
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier: KncOm4dbSYhSeuFqgRACKYDMyokARjsfhwSv6IZXk9w=
Subject key identifier: B8:6D:52:18:DB:EB:28:41:98:1C:14:94:28:7F:D2:8C:F5:2A:55:32
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number: 01D7
Signing time: Mon 02 Mar 2026 15:32:09 +0000
Manifest this update: Mon 02 Mar 2026 15:32:08 +0000
Manifest next update: Mon 09 Mar 2026 15:32:08 +0000
Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: f4aSx43qgvxh5EcvyC1a37md6NA4gdMj+gpRpR7yzhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Validity
Not Before: Mar 2 15:32:08 2026 GMT
Not After : Mar 9 15:32:08 2026 GMT
Subject: CN=69a5ad79-b9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:d8:de:ff:c6:74:80:ec:23:ca:e6:58:f2:
12:2e:27:5c:5a:56:0d:60:29:84:1b:9e:b5:be:b7:
64:b9:a6:0c:36:a9:1f:11:4e:e5:d4:71:d2:b3:a1:
cc:96:b6:fe:15:e5:fb:30:20:d1:b1:30:99:14:fe:
47:63:02:39:58:ef:8c:7c:05:bc:78:a6:59:ae:d0:
2d:3f:a6:c1:3d:dc:73:d7:c6:c2:32:65:73:bd:57:
b7:6e:36:27:13:4c:c0:8d:72:8e:f7:35:1c:b7:b8:
70:fe:2f:12:f8:53:9a:48:34:a5:ac:a9:79:d5:7f:
fe:17:10:de:72:e1:83:0f:67:ac:04:9a:a5:70:02:
b9:a5:2c:e0:b6:22:fc:3e:91:a8:51:b6:d6:99:74:
7f:54:22:f3:24:a8:2b:b8:36:f7:59:ac:64:81:f6:
6e:7c:40:0f:a8:2a:23:81:10:8c:9e:a7:dd:18:df:
5d:63:80:20:6f:ab:e3:94:77:e3:aa:52:8b:bd:b5:
c6:8a:8e:42:22:4f:a1:f6:27:88:80:ab:8c:60:c7:
7c:a2:1e:fb:bf:32:69:35:bf:48:43:7b:cc:4a:6d:
96:f3:45:6c:63:6b:13:6e:6f:4e:45:de:4e:d4:ea:
8a:20:e9:62:b2:73:11:04:72:26:a9:2c:3a:cd:96:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6D:52:18:DB:EB:28:41:98:1C:14:94:28:7F:D2:8C:F5:2A:55:32
X509v3 Authority Key Identifier:
keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:cd:37:bf:c0:ba:52:85:e7:13:ab:99:87:2c:cc:e4:80:
e9:0c:0f:55:0f:67:f8:7d:24:ed:3b:a5:af:f6:28:e1:87:b9:
4f:d2:7f:8e:47:28:69:fd:4b:67:20:82:e5:f3:0c:50:97:6c:
6c:70:d3:26:47:33:34:87:d7:ff:80:08:05:5e:40:ae:3c:4c:
11:63:4d:7a:c6:c9:09:d8:d2:52:1a:bb:cd:fc:7e:63:41:46:
1e:fb:0d:de:b8:b8:4f:0a:4f:6b:f0:0c:ad:55:78:ba:c7:4a:
3d:34:3b:55:46:c5:39:4c:b9:a0:5f:4a:ae:4f:1f:f4:0e:40:
a0:cf:88:58:6b:10:04:04:35:ac:92:b7:bb:ca:e4:c3:6f:fb:
6c:8b:f4:bf:e0:0f:f8:5d:c2:b7:5f:16:91:44:ac:5f:b9:70:
88:2e:e9:bf:34:c5:31:0b:f9:d0:cf:1d:b7:f9:4b:16:2a:19:
dc:46:e6:8b:d0:73:bf:af:62:02:ea:a9:24:d7:7b:ee:8b:eb:
58:9a:f7:0a:99:a7:59:47:2a:42:ba:54:dc:cf:78:65:6d:33:
2b:66:79:4f:d2:79:41:71:b4:18:7a:b3:bd:28:ea:00:b2:e2:
33:dd:2e:a3:03:75:2b:f2:07:e7:b1:be:43:55:2a:48:81:6e:
a5:52:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:19:22 2026 by rpki-client