
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier: PslasAjw+K4MiM5Lccdty3h7TCxfooollSbJZ7dfV64=
Subject key identifier: BF:07:5B:58:79:E2:2D:9C:EF:D6:B5:EE:37:B6:C0:83:F2:A2:2C:EA
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number: F2
Signing time: Wed 15 Apr 2026 05:54:39 +0000
Manifest this update: Wed 15 Apr 2026 05:54:38 +0000
Manifest next update: Wed 22 Apr 2026 05:54:38 +0000
Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: /fUS8YoQ0ZSXpMCs7cweKMa6/u5BHszOXwuM+EAj3E4=)
2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 05:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Validity
Not Before: Apr 15 05:54:38 2026 GMT
Not After : Apr 22 05:54:38 2026 GMT
Subject: CN=69df281f-8b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:a0:60:84:d5:55:c9:f1:78:d9:46:de:1b:
46:64:c0:98:76:6f:07:91:0d:9b:ee:8a:e3:8a:cd:
30:1d:7f:0f:31:3b:40:84:b1:63:9a:3c:2b:bd:15:
d2:93:2a:f0:d9:6b:5b:c7:43:7f:fe:92:f1:f0:e7:
25:7c:a1:12:1a:1e:31:65:40:80:42:c7:b8:fd:e6:
22:d7:3e:4d:10:a3:9c:72:a8:52:b6:79:d6:44:8c:
b9:85:b8:a2:d9:7d:3b:4b:50:88:35:06:ed:22:2e:
05:a0:0c:46:05:79:8f:6a:45:4a:60:35:05:08:88:
92:79:9f:b9:3a:62:e2:d9:85:8b:88:d3:27:be:2b:
ed:6d:59:05:22:60:ac:4f:0b:44:0c:10:4b:a7:85:
d5:84:0b:cf:a7:4c:44:f8:a0:91:3e:ce:7d:de:c9:
a0:cd:29:d7:4f:43:a0:a4:21:9e:6b:ef:12:e6:c0:
88:2d:d0:0b:cb:17:88:45:ae:f1:c0:b0:0c:8a:3d:
1e:38:4c:52:8d:5c:4a:5b:39:8d:b9:15:c6:e4:70:
75:0c:56:e9:24:51:cf:7d:0f:4a:19:86:cc:aa:a9:
cb:5c:d2:2a:f2:9a:96:94:8c:99:23:f2:f7:28:43:
ab:bd:ea:f2:c7:94:ed:a4:b3:5b:a4:00:98:17:bc:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:5B:58:79:E2:2D:9C:EF:D6:B5:EE:37:B6:C0:83:F2:A2:2C:EA
X509v3 Authority Key Identifier:
keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:d6:b5:3d:c0:8a:4d:00:35:2d:cb:20:5e:1e:63:e0:97:cf:
f7:4a:94:1b:ad:f3:53:c6:86:98:7b:99:4e:fa:b9:d6:c3:3a:
d9:6e:f6:47:43:8c:87:a4:71:f1:48:e0:fa:f3:e0:50:20:8c:
86:14:ee:8d:f4:dc:f3:cf:bf:15:63:c7:a8:41:81:fd:0a:1a:
b6:26:e1:55:d8:62:f0:8a:3a:cc:73:2d:4c:b3:0f:11:00:2f:
da:6e:42:6e:11:aa:25:9d:fc:12:04:02:2e:8b:22:47:b4:45:
81:2d:35:ce:9f:47:1c:c6:2b:d3:48:fd:43:31:e2:8a:84:2a:
56:1c:33:e2:b0:97:8d:b2:6f:77:92:b1:0a:fc:28:2b:7d:8f:
9a:bf:ab:77:c2:70:9d:a2:be:96:78:ae:d2:60:8c:d5:3c:49:
b4:86:6b:07:2b:6a:bb:4e:d8:42:34:15:66:80:92:3e:a3:d6:
94:40:d4:74:63:51:1b:36:b5:05:64:00:52:aa:60:a4:fc:f1:
92:ec:0c:58:4e:d5:56:54:a1:83:dd:52:ce:8c:7b:98:ed:22:
7d:a3:ec:6e:e2:49:89:0e:8e:6c:9a:cb:3c:00:15:6b:6a:c8:
e4:1c:bd:73:20:f2:d5:22:10:dc:8b:18:70:e3:95:87:74:84:
28:d8:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:05 2026 by rpki-client