
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
File: eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft (raw, json)
Hash identifier: 6Fy6G7On4n7MDCO+uJcdHj8sU3xQzw4tz2wGdehOYK0=
Subject key identifier: 2A:05:F0:C2:92:D9:B1:18:2F:02:6C:68:12:F4:41:3E:8B:CF:04:2F
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Certificate issuer: /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial: 029E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
Manifest number: 028E
Signing time: Mon 05 Oct 2026 02:06:19 +0000
Manifest this update: Mon 05 Oct 2026 02:06:19 +0000
Manifest next update: Mon 12 Oct 2026 02:06:19 +0000
Files and hashes: 1: eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl (hash: k0oen3yG1twh5vs89t6oAvgRnh0cry6BEVQJLhln1+Y=)
2: C435BF20EE8E11ED8FA7F510C4F9AE02.roa (hash: BZscUCX7IhkjB5Rqk/Ke36ARUEJ+TcCUWg6alfYd0Kg=)
3: 83EB3618E98C11EDAE292D56C4F9AE02.roa (hash: dIjx2t56GxFvxvyFg+cDW0AhnNMB+827Yme4aAWCsQA=)
4: 93D558E84A8411EE8643216EC4F9AE02.roa (hash: VJ/KnQ9R2yTYoCx2rXGG1qTr2dAgeyV+ZpeINc4EFnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134858, serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Validity
Not Before: Oct 5 02:06:19 2026 GMT
Not After : Oct 12 02:06:19 2026 GMT
Subject: CN=6ac3061b-8c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:eb:fe:5b:dc:e2:0d:5c:c0:61:5b:cc:35:
c8:37:c9:36:74:4e:68:d9:c6:28:b7:13:24:db:e4:
e2:07:db:61:f3:78:30:a5:70:a9:be:5e:ac:98:fc:
b2:d6:6a:ae:70:01:21:f0:c1:75:92:6b:ff:93:0c:
43:72:8b:2a:7b:4c:0e:62:f0:f9:c2:c2:90:0f:4a:
2d:8c:40:eb:9d:de:45:9d:c5:e3:ac:c5:06:22:53:
ea:cf:8d:7e:98:48:64:27:b7:b4:94:76:05:f9:df:
f0:5b:bd:7a:fb:21:e5:4c:e9:8a:8e:74:e5:c4:9c:
b9:6a:40:3b:b7:db:ce:dc:7f:20:48:ab:bb:12:df:
82:34:28:66:00:8d:54:af:ad:90:9e:1c:36:4a:fb:
3a:b4:5f:2e:f9:69:5e:7e:4d:2e:27:32:66:1b:02:
60:35:ab:5c:b2:c7:98:23:be:09:35:3f:c7:51:b6:
a0:ca:a2:ef:8f:95:f3:c5:ea:a6:61:bb:00:d0:4e:
e0:15:5f:e9:f4:20:19:d8:ed:52:46:59:61:23:14:
f8:e2:5d:08:c6:b8:d6:6b:69:d3:29:0e:a4:96:9f:
2d:97:c4:b7:71:60:71:46:98:8e:7c:ec:77:74:45:
d2:43:4e:00:e1:05:ec:25:5c:b8:2b:a3:89:5d:3d:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:F0:C2:92:D9:B1:18:2F:02:6C:68:12:F4:41:3E:8B:CF:04:2F
X509v3 Authority Key Identifier:
keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ce:6c:9f:a9:fe:76:5b:64:27:b0:7d:65:3b:c5:04:e5:3f:
c7:4e:94:a2:db:12:c2:ec:f5:60:4f:2d:2f:b2:dd:f2:92:9b:
bc:83:5c:94:8f:43:ab:31:10:f7:9b:6c:97:e1:0e:ba:80:63:
8e:be:00:fd:72:77:03:84:55:a1:49:e7:59:14:e8:c8:ba:6d:
08:41:70:dd:bb:6d:f0:7d:a0:61:c5:b2:c3:22:94:6f:66:35:
41:a7:d9:8d:47:73:bb:e9:94:b8:9e:12:d6:f0:eb:75:83:54:
ad:31:16:0a:12:f6:46:dd:fc:a1:06:ce:55:1e:09:fa:dc:38:
68:38:79:89:66:d1:8a:21:6b:4b:8a:e3:a4:49:6c:e8:3f:ee:
0c:e6:bf:3d:4a:02:08:3c:7d:84:0e:bd:7d:dc:c6:a3:33:f2:
d7:ca:20:a6:17:38:ee:9c:da:57:04:06:99:c0:1c:ff:b3:0f:
2d:9b:30:d6:f3:77:b7:ba:0c:9a:10:08:22:1a:af:70:55:ff:
ff:e6:2a:42:45:37:4e:ac:0f:a5:5b:fe:bc:83:ee:db:0f:9e:
67:88:a3:57:3b:6e:06:bd:64:ee:80:c8:4b:31:76:ef:4f:e5:
24:71:8d:7c:b7:3b:fd:cd:a2:b7:22:e4:78:32:c1:72:8c:91:
cb:b8:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:48:00 2026 by rpki-client