
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File: EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier: 2yNLKhDnBK7tdySjWANQpkO/2KUtVh0zbKR+jS3fXvM=
Subject key identifier: 35:AD:BB:F7:41:83:29:59:4A:1D:40:C4:A3:71:89:48:54:44:AB:52
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial: 085C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number: 0853
Signing time: Sat 18 Apr 2026 14:45:21 +0000
Manifest this update: Sat 18 Apr 2026 14:45:20 +0000
Manifest next update: Sat 25 Apr 2026 14:45:20 +0000
Files and hashes: 1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: vB1ipfKLCu8HmFFcNQOrO6kOxPM5SDw5k41ctj9dWek=)
2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: UDT/sxEbJJ4LLH0Gq0n3HSWFZpUlaRKaU2gtkgxvimw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Validity
Not Before: Apr 18 14:45:20 2026 GMT
Not After : Apr 25 14:45:20 2026 GMT
Subject: CN=69e39900-150b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:3e:d4:51:ce:0f:c5:9d:30:64:8a:7c:c2:
ca:81:aa:38:e1:cd:4b:a5:b7:a7:17:44:97:7e:de:
eb:ed:ca:0b:8d:64:64:e8:31:4f:9f:4d:8f:d7:1c:
2c:c3:76:3b:ce:38:9f:23:b0:64:0f:29:6d:97:67:
02:14:3e:f5:5a:73:80:44:cb:8f:c8:af:3d:c6:0d:
79:67:db:b0:27:6d:06:03:f2:75:c6:1c:c7:e7:a1:
05:86:b0:93:58:28:91:37:06:fd:f5:4d:4a:71:1c:
37:0d:34:9e:c7:e4:54:d9:e0:59:9e:05:0d:ba:5f:
81:ee:48:50:25:da:f9:e8:88:d4:97:c1:0b:e0:ee:
a8:0a:da:3a:04:9c:2a:31:a9:54:37:ff:35:ad:ce:
f3:92:0e:bb:4c:18:e6:a8:85:e4:ff:97:12:54:4a:
37:0b:96:4b:22:f2:23:ce:61:18:6b:5a:43:49:37:
c8:6d:5d:26:76:78:b2:df:19:c8:b9:45:b5:4a:6a:
c9:ca:e6:8a:8c:52:2b:dc:4e:b0:c6:5a:ce:46:95:
bc:6c:8b:86:d8:ef:10:80:75:c5:36:c4:95:bc:3e:
03:3c:4f:12:2a:6e:e0:0e:23:60:44:fb:6d:31:3f:
7b:8a:8e:59:75:d8:37:b5:58:96:46:01:e5:24:9b:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AD:BB:F7:41:83:29:59:4A:1D:40:C4:A3:71:89:48:54:44:AB:52
X509v3 Authority Key Identifier:
keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:74:f8:c7:48:9e:eb:58:9c:1b:87:de:d8:e0:8f:73:07:98:
68:ed:04:81:89:cc:51:0f:66:aa:99:e7:69:fb:05:fd:b0:c2:
72:20:52:a3:6f:9e:d6:eb:a0:63:2b:bf:9f:31:7c:74:b8:47:
86:05:aa:8d:2c:ab:c6:f3:48:53:0f:cc:31:e1:7a:91:ff:68:
26:b2:2e:df:59:a1:e9:54:2c:96:4e:e2:70:0c:80:a7:6b:c3:
fe:22:39:b9:25:56:d5:1b:c8:de:fa:60:66:37:35:dd:34:ba:
67:d5:91:3c:44:b1:6f:8c:f1:70:e1:98:a8:21:11:08:d6:39:
32:f3:a3:0a:b1:d3:7a:64:42:34:df:06:36:e6:9e:b9:1b:31:
61:b9:17:31:3f:9b:3c:95:7c:e0:1a:bd:1b:a1:8b:68:b0:ff:
19:0e:ff:33:79:cc:c6:2a:4b:c7:2c:df:65:bd:b6:4c:e5:63:
81:78:79:76:ab:50:6d:bd:f9:9e:54:a9:c9:cc:44:73:af:9e:
c1:d3:f8:74:f7:5a:99:f8:90:20:fa:5e:ac:f8:3d:bb:a0:3b:
43:45:6e:93:05:d1:92:56:d8:58:af:c1:2d:af:e1:ff:4c:25:
95:8a:83:fb:85:d2:70:7a:05:f8:89:9f:4e:6f:13:b0:eb:52:
80:b7:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:05:34 2026 by rpki-client