
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier: LjcF9vWpBIywO0z7BwWx1lJwLKZP65jFWp2F+SxdMe4=
Subject key identifier: 7C:0D:6B:89:ED:AA:9D:BB:24:02:77:3D:1B:06:4F:8D:47:A1:6C:37
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial: 04F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number: 04E9
Signing time: Sat 04 Apr 2026 23:32:23 +0000
Manifest this update: Sat 04 Apr 2026 23:32:23 +0000
Manifest next update: Sat 11 Apr 2026 23:32:23 +0000
Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: ejLgWVTYiE1Aiocb9PmQemS6NJKD0ANRkPPGwz2bDhU=)
2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: cud5ZYppqVgYBIjkpiC3yJU+yvRz4SnHLnsmET8Y4GA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Validity
Not Before: Apr 4 23:32:23 2026 GMT
Not After : Apr 11 23:32:23 2026 GMT
Subject: CN=69d19f87-0961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:1a:46:51:d6:1a:a9:ef:5f:5c:51:19:9f:
09:bb:e3:4b:96:b5:9a:dd:57:2e:83:6c:58:73:ea:
32:25:b5:e6:9c:1d:6d:12:46:c4:30:e4:69:d0:29:
83:dc:ff:ed:20:49:7b:74:b7:61:bb:45:38:dc:3c:
dd:46:8a:cf:8c:cc:fe:1a:34:71:0b:e6:a0:d0:b0:
09:cc:1c:03:fa:43:2f:b3:32:d6:ab:fa:96:2e:80:
59:7e:b7:ee:7a:bf:c9:74:fe:35:2e:f7:6e:53:1b:
79:b7:2e:99:af:d1:95:d7:8e:ef:91:1e:2b:7c:50:
8e:35:b7:23:09:4c:82:1a:3c:5b:ba:92:d7:39:39:
e4:92:4a:ae:d3:2f:37:54:ed:f9:45:ca:8f:3b:3b:
71:88:d8:c4:83:c5:73:4b:c5:ce:9d:f4:e4:95:c4:
44:4c:37:c2:6f:79:45:b5:a0:0d:26:f5:bd:91:0d:
9f:67:ce:b7:84:44:ea:52:94:85:05:6d:9e:1b:77:
ab:85:41:e6:74:2c:d8:01:1a:ab:10:f1:4c:2e:f4:
8f:bc:0a:b4:dd:cc:09:d3:4d:f9:ba:b7:58:54:0e:
53:84:15:98:08:5e:0a:5f:7d:29:7c:a6:5c:5c:9c:
94:a4:18:7f:f3:8d:01:3e:58:92:40:ba:60:61:08:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0D:6B:89:ED:AA:9D:BB:24:02:77:3D:1B:06:4F:8D:47:A1:6C:37
X509v3 Authority Key Identifier:
keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:fe:7b:a8:ee:77:f5:94:3e:ee:73:ed:d5:d6:49:5f:5c:
27:f2:4d:fa:ef:1b:40:7d:6c:9d:fa:eb:14:3c:b6:e6:0a:02:
d8:d2:43:6a:4b:01:bd:fd:61:5b:63:18:28:54:2a:66:72:0f:
4b:de:10:15:64:42:00:d9:11:e3:0a:d0:f3:70:a5:2c:8a:3d:
9d:f3:dd:25:0f:15:6b:c5:95:8e:3b:60:26:d2:57:6c:c0:e0:
0f:fd:61:c6:df:99:63:59:7b:d9:23:e1:5e:d1:e4:b4:a7:6d:
92:d2:3b:7e:92:d1:5d:70:0d:68:14:8b:62:47:e9:42:16:11:
1b:ec:a0:f1:ab:a2:78:23:e3:78:6b:4d:00:6f:c9:a2:9f:52:
9e:12:08:b5:7b:81:fd:12:76:40:18:14:96:88:3c:e8:87:4b:
c2:bc:78:b7:75:0a:02:83:d2:cf:8f:c2:ce:a5:8c:27:46:a7:
a8:c1:5c:d2:ba:88:39:04:90:a3:74:52:3c:46:af:37:07:7a:
c1:b3:0a:66:87:e2:93:0b:aa:37:31:39:cd:b7:de:85:4e:83:
4f:91:44:ce:5d:15:e8:ed:70:b8:9d:d4:12:97:c7:af:20:3e:
7c:2c:51:a7:f7:b9:99:0d:9a:06:d2:08:fb:f8:4e:10:d6:18:
15:95:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:19 2026 by rpki-client