
$ rpki-client -vvf rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
File: EU3kpq3-T6GGFcVHcV67T_WUbvY.mft (raw, json)
Hash identifier: uJRhdI2jZZClTVOJI3I6dhtACr2sUksqWSSkUu6OOAY=
Subject key identifier: 8A:A3:78:68:49:C3:62:D8:EE:E8:CE:A0:FC:9A:B4:CB:76:7C:B2:11
Authority key identifier: 11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6
Certificate issuer: /CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
Manifest number: 01DA
Signing time: Sun 01 Mar 2026 04:15:11 +0000
Manifest this update: Sun 01 Mar 2026 04:15:11 +0000
Manifest next update: Sun 08 Mar 2026 04:15:11 +0000
Files and hashes: 1: EU3kpq3-T6GGFcVHcV67T_WUbvY.crl (hash: PCaDitnbTbl7sgQgKDv0d1BXoaHGDP+n4bEm/UDwyHI=)
2: AA15C0AEE84311EE8683D32CC4F9AE02.roa (hash: gYHV3KOXPY5t1RxYeQj8LMR1j99M6/FvNYKxReKdcYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl
rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91530ED, serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6
Validity
Not Before: Mar 1 04:15:11 2026 GMT
Not After : Mar 8 04:15:11 2026 GMT
Subject: CN=69a3bd4f-9562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:8e:90:d0:bf:9b:44:99:e3:4a:9d:a2:6c:
94:ef:ba:6f:03:73:c2:fe:64:9f:10:90:94:87:76:
4d:ad:ce:63:ce:c2:8b:64:79:aa:ed:7e:80:ce:ab:
c7:86:e5:af:b8:95:b5:b6:cc:9a:ad:85:17:d4:69:
c3:1c:c0:12:02:cf:a5:21:f9:fa:30:d5:70:55:19:
4e:8f:09:c5:aa:ac:37:f8:a3:cf:16:20:4a:6e:7d:
c0:b0:15:6e:b0:df:2f:d2:2f:bd:10:17:2e:1a:6f:
63:91:32:f5:88:1e:0a:41:6a:37:47:45:df:37:3e:
f4:4d:e9:90:16:55:eb:32:cb:ad:be:09:51:d6:57:
2d:5d:9b:6e:c6:81:5a:d9:77:ad:92:f4:c8:37:58:
7b:b4:a7:7b:a2:f2:15:46:6f:47:dd:96:3a:fa:1f:
48:8f:66:4c:a5:a7:5a:3e:79:6b:f0:18:21:34:5c:
f8:d0:20:35:63:5a:c7:3a:5b:15:4b:2a:ab:da:28:
f0:86:65:4c:15:78:ba:db:f7:86:2c:d9:00:f0:20:
71:e5:ea:99:9f:9d:54:26:df:7b:c3:33:8b:f0:fe:
01:66:1f:f2:86:7f:d4:5e:08:69:3a:86:bb:a7:91:
82:5e:48:a3:34:94:71:09:f1:1f:61:fd:94:09:ea:
fb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:78:68:49:C3:62:D8:EE:E8:CE:A0:FC:9A:B4:CB:76:7C:B2:11
X509v3 Authority Key Identifier:
keyid:11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:2b:e2:56:46:40:8f:37:67:fa:87:a8:64:52:f1:8e:d7:1b:
64:87:c2:49:74:ee:91:fe:ac:06:f2:27:7b:2d:79:b4:9e:a6:
ea:19:c0:93:d2:5a:f5:2d:84:32:14:80:d6:b8:88:76:77:23:
69:66:3c:65:90:d7:b5:75:84:3a:11:c8:23:05:eb:72:37:03:
50:a0:46:85:5e:b3:0c:c8:b1:b4:9e:c2:aa:d0:e9:a4:e4:8e:
8e:9e:c5:0b:40:81:f1:73:49:af:21:0c:d1:cc:0d:1b:a6:46:
c3:84:5a:7f:f4:33:b5:03:0e:b0:53:b5:b6:10:f9:08:57:82:
50:59:a4:e9:ac:b0:f9:d2:2e:4f:70:03:fa:a2:fc:87:59:f0:
29:17:ca:9b:0f:8b:19:33:b1:a3:91:21:af:5b:00:96:92:be:
d5:16:bb:e5:77:5d:b0:b6:4b:5f:af:d2:5d:1d:c7:67:7b:ae:
66:a4:c4:e8:33:bd:97:ce:1c:17:cd:73:32:b2:9f:df:75:32:
6e:c8:ed:99:77:27:6b:2e:4e:bd:b6:ca:43:75:e2:9e:9a:94:
ce:c3:33:64:b8:da:b6:1b:df:92:49:a8:b5:2a:7d:34:36:9b:
b4:eb:66:25:cb:b1:f1:c0:0e:83:95:6f:c9:e6:83:44:4a:e9:
cd:f7:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:56 2026 by rpki-client