
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
File: eErjDFQTMvpDt1Y83AGwLtG9nFA.mft (raw, json)
Hash identifier: rGiu2JirlitAzW04n9d04uu2+8SKteKp78MbMJYQt0E=
Subject key identifier: 35:0B:0C:0F:35:3C:DE:9F:EA:73:F0:19:B7:D4:2B:F6:5C:FF:ED:FF
Authority key identifier: 78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
Certificate issuer: /CN=A916BCBA/serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
Manifest number: 23
Signing time: Sun 01 Mar 2026 10:18:58 +0000
Manifest this update: Sun 01 Mar 2026 10:18:58 +0000
Manifest next update: Sun 08 Mar 2026 10:18:58 +0000
Files and hashes: 1: eErjDFQTMvpDt1Y83AGwLtG9nFA.crl (hash: 4fI+yWOZ2Pfm37HBy407ZI0UdgisGQ/bDFe/qbo5vsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCBA, serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Validity
Not Before: Mar 1 10:18:58 2026 GMT
Not After : Mar 8 10:18:58 2026 GMT
Subject: CN=69a41292-853a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:de:a6:03:71:ef:f7:1c:21:3f:52:4f:1b:
83:5f:bd:77:ba:2f:dc:aa:cf:3d:02:7e:ca:ac:14:
0b:e8:a3:c4:8f:15:74:d2:b1:88:4b:0f:41:b0:f6:
bb:21:e3:1f:fd:ce:13:96:c5:56:4a:73:f2:98:1c:
3d:89:fa:ed:42:b7:25:4b:13:f6:d2:f1:bb:8a:47:
c0:b2:9c:44:5b:b3:62:ba:b8:fd:6b:c7:b5:b6:fb:
b8:70:09:3b:40:c4:82:65:9e:c1:27:5b:42:d9:1e:
9b:bc:09:c2:f9:3d:ff:cd:75:4c:f7:f4:83:ab:a9:
d6:49:f1:95:66:eb:ff:96:f4:ec:0c:56:05:f1:01:
cb:80:ba:65:8b:17:8a:88:84:32:39:7b:8f:39:a2:
6f:31:14:c6:8a:f6:16:e6:a0:80:44:a2:44:37:30:
99:b7:09:89:a1:bc:04:54:e3:1c:ec:5c:60:41:04:
98:70:28:ad:77:c1:09:c2:52:19:73:fa:27:96:3f:
5a:ad:dd:7f:02:ae:2b:8c:a6:fd:fa:8d:6d:b3:ed:
0d:39:ba:a5:8e:dd:07:dc:63:f8:c5:02:94:72:e2:
9f:fc:78:3d:fe:02:1a:cf:18:e7:d0:e7:bb:16:f9:
6f:be:e4:62:2d:ae:ab:1b:3e:eb:45:6c:94:60:a3:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:0C:0F:35:3C:DE:9F:EA:73:F0:19:B7:D4:2B:F6:5C:FF:ED:FF
X509v3 Authority Key Identifier:
keyid:78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:12:6f:36:7e:2b:68:69:ae:3a:31:7a:11:89:a0:dc:d1:76:
0f:68:32:7b:3f:0e:10:88:60:de:60:ac:c6:7a:df:bf:30:4d:
44:60:53:29:2c:d6:79:eb:65:dc:6c:60:c7:48:89:d8:51:b4:
27:66:fe:75:d9:2d:59:50:3e:9c:b0:e2:e7:e0:ef:f7:f9:4f:
6f:9f:e9:05:67:07:ab:22:74:9e:5c:29:e2:4e:9e:51:4b:93:
bb:a0:63:d0:e4:a6:00:06:21:e9:12:af:82:c2:30:07:d6:e1:
74:3d:d4:83:99:47:88:6a:16:0e:25:3a:56:de:4b:14:bf:51:
af:7c:8a:ce:7e:33:d8:d3:54:29:1e:f4:b2:47:11:4b:0a:98:
1d:a6:f4:a6:24:1f:5f:4c:36:f4:bd:3e:5a:a8:be:a4:ae:4f:
97:e1:ba:2a:fa:e5:a9:18:b1:43:55:1b:e8:75:cd:50:77:7d:
59:d2:b4:a1:32:34:59:02:bf:ce:b5:b0:97:0a:d2:65:46:7f:
a4:1e:e6:3a:5b:c4:46:b0:51:17:f7:69:d7:76:a9:b5:4d:10:
af:52:25:5d:f5:33:ba:f8:75:d3:23:dc:65:98:23:a2:31:53:
f8:bd:af:a4:1f:83:df:d8:20:c6:60:33:11:0c:51:bd:d6:ba:
69:2b:55:fd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QkNCQTExMC8GA1UEBRMoNzg0QUUzMEM1NDEzMzJGQTQzQjc1NjNDREMwMUIwMkVE
MUJEOUM1MDAeFw0yNjAzMDExMDE4NThaFw0yNjAzMDgxMDE4NThaMBgxFjAUBgNV
BAMTDTY5YTQxMjkyLTg1M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOTN6mA3Hv9xwhP1JPG4NfvXe6L9yqzz0CfsqsFAvoo8SPFXTSsYhLD0Gw9rsh
4x/9zhOWxVZKc/KYHD2J+u1CtyVLE/bS8buKR8CynERbs2K6uP1rx7W2+7hwCTtA
xIJlnsEnW0LZHpu8CcL5Pf/NdUz39IOrqdZJ8ZVm6/+W9OwMVgXxAcuAumWLF4qI
hDI5e485om8xFMaK9hbmoIBEokQ3MJm3CYmhvARU4xzsXGBBBJhwKK13wQnCUhlz
+ieWP1qt3X8CriuMpv36jW2z7Q05uqWO3QfcY/jFApRy4p/8eD3+AhrPGOfQ57sW
+W++5GItrqsbPutFbJRgo4XZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNQsMDzU8
3p/qc/AZt9Qr9lz/7f8wHwYDVR0jBBgwFoAUeErjDFQTMvpDt1Y83AGwLtG9nFAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCQ0JBLzNDOTI4REM2RTYy
QzExRjA5NzZBOTVGQjZGNkY1NkJDL2VFcmpERlFUTXZwRHQxWTgzQUd3THRHOW5G
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZUVyakRGUVRNdnBEdDFZODNBR3dMdEc5bkZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC
Q0JBLzNDOTI4REM2RTYyQzExRjA5NzZBOTVGQjZGNkY1NkJDL2VFcmpERlFUTXZw
RHQxWTgzQUd3THRHOW5GQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAyEm82fitoaa46MXoRiaDc0XYPaDJ7Pw4QiGDeYKzGet+/ME1EYFMpLNZ562Xc
bGDHSInYUbQnZv512S1ZUD6csOLn4O/3+U9vn+kFZwerInSeXCniTp5RS5O7oGPQ
5KYABiHpEq+CwjAH1uF0PdSDmUeIahYOJTpW3ksUv1GvfIrOfjPY01QpHvSyRxFL
CpgdpvSmJB9fTDb0vT5aqL6krk+X4boq+uWpGLFDVRvodc1Qd31Z0rShMjRZAr/O
tbCXCtJlRn+kHuY6W8RGsFEX92nXdqm1TRCvUiVd9TO6+HXTI9xlmCOiMVP4va+k
H4Pf2CDGYDMRDFG91rppK1X9
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:03 2026 by rpki-client