
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier: /jxOz90SILakP7rP0i02SjtHx7hlETWy3y4MplEjhsE=
Subject key identifier: 99:42:8F:7C:35:A6:06:AB:8B:A9:95:5E:83:4F:9C:26:BD:F0:73:CC
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number: 0128
Signing time: Thu 21 May 2026 05:48:41 +0000
Manifest this update: Thu 21 May 2026 05:48:41 +0000
Manifest next update: Thu 28 May 2026 05:48:41 +0000
Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: 7no/J0JgoYGXjdny0KsoKjTLJGk60UjOoB6L4j+hhqo=)
2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: XBhJyYS78iAwLwaisddHiLLfaefoeg69NKzL67ACpjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Validity
Not Before: May 21 05:48:41 2026 GMT
Not After : May 28 05:48:41 2026 GMT
Subject: CN=6a0e9cb9-8600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:fa:27:4c:7c:f3:1e:a7:e1:e5:72:59:b8:
48:7c:12:84:93:2b:32:c2:4b:4c:8b:1e:0b:0c:95:
a1:3c:ab:19:2f:ae:50:4a:08:42:df:7c:7b:fc:82:
a7:4f:3c:f1:d7:42:fd:7f:a8:e2:7b:31:00:44:b2:
2f:16:87:fc:b4:5d:49:ff:75:3e:36:5e:68:eb:09:
6e:af:64:b6:cd:06:72:83:42:bf:10:20:78:e0:64:
36:34:e2:33:66:10:24:69:d2:7c:79:4f:e8:27:09:
0b:48:83:f5:2b:31:d4:8c:29:44:c1:52:c7:db:84:
38:3d:ec:2a:45:10:ba:6e:90:32:41:9e:36:c2:55:
3d:0c:04:2f:c0:14:60:69:7c:db:03:f0:e6:b0:49:
d8:78:ad:a5:28:21:7e:cf:24:9f:09:49:e8:c0:ea:
a1:a8:d3:d6:f9:fd:77:43:21:08:22:00:b8:ae:71:
00:5d:bd:27:10:ad:14:82:01:81:59:c1:fd:20:62:
54:f3:95:9a:6f:d7:7e:a5:46:d8:71:38:f1:81:6d:
0a:87:f5:b3:60:93:47:ca:c5:1c:5b:73:3b:0e:14:
f9:bc:2e:7e:98:a5:27:40:16:09:96:9f:23:1f:c9:
11:1b:d6:82:3f:07:95:54:28:6c:c8:c1:b0:5b:b8:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:42:8F:7C:35:A6:06:AB:8B:A9:95:5E:83:4F:9C:26:BD:F0:73:CC
X509v3 Authority Key Identifier:
keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:b2:63:46:0f:dc:62:7e:fc:28:9a:13:fb:49:9a:25:8a:f9:
71:12:ef:55:97:57:7a:29:76:dc:c5:2f:c5:f6:6d:86:6a:aa:
0e:95:75:2f:b2:ca:f6:96:bb:fd:dd:df:95:62:ea:69:8c:61:
aa:f7:82:1d:37:4b:c8:2e:7c:15:8d:d3:5b:12:38:38:07:20:
a9:a9:d5:27:ce:74:4f:d5:41:6f:49:0e:a8:98:fd:0a:26:4e:
a5:92:c7:6e:96:82:66:0d:48:b7:c4:51:02:c7:47:d8:35:a5:
c8:bb:ed:09:30:78:46:4f:4b:9f:d4:1d:58:57:7b:e3:5e:44:
80:55:9f:36:9d:3d:1f:58:db:84:d4:fa:39:23:b5:d1:45:69:
da:42:41:75:f2:bf:93:d0:d4:99:45:f7:0c:f0:a1:56:96:40:
23:f8:d0:63:f9:88:3d:65:08:c6:e4:80:f5:de:72:7d:3e:f8:
b9:e4:61:54:d8:00:ff:40:5b:82:12:a9:1b:75:d2:3c:d7:a3:
b9:9b:f1:e9:e5:c3:85:87:a6:20:6c:43:9f:2a:df:53:a0:f3:
0e:d2:1e:b2:a9:47:98:30:fc:61:e8:12:5e:ff:cd:e3:67:a8:
d0:56:a8:f8:89:3b:3d:1a:02:d5:3b:72:e4:ec:e5:86:ae:7d:
61:e7:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:43:58 2026 by rpki-client