
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier: OdnWJpXb0JPf/lwRwdGxk0VOyafRCvpYBm8XTxFmUi8=
Subject key identifier: 6E:A7:B0:D5:82:3A:A6:AD:95:B0:2D:1D:25:F7:1A:38:B6:E1:96:17
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number: 0285
Signing time: Tue 27 Oct 2026 02:06:26 +0000
Manifest this update: Tue 27 Oct 2026 02:06:25 +0000
Manifest next update: Tue 03 Nov 2026 02:06:25 +0000
Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: 66U4SGvST9sG8wTlg/OuzY9Bnpa8Eef1AOqpGdoJO+U=)
2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: pL7TsTQ2Nm3m6VOrPtjdoQ/AUSEeALli0uk6St9i4To=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 02:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Validity
Not Before: Oct 27 02:06:25 2026 GMT
Not After : Nov 3 02:06:25 2026 GMT
Subject: CN=6ae00721-fd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:f2:87:42:e3:aa:3c:59:c6:1a:23:02:cb:
12:03:a8:2e:ac:7a:f7:23:85:ea:fd:3d:7b:97:ff:
d0:50:76:46:10:02:d7:4f:65:92:0c:85:8a:0f:22:
bc:ad:60:64:ab:5d:94:1f:a1:f7:37:f4:68:12:58:
58:d1:fc:64:95:cd:72:55:0a:4b:b6:89:9d:d0:94:
30:b7:7d:b8:74:1a:d2:c3:13:d4:14:2f:4e:a7:ab:
0c:5e:f2:0e:c2:5e:f9:b2:fe:ff:30:f6:97:37:e2:
f8:65:98:6c:8b:d5:76:72:ef:11:97:79:1f:66:bb:
20:73:9a:e4:a2:49:39:59:c6:ec:04:80:9b:b7:ac:
c7:cd:bd:7d:43:c8:ac:e9:93:1e:5a:61:15:11:93:
e2:1f:57:a7:0b:67:8b:30:ff:c3:1b:5c:c5:9c:7d:
5d:7d:0b:b9:04:3b:a2:73:31:7a:73:b9:18:a1:e1:
66:f2:32:2f:dc:85:13:1e:4b:24:83:85:19:f9:1c:
bc:bd:c4:f4:37:3c:a7:c5:1e:10:5e:05:21:08:20:
30:97:46:e4:50:dd:72:89:8f:a7:49:72:89:c1:da:
fe:8a:6f:83:2f:5e:13:d0:93:c7:12:c6:9d:62:17:
f3:56:59:ad:b6:0b:66:90:3f:e3:52:6c:b4:df:22:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A7:B0:D5:82:3A:A6:AD:95:B0:2D:1D:25:F7:1A:38:B6:E1:96:17
X509v3 Authority Key Identifier:
keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:31:1f:aa:be:85:92:9c:8a:44:c5:f1:bc:01:3a:7d:73:31:
89:94:1c:53:03:5c:da:67:ac:fe:36:3e:b6:0f:4a:ed:87:78:
6e:2c:82:d5:ad:0b:d8:8c:09:2e:40:f5:5e:e4:ed:3e:62:95:
90:7b:2d:00:1a:39:ba:03:1b:21:fe:38:7a:47:99:e6:3d:ce:
5c:49:41:d7:70:53:30:8c:9d:77:7e:0b:76:7c:5c:c4:cb:cc:
3f:f8:46:e1:fb:1c:e6:11:02:db:33:0e:a6:e1:b1:0f:be:89:
64:f7:21:b2:11:7e:8c:80:d8:cc:d0:e0:53:c0:ab:b1:5b:4d:
f2:ca:70:b5:2c:ae:fc:11:b8:4a:a3:f2:78:15:0f:da:58:9e:
a9:8e:d2:26:9e:cc:fc:7c:5c:bd:67:ea:38:2f:db:92:c5:00:
54:af:66:dc:fa:4c:cf:55:2e:b1:2d:a6:aa:cc:08:f7:e1:85:
84:ce:9e:27:69:fd:f9:29:fd:37:b2:9d:3d:f5:55:bc:4b:0f:
b4:ce:e7:06:a8:5f:3e:c9:ed:52:b2:e6:5e:d9:dc:3f:c0:41:
61:39:ea:2a:00:2d:62:b2:40:94:1e:6d:2c:3f:07:c7:1f:19:
62:6f:c2:6e:4e:cd:db:6b:87:47:63:98:86:2c:e9:9c:83:e2:
57:81:a1:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0
MzI4NzIzQTAwHhcNMjYxMDI3MDIwNjI1WhcNMjYxMTAzMDIwNjI1WjAYMRYwFAYD
VQQDEw02YWUwMDcyMS1mZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmjyh0LjqjxZxhojAssSA6gurHr3I4Xq/T17l//QUHZGEALXT2WSDIWKDyK8
rWBkq12UH6H3N/RoElhY0fxklc1yVQpLtomd0JQwt324dBrSwxPUFC9Op6sMXvIO
wl75sv7/MPaXN+L4ZZhsi9V2cu8Rl3kfZrsgc5rkokk5WcbsBICbt6zHzb19Q8is
6ZMeWmEVEZPiH1enC2eLMP/DG1zFnH1dfQu5BDuiczF6c7kYoeFm8jIv3IUTHksk
g4UZ+Ry8vcT0NzynxR4QXgUhCCAwl0bkUN1yiY+nSXKJwdr+im+DL14T0JPHEsad
YhfzVlmttgtmkD/jUmy03yK8CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6nsNWC
OqatlbAtHSX3Gji24ZYXMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0
OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN
QllSV2pBWkt1QU5ES0hJNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANTEfqr6FkpyKRMXxvAE6fXMxiZQcUwNc2mes/jY+tg9K7Yd4biyC1a0L2IwJ
LkD1XuTtPmKVkHstABo5ugMbIf44ekeZ5j3OXElB13BTMIydd34LdnxcxMvMP/hG
4fsc5hEC2zMOpuGxD76JZPchshF+jIDYzNDgU8CrsVtN8spwtSyu/BG4SqPyeBUP
2lieqY7SJp7M/HxcvWfqOC/bksUAVK9m3PpMz1UusS2mqswI9+GFhM6eJ2n9+Sn9
N7KdPfVVvEsPtM7nBqhfPsntUrLmXtncP8BBYTnqKgAtYrJAlB5tLD8Hxx8ZYm/C
bk7N22uHR2OYhizpnIPiV4GhjA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:28:04 2026 by rpki-client