
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier: 5WJNwDRyv3BgMHscsFkhY9mIjaFGBjA8pxqyRS8d63Y=
Subject key identifier: 0F:1C:C5:84:EE:FA:18:7F:F0:41:65:78:90:45:A8:B9:BF:66:B3:E3
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 01EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number: 01EF
Signing time: Sat 18 Apr 2026 15:23:51 +0000
Manifest this update: Sat 18 Apr 2026 15:23:51 +0000
Manifest next update: Sat 25 Apr 2026 15:23:51 +0000
Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: G9gIteTNHuuefqoD/02udzugR5LUBtjR+scel6Y7pXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495 (0x1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Apr 18 15:23:51 2026 GMT
Not After : Apr 25 15:23:51 2026 GMT
Subject: CN=69e3a207-c380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:80:9f:fc:ad:c0:0e:00:a2:cf:0e:b8:ce:ed:
dd:b5:18:e2:ee:f5:06:31:af:b4:7a:2c:6f:01:e5:
50:25:50:29:b3:2b:43:e2:7d:66:1f:4f:c4:f6:d5:
3f:24:7c:4c:6b:f5:80:db:4a:28:87:a9:ad:66:14:
47:ca:05:5f:e0:3e:65:ca:8e:c7:45:fa:78:2e:0f:
c9:94:53:71:72:6b:d2:32:2f:a8:c7:c0:bd:51:f4:
cc:43:a4:8a:ed:96:13:f5:28:29:e8:14:75:a4:96:
d4:7b:c2:5c:06:3a:33:c9:7b:03:cd:51:89:db:78:
8f:98:e3:65:a7:9e:90:0b:74:3b:db:5d:72:bf:0b:
5b:32:50:e4:be:1f:bc:cb:b4:04:99:4b:ec:58:97:
93:fb:8e:c3:90:ce:29:d5:65:ef:be:ff:a2:88:44:
30:57:0e:93:3f:9b:a0:e1:04:49:ff:84:6f:69:e9:
29:92:8e:b1:bd:c9:ea:7b:46:e5:00:f6:6c:4f:46:
9e:93:a8:e1:93:0a:7b:fb:94:23:ee:d9:e7:12:e5:
bb:3c:6f:3e:39:19:be:31:84:fa:80:e4:f7:1f:95:
79:e8:d8:1d:18:aa:3d:d4:98:fb:f1:f8:d4:d1:f0:
c0:63:1c:ea:3b:14:64:a7:5e:19:5c:ed:59:24:bb:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1C:C5:84:EE:FA:18:7F:F0:41:65:78:90:45:A8:B9:BF:66:B3:E3
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:30:0a:e4:6e:80:a7:4d:a4:17:3f:35:4e:8e:16:d7:d2:6d:
c3:50:fa:d6:3a:6b:b3:8f:0c:0e:a6:f9:12:7e:70:01:f7:d4:
77:f1:29:50:32:b3:20:be:8d:61:9d:91:25:af:10:7c:37:5a:
6f:8e:61:90:bb:07:30:06:aa:bc:d3:4a:8c:38:3b:f8:71:ef:
ec:e2:84:79:aa:8d:bb:cd:df:7a:64:fd:9d:ec:c8:08:81:86:
5e:80:98:ed:fb:7b:90:5f:cf:b7:ef:67:18:ad:60:0a:df:36:
41:1a:a8:41:31:3c:b3:19:52:30:64:12:8f:c5:04:cb:a4:4a:
00:6a:a8:cf:07:24:78:45:5b:92:7f:f3:97:56:a7:0a:71:ab:
01:ec:cc:b3:f9:56:d9:31:5f:3c:2c:bd:fd:10:37:9e:fb:10:
25:0d:86:c7:34:7f:aa:30:1a:2c:e8:19:14:bb:3d:a9:5c:55:
28:94:ad:a6:66:e5:59:c4:78:33:a4:5b:67:45:9e:75:db:6b:
0b:7a:1b:f5:aa:06:28:0c:f5:e0:fa:41:15:68:81:e5:f9:81:
33:e4:ab:70:69:3d:c8:63:ab:be:53:2d:24:31:de:50:e8:1c:
98:30:68:f6:6c:33:9c:14:8a:0b:a8:9c:62:c2:48:50:5a:25:
d2:76:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:44 2026 by rpki-client