
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File: EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier: DGky661rrIy+9oUZengSCvSzdJqZkUabfmJp8GDEkxc=
Subject key identifier: 34:59:F9:A6:35:C4:14:0D:6A:F8:63:8F:D2:73:8D:5A:A4:38:96:29
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number: 0185
Signing time: Sun 01 Mar 2026 05:45:04 +0000
Manifest this update: Sun 01 Mar 2026 05:45:04 +0000
Manifest next update: Sun 08 Mar 2026 05:45:04 +0000
Files and hashes: 1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: 0L+rRhMQjlwBlKycr/Rh/Ql5Z1kUGn/lpVph1luHyN0=)
2: 235D2836A1F111F084328A39C4F9AE02.roa (hash: bnkVNhU6o5rwwfFx9zgMXEGJHB9u5Plk3LVxSdWMAa0=)
3: 229253A4A1F111F084328A39C4F9AE02.roa (hash: S2OGi1wUST6aH/yqjhUOxU4wsu1S9AAnnNOgdjDA6+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Validity
Not Before: Mar 1 05:45:04 2026 GMT
Not After : Mar 8 05:45:04 2026 GMT
Subject: CN=69a3d260-5eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:33:46:1d:7a:1a:51:8d:98:ab:de:cd:fe:
6b:3d:1b:40:67:7e:75:ef:a4:06:07:14:19:87:7b:
66:87:c7:ea:98:67:0b:d4:69:5c:2b:6e:3a:94:3f:
f3:2d:10:40:9e:73:59:7a:60:0d:0e:f4:c9:86:cd:
89:98:08:af:9e:63:49:02:5d:be:fd:8d:a8:7f:51:
18:b6:c9:34:c9:7e:b8:ab:9a:e8:1c:b5:49:a2:0c:
af:01:01:c5:b8:0b:94:8f:1b:4b:ed:e8:f2:f2:04:
f4:d3:a4:72:78:93:35:10:3f:2d:56:98:6e:22:4a:
f1:b2:a2:66:96:aa:a0:72:65:9a:00:d8:38:85:e8:
60:ee:04:ad:40:2a:dd:2b:2e:ed:92:a0:ed:29:b1:
01:97:82:bf:2e:b9:e2:9c:23:5d:7c:64:ce:47:d9:
77:f0:5e:49:89:36:ed:0e:63:62:81:19:d1:1b:cc:
67:ed:b1:4a:92:24:7b:72:e4:e5:56:28:4c:d2:0f:
79:b2:5a:88:f1:54:ea:57:05:a6:9d:d9:a0:f0:af:
fd:fd:34:46:de:fb:97:b3:f7:54:ea:0b:0c:57:ef:
9d:b5:14:19:6c:50:dc:30:ba:66:0f:da:31:c0:52:
35:ab:e2:78:d5:7e:46:59:d2:b4:7e:56:6b:37:50:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:59:F9:A6:35:C4:14:0D:6A:F8:63:8F:D2:73:8D:5A:A4:38:96:29
X509v3 Authority Key Identifier:
keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:d5:f9:86:a5:7e:9a:eb:fb:2f:7d:a3:7e:de:07:24:24:
fd:21:76:4e:6d:ce:3c:71:73:91:da:28:56:55:29:25:dd:26:
10:d2:de:03:fd:56:1a:4e:d8:70:c1:04:9c:1f:ed:5a:87:e2:
d7:4a:cb:41:88:f9:3e:ac:7f:fa:2d:14:ab:4e:d2:d2:24:68:
09:85:21:e1:87:17:01:57:dc:87:4c:98:9d:ca:ae:94:04:23:
35:f2:2d:94:42:55:bc:36:56:24:c8:12:20:31:91:74:3c:20:
c3:2f:d4:2f:04:0a:1e:b6:e8:5f:ad:94:9d:0a:85:b6:3c:4a:
98:9c:d0:3a:e0:6a:27:86:19:75:e0:c7:bc:17:ea:3b:1c:26:
f1:a4:2b:70:55:a7:7c:ac:7c:08:ac:62:4e:97:a0:6b:90:c8:
15:a8:18:39:02:fd:09:99:fa:d1:19:22:eb:6e:38:98:98:e1:
33:38:be:e5:06:18:ec:f6:d9:66:38:e6:6f:31:e6:21:b6:9e:
c5:9d:6a:25:3a:1d:17:70:07:b2:26:0e:3e:50:d9:53:f4:5e:
ff:64:f0:c1:39:a6:a6:5a:65:b6:02:4c:75:1e:8a:77:0c:f1:
6b:e8:66:10:e3:2a:b3:b5:02:48:c5:fa:57:29:b8:db:bc:01:
4f:36:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:15 2026 by rpki-client