
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier: +rFpjZ1Viu2A7oY5plQo1L7Gyl4fKWY1KyhoCIk23kw=
Subject key identifier: C4:8C:FA:C3:E8:33:56:88:09:5D:D2:CE:98:D2:A5:E6:E3:B5:A3:86
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial: 3600
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number: 35C6
Signing time: Wed 28 Oct 2026 14:32:22 +0000
Manifest this update: Wed 28 Oct 2026 14:32:22 +0000
Manifest next update: Wed 04 Nov 2026 14:32:22 +0000
Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: 3iiJilqjn6RoHDN7pl1TdrTxESkZM4oxHA4yqjK2s70=)
2: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: f/l+0wIw7kv3dSSRVcqGdg+Drb1QQ3/kIL6awWVju0M=)
3: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: pEr2wO5ZAQqRLVAqVCe90KJfFg9AIXlsq7twE8fo5s4=)
4: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: 1zoP69z7AM4GmJ1JESdD7kT2K9RUzllL5ylzBKqZ7sw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 14:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13824 (0x3600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Validity
Not Before: Oct 28 14:32:22 2026 GMT
Not After : Nov 4 14:32:22 2026 GMT
Subject: CN=6ae20776-72e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:78:59:de:13:4d:db:c4:3f:d6:ea:17:98:
11:8e:3b:5c:8c:b8:83:c8:8c:0e:96:a4:4e:ba:fc:
a1:4d:9c:0c:e2:18:e1:21:72:53:0e:c5:7f:b2:22:
02:1f:2f:f8:93:ad:64:a8:5f:5c:e5:de:9f:e9:da:
5d:ad:17:90:e3:e9:ec:79:02:92:78:58:1e:f8:90:
ff:ad:4a:aa:94:82:63:d2:04:91:6c:9c:87:a7:4d:
a8:b6:d5:a7:60:87:0d:5d:d3:17:6f:48:f4:99:d0:
19:d6:1b:48:d2:0a:e1:2f:ed:27:b6:ca:06:93:4f:
9e:84:80:22:85:d8:a2:c6:4c:63:62:01:62:a3:3a:
a8:73:cc:72:b1:e2:06:f3:26:71:5d:39:ac:0c:33:
21:9d:8a:6b:62:a6:66:0b:1c:c9:1e:20:7e:99:0e:
e5:5d:b4:90:73:11:3a:23:f2:eb:34:df:c0:c7:68:
0c:54:83:db:19:8f:bb:e1:1a:df:e1:77:9e:fb:66:
42:c6:76:81:c5:75:0f:33:c8:a4:83:90:c5:73:df:
c1:cd:ae:41:d8:d4:e5:23:32:1c:d9:ea:80:99:f1:
e1:93:b1:10:57:25:af:21:14:aa:be:7e:18:8b:82:
6a:63:c0:15:af:75:50:be:de:de:2f:40:e7:0d:33:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:FA:C3:E8:33:56:88:09:5D:D2:CE:98:D2:A5:E6:E3:B5:A3:86
X509v3 Authority Key Identifier:
keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:de:8f:10:5f:aa:ae:18:30:99:d8:6e:23:3a:a5:4c:89:6d:
1e:f0:7f:d7:e0:c0:54:c2:a4:62:e4:e2:1e:d3:6b:78:f0:64:
b5:95:d4:f1:e4:bb:c3:a6:81:48:4b:41:61:50:5c:c4:da:1d:
19:a3:15:5c:0c:cc:6f:29:af:59:f1:28:ce:21:de:61:cc:5b:
97:32:b0:cf:09:1b:f3:51:0e:be:e9:c5:66:99:5b:7e:a1:47:
3c:8c:54:e8:28:54:2b:73:d1:1e:95:d8:51:ff:08:37:a4:c4:
ea:85:a5:30:2a:81:4f:9c:fa:f9:c5:46:db:0a:a8:14:e7:1a:
a2:d3:46:8b:37:10:98:ed:9d:b9:f1:c5:20:e8:46:16:6a:38:
22:f4:3c:41:0e:ff:a2:15:ad:cc:5b:b4:c8:dd:3d:3b:70:7c:
6f:0f:f6:cb:28:6b:68:a0:95:20:7c:ad:cb:dc:d6:e9:2e:dd:
22:40:5d:48:72:3f:95:7e:6a:4e:fd:6e:c3:1d:79:c1:9c:31:
93:31:2c:0f:c3:0b:40:e3:c4:fa:74:34:d3:54:d3:4d:71:b0:
88:3b:9f:49:da:57:e4:67:35:94:4a:e5:e8:0f:6b:98:20:8c:
b0:25:b3:cd:30:a1:c0:86:61:eb:08:64:5f:a1:29:eb:e4:5c:
14:b6:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:07:24 2026 by rpki-client