs=)
2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: AKBTFuYWF0QJYhEYy3kesNey7V4DUjbDl4ck/CpF7wE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Validity
Not Before: Mar 1 07:18:50 2026 GMT
Not After : Mar 8 07:18:50 2026 GMT
Subject: CN=69a3e85b-bf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:52:f1:45:c1:73:4e:33:fd:cb:dd:5c:45:
55:45:6f:20:5d:80:48:a7:f4:3c:06:26:a3:54:e0:
d8:42:a5:d1:5c:80:bf:e3:df:f3:33:43:81:1e:94:
c3:5e:75:f8:6c:53:7f:4b:21:d6:7a:a4:cb:3a:de:
72:62:66:3d:30:50:50:c1:e5:bf:b7:52:84:10:e7:
1f:da:58:93:28:40:8b:03:8b:85:ea:44:4b:fc:ea:
29:45:34:a7:5f:26:17:31:c2:99:9a:9f:da:3a:96:
62:68:a2:9f:a3:83:1a:09:5e:5b:55:1b:a8:df:5a:
f6:1e:9d:4f:a9:f3:77:7c:b2:8a:0e:a8:de:1d:4f:
9c:c3:0e:8e:d5:c4:dd:74:ca:54:d1:4c:c4:10:5c:
81:1f:9b:a2:2b:bc:78:b7:13:a7:5b:8a:1d:f1:61:
fd:27:d3:ec:d5:64:5f:1f:02:ce:fb:3e:49:76:78:
5f:7e:bd:40:02:b0:ab:98:d2:69:0b:84:9e:c6:e5:
fc:7b:0d:05:9d:3c:c6:d7:8a:01:c8:50:30:3a:c4:
54:37:3a:23:d3:7d:de:b1:95:d3:b5:e6:48:5b:5a:
28:79:1b:17:e0:53:11:ec:90:e5:e1:85:4f:ca:1c:
9a:ce:cf:3a:2a:c1:ec:73:5a:6f:af:6d:53:c4:ae:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:76:E4:BD:DA:70:5A:67:E7:80:72:A4:43:6F:86:C9:63:3A:C9:E0
X509v3 Authority Key Identifier:
keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:b1:ea:5f:40:dd:e9:d2:84:ef:66:c5:4d:ca:8f:3c:df:32:
25:77:e8:94:73:7e:fb:3b:4c:9e:2b:e3:7a:e8:06:a9:0e:41:
f9:74:6e:fb:60:dc:71:23:b6:a4:98:79:22:98:75:80:8a:cc:
6b:0c:3f:dc:5a:dc:10:87:75:8c:26:ff:33:30:c8:3d:3e:db:
1f:73:35:7a:df:cf:ec:36:e7:20:26:a5:ff:cd:41:a9:3f:b5:
f5:c9:b9:f9:93:54:8d:ae:ac:b8:df:4a:90:85:d3:57:cc:4c:
ca:8e:2f:ee:fe:d8:2e:52:d0:8c:cc:98:6e:9e:c6:18:5e:4a:
55:26:88:bf:7b:a5:02:e2:60:69:2b:ac:4b:8e:4c:ef:be:6c:
31:01:e4:4d:7d:9f:44:fd:67:1a:48:ed:ae:e0:b9:7f:1b:e2:
37:0a:82:81:68:00:9e:f9:8a:56:9d:77:ae:e4:c5:25:63:93:
be:24:78:f5:26:49:72:86:ff:f2:69:08:d6:ea:02:7b:47:cc:
34:54:41:9a:05:9a:5a:c3:1f:96:3a:d5:6e:fc:5b:35:3f:a8:
77:76:08:6b:75:4f:96:46:dc:78:25:9e:9f:5e:5f:a1:3e:03:
e4:c1:05:4f:87:c2:1b:19:67:0f:93:41:20:e0:d5:81:6f:6f:
e7:13:ea:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:28 2026 by rpki-client