
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
File: eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft (raw, json)
Hash identifier: 2z38C8RxMxJdjyOel16LtZIZZgrAp7qpDn4o0rTGPO8=
Subject key identifier: 5A:C4:69:3C:13:9C:87:AD:AA:EE:DE:FC:A3:A0:D5:79:85:3F:2C:57
Authority key identifier: 78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
Certificate issuer: /CN=A9134858/serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Certificate serial: 023A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
Manifest number: 022D
Signing time: Tue 31 Mar 2026 02:19:36 +0000
Manifest this update: Tue 31 Mar 2026 02:19:36 +0000
Manifest next update: Tue 07 Apr 2026 02:19:36 +0000
Files and hashes: 1: eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl (hash: FtFgq1nX8wVVWqMKPMqNYWJNP7x4NZljOL5wK2VT0r8=)
2: C435BF20EE8E11ED8FA7F510C4F9AE02.roa (hash: gcmy6fyU9mWxKGjBtaxajLdQNE9T8qXC/2LOVix6NnY=)
3: 83EB3618E98C11EDAE292D56C4F9AE02.roa (hash: NfJdB789Ubad59o+N0829cOCyCWqDnfBQW+kS7WFato=)
4: 93D558E84A8411EE8643216EC4F9AE02.roa (hash: HUZWj7ga443aIErZjEl5uCaPuZU/RcRW4dLtq/yzLeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 570 (0x23a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134858, serialNumber=7841A0786A7D7846459FB5978BFBBB2D90A1EEE7
Validity
Not Before: Mar 31 02:19:36 2026 GMT
Not After : Apr 7 02:19:36 2026 GMT
Subject: CN=69cb2f38-a58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:1d:65:20:10:24:51:96:ef:31:70:26:b8:
76:72:a7:b9:01:eb:62:04:ed:b3:21:74:b8:79:17:
8c:f7:a4:20:58:19:c5:73:90:72:c3:06:58:e1:bc:
00:ad:ab:5f:b2:ab:4f:9a:00:f0:32:dc:13:1f:d8:
15:88:db:10:31:7a:bd:63:86:74:ee:47:cf:9c:a1:
e9:66:32:39:cc:91:e9:62:21:91:c5:e3:43:08:a8:
21:97:1a:38:4a:fe:83:33:4e:80:c6:76:b8:e4:67:
55:64:0b:60:31:a6:b2:ae:5c:a8:bf:4d:5c:8a:c6:
09:d4:6c:ef:86:c5:d9:61:07:fa:57:26:44:ea:93:
95:61:08:40:8c:e7:31:15:34:d0:b6:bc:f3:b5:c9:
f4:76:2e:3f:10:bf:f9:c6:13:6c:dc:ff:64:d7:0a:
f6:97:cd:2a:14:7d:79:71:ee:09:e9:63:89:50:7c:
16:83:5e:c3:05:fe:ec:e8:74:6b:6a:83:18:4d:96:
09:21:cb:cd:f8:66:1e:94:38:47:fe:01:9f:00:26:
8f:08:7b:13:2f:05:3f:b5:0a:b7:7c:c5:e5:3e:e5:
03:96:59:e3:d8:5c:f5:99:d2:85:44:26:65:de:4f:
b5:27:e7:b0:dd:87:b4:7a:75:e3:f6:fd:91:28:e5:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C4:69:3C:13:9C:87:AD:AA:EE:DE:FC:A3:A0:D5:79:85:3F:2C:57
X509v3 Authority Key Identifier:
keyid:78:41:A0:78:6A:7D:78:46:45:9F:B5:97:8B:FB:BB:2D:90:A1:EE:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgeGp9eEZFn7WXi_u7LZCh7uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134858/325538B4DDB911ED8887C168C4F9AE02/eEGgeGp9eEZFn7WXi_u7LZCh7uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4e:59:af:4c:1c:84:f9:a9:a7:c4:59:fb:88:a7:6b:8d:e3:
73:2d:5b:40:cb:89:65:b6:bd:db:9e:fc:d3:4f:bc:ae:99:e4:
5c:11:c4:23:f7:62:3c:5e:0c:1b:e8:d8:c4:ff:31:2a:30:68:
cc:fa:46:85:7a:e9:46:56:6c:c8:37:76:8e:6b:fc:01:c3:64:
20:4a:d2:fc:6d:b7:f3:83:eb:66:eb:91:88:f3:5f:5a:50:19:
45:de:df:7e:0d:8a:3d:1f:43:4b:58:23:b3:b7:9d:e5:05:41:
02:b5:96:d9:b4:78:2f:55:5f:07:1d:cd:4b:2b:2e:e9:36:ff:
f4:75:d7:59:14:0f:a1:65:b9:0e:17:fe:e7:2b:bf:5c:38:da:
08:dc:45:92:c8:71:b5:31:f2:48:a0:e0:55:96:f9:e2:ee:50:
5d:5e:43:7d:32:75:97:c6:91:2f:7d:7a:8b:42:12:b7:cf:71:
da:52:d1:44:f6:28:8f:86:60:ea:de:ab:8e:96:e7:e4:a0:54:
ac:32:71:40:9f:c2:5b:e0:f4:fc:5c:45:a6:42:39:36:36:cc:
23:3c:12:58:ea:7e:2e:ce:24:54:9e:1f:ed:91:56:44:8d:9d:
88:04:50:87:97:a8:a9:67:15:02:b0:b1:8b:98:4b:a1:36:93:
67:bb:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 06:45:07 2026 by rpki-client