
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json)
Hash identifier: M8IGUWNrwnk6nVERZoqfZrCoSyptENNYXtW+BOO/WHo=
Subject key identifier: 6D:24:BE:26:B1:5C:70:CF:F6:C7:B4:5E:4B:9D:36:2A:0B:07:AC:B0
Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44
Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
Manifest number: 0264
Signing time: Sun 01 Mar 2026 02:41:23 +0000
Manifest this update: Sun 01 Mar 2026 02:41:22 +0000
Manifest next update: Sun 08 Mar 2026 02:41:22 +0000
Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: 8n+VQg1KqjzTz5UBTZ2FiFURQZpFiAYiQUYyQOi9i6Y=)
2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: j+WiIpQXx8bOOXda/N2C9r1k53EnBU4V+zrlR0ZwoY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl
rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544
Validity
Not Before: Mar 1 02:41:22 2026 GMT
Not After : Mar 8 02:41:22 2026 GMT
Subject: CN=69a3a752-f36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:9d:3d:c7:8b:6e:e7:b1:f0:2d:af:33:91:
db:4d:d9:39:af:39:02:04:2e:47:96:49:ac:a4:18:
8f:ac:01:4a:d4:4e:4e:14:24:60:21:bd:c5:0f:12:
61:33:cd:f2:59:ef:98:80:69:35:f2:61:00:19:7b:
a5:e5:f5:35:88:6c:89:77:22:ef:4f:2e:9f:c4:ca:
0e:49:13:58:1e:da:41:f6:58:af:53:82:13:7f:b2:
c3:ec:6d:9d:4a:f3:b9:0b:93:07:45:88:eb:7f:ab:
0e:47:db:94:0d:c0:f2:72:32:f3:54:43:4c:f3:81:
ec:9a:f5:4a:38:55:11:07:ca:3e:09:12:c6:1b:79:
7b:87:fd:5a:aa:e0:f9:97:22:5c:da:25:50:0e:02:
a5:32:83:db:4a:aa:55:97:cb:93:21:66:8b:d7:c9:
fe:9a:f5:ab:5b:4c:11:1b:8a:3b:71:a8:23:9e:46:
2e:33:4d:42:b9:ec:d4:8d:5b:94:44:ed:44:4b:1e:
9a:58:df:46:28:8b:c8:f1:3e:9f:c9:10:ed:24:ea:
d3:da:2f:dc:55:7e:e5:5c:b3:ca:89:62:fb:28:e7:
f4:30:0e:72:52:9b:a8:c5:b5:dd:38:7e:1d:7a:ec:
e9:9d:66:89:0f:3a:10:a8:c2:67:88:6c:35:d6:f6:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:24:BE:26:B1:5C:70:CF:F6:C7:B4:5E:4B:9D:36:2A:0B:07:AC:B0
X509v3 Authority Key Identifier:
keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:4a:3a:c1:5a:ba:58:8c:44:ef:1e:fc:dc:cd:05:68:3a:dc:
77:71:62:cf:65:b3:30:23:74:d1:2f:7e:00:2a:52:57:ab:05:
7c:10:17:e3:81:62:16:b8:e7:61:44:ed:2c:50:fb:8e:7b:bd:
e9:dd:72:7c:3d:62:8b:57:83:bb:8a:66:e7:88:a5:25:7d:4c:
3c:47:a3:b2:1f:d4:4c:cf:34:f1:9c:73:47:44:0d:6d:a8:32:
14:3c:f3:22:3f:79:ea:b2:d6:41:06:0c:e3:b7:c2:24:2d:54:
a9:4e:6e:6f:7a:f2:d0:df:73:4b:dd:33:98:47:47:2d:9e:47:
1b:f0:da:ea:be:d0:f5:46:1d:e8:a7:78:16:3d:b8:a6:e4:d5:
8f:8a:16:2e:c0:86:11:b6:b9:46:b3:fc:66:d1:9f:41:71:21:
81:cd:9f:13:52:e6:4c:fd:23:38:20:92:e3:85:89:ac:ff:cf:
63:35:b8:56:37:56:e5:3a:77:84:5a:92:8f:c2:7c:35:93:70:
10:d6:30:90:84:b6:ca:d5:d4:00:c7:86:de:b8:d6:eb:35:e0:
f3:da:63:4f:5a:ee:d6:80:93:87:7a:7e:f3:d7:15:6b:19:83:
01:7f:f4:44:32:82:0e:d3:86:50:44:04:f7:0b:b1:46:28:0a:
2d:6a:f1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:59 2026 by rpki-client