
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier: SEYcKXRfJuCgKS2KVeBXEu8Vt7pZYhCGpmtOY3SlvmM=
Subject key identifier: C2:39:60:D0:C4:F7:F6:ED:42:20:43:63:2A:7C:08:CC:11:1D:47:2C
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial: 35F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number: 35B6
Signing time: Sat 26 Sep 2026 14:32:03 +0000
Manifest this update: Sat 26 Sep 2026 14:32:02 +0000
Manifest next update: Sat 03 Oct 2026 14:32:02 +0000
Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: txSArxnhh2MKaTV2MIhYMBeOiPXwry+VIXYMhE7K2jk=)
2: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: f/l+0wIw7kv3dSSRVcqGdg+Drb1QQ3/kIL6awWVju0M=)
3: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: pEr2wO5ZAQqRLVAqVCe90KJfFg9AIXlsq7twE8fo5s4=)
4: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: 1zoP69z7AM4GmJ1JESdD7kT2K9RUzllL5ylzBKqZ7sw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13808 (0x35f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Validity
Not Before: Sep 26 14:32:02 2026 GMT
Not After : Oct 3 14:32:02 2026 GMT
Subject: CN=6ab7d763-c2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:09:40:ad:54:26:e9:b2:dd:69:db:72:e7:
c4:e0:8e:5f:a5:03:94:2f:97:77:f6:38:3a:f7:24:
57:51:d0:b0:d1:cb:8f:09:14:10:76:8b:c9:c0:58:
20:a1:ac:2c:28:8d:9e:ae:6f:82:b4:e0:c8:35:54:
18:a7:2a:9d:fd:f6:11:59:bd:8a:6b:9f:e9:ab:ce:
a1:d6:fc:13:0b:66:ed:61:dd:4f:20:79:35:ab:24:
c3:48:6a:fd:92:23:95:28:a1:f8:66:ee:bf:55:83:
f3:c4:02:87:b6:ed:6f:bc:50:6a:e8:d3:28:ec:d7:
70:0d:3e:ee:dd:b5:78:24:dc:80:c9:64:e1:b7:95:
b4:0f:ab:87:6b:a4:29:7a:1f:44:16:64:db:d3:4a:
4a:b8:ab:f3:75:03:63:6d:d9:62:87:d1:41:cd:ca:
26:58:aa:dc:33:aa:ec:52:76:0d:eb:50:34:36:35:
de:00:47:7f:72:88:d0:24:e1:1a:65:43:a7:4f:1c:
dd:15:da:2d:fd:69:2f:67:3b:96:91:75:93:d3:87:
7b:0c:fb:16:6d:fe:34:b6:35:ab:d8:d9:f3:2f:37:
a3:5f:11:32:80:94:d4:d3:e8:1f:93:96:4b:27:b8:
a3:00:d0:fa:6b:59:bc:f4:95:81:b0:52:81:6e:75:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:39:60:D0:C4:F7:F6:ED:42:20:43:63:2A:7C:08:CC:11:1D:47:2C
X509v3 Authority Key Identifier:
keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:10:af:a0:4e:75:85:9d:88:8a:d8:70:25:6e:b7:a8:90:b6:
de:a7:41:a5:af:bf:a2:80:7c:e9:66:ee:b4:f0:d9:90:27:c5:
8f:3b:9a:cb:ec:42:78:0b:5b:cb:fb:fd:d8:00:94:d3:e9:0d:
be:f3:41:40:35:14:1d:18:d7:b0:48:9b:f4:6c:78:f1:d9:f7:
a9:f6:b5:f3:62:36:ef:06:a7:3e:8d:25:97:35:22:0b:02:52:
9f:1a:24:71:74:c2:01:d9:30:52:fa:96:0f:dc:e2:a4:5d:dd:
cc:0c:66:d9:03:19:21:77:1d:b7:31:61:22:4f:72:e7:2e:89:
2c:28:2b:96:b3:fd:0c:33:08:e3:6b:ed:6e:f6:b0:19:d5:ad:
6c:71:d7:04:1b:1d:1d:b1:4e:d3:be:c8:f5:63:68:0a:b1:a5:
49:0a:55:bd:0d:51:7a:7b:97:5c:b7:ee:6d:be:c1:a7:09:95:
ad:32:08:09:28:5d:8f:44:06:89:ff:cc:a9:13:48:df:c4:11:
cb:64:1d:50:c7:ec:d8:c2:ba:f3:80:fd:26:43:e3:c0:8b:f9:
dc:60:99:51:69:ce:03:5a:92:1a:b0:23:6d:72:40:09:6d:21:
b5:cb:0e:f5:7a:91:b5:c0:a7:4e:06:6b:f2:61:7d:18:92:1d:
e4:1d:bf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:44:22 2026 by rpki-client