
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
File: EOBQLz04LowVZuzMKhIbbEOd6Xc.mft (raw, json)
Hash identifier: 89YeZ84Yccclnn0pptMMcKZ+Ap1NR79qk1mR26zOQj8=
Subject key identifier: 21:A3:0C:BE:BF:1F:92:BB:14:30:D0:B1:F6:7D:15:AC:61:05:50:2F
Authority key identifier: 10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
Certificate issuer: /CN=A9168949/serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
Manifest number: 019A
Signing time: Sun 05 Apr 2026 04:00:09 +0000
Manifest this update: Sun 05 Apr 2026 04:00:08 +0000
Manifest next update: Sun 12 Apr 2026 04:00:08 +0000
Files and hashes: 1: EOBQLz04LowVZuzMKhIbbEOd6Xc.crl (hash: XpZjqL34G4F8ATKf7sJMnEnfI93jWKHT7C6SqTBXn50=)
2: 235D2836A1F111F084328A39C4F9AE02.roa (hash: E3Vh4QPukKhgUpPpZhB3O+U89F6/91Jfk8D+jDf2eYA=)
3: 229253A4A1F111F084328A39C4F9AE02.roa (hash: Mo9vGdj4BG0OS7QK1hyQLJY9HjLI3Bpb5SXRCt0vElw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168949, serialNumber=10E0502F3D382E8C1566ECCC2A121B6C439DE977
Validity
Not Before: Apr 5 04:00:08 2026 GMT
Not After : Apr 12 04:00:08 2026 GMT
Subject: CN=69d1de49-0d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b0:69:02:e4:98:39:63:1e:10:7a:2d:2d:12:
a2:64:14:cc:66:b4:db:6d:3e:a2:81:a1:9f:eb:ff:
ba:df:90:69:e7:bd:22:9e:cb:be:4b:c0:c7:ca:14:
56:13:54:65:99:05:02:cd:e2:33:b5:30:5e:5a:24:
a2:9e:0c:e9:bc:10:b3:7d:34:fb:71:52:e5:1d:f7:
da:e7:70:84:4e:14:00:d8:90:16:16:96:d9:64:ff:
d2:9b:64:3f:0f:40:a5:20:55:bc:07:59:eb:70:b9:
54:27:b9:41:c0:39:e3:62:2d:8a:63:f6:59:35:1e:
e9:0b:e5:e3:13:50:81:8b:47:c0:f6:c6:10:66:d9:
cb:48:22:cb:4c:e2:de:29:b6:2e:e1:b3:b8:8f:2e:
46:d7:f3:51:07:ae:1a:f5:6f:1e:11:df:71:80:f2:
16:0c:b5:09:fa:b5:b1:3e:d0:74:ae:6e:5a:55:3a:
f1:af:22:d9:a2:51:ff:d7:dd:b0:4d:cb:b2:7f:f6:
55:74:f9:89:6b:89:6d:10:7b:9f:f5:3b:34:e8:35:
6a:d6:42:14:ce:d6:f6:b0:86:b4:49:15:4c:28:82:
7f:36:a1:ca:87:15:9c:80:ca:f6:8c:03:8a:06:c2:
8a:c0:be:c6:7f:c3:07:03:e9:b7:65:cc:f5:db:21:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A3:0C:BE:BF:1F:92:BB:14:30:D0:B1:F6:7D:15:AC:61:05:50:2F
X509v3 Authority Key Identifier:
keyid:10:E0:50:2F:3D:38:2E:8C:15:66:EC:CC:2A:12:1B:6C:43:9D:E9:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EOBQLz04LowVZuzMKhIbbEOd6Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168949/3F242AC2E4F311EE99101438C4F9AE02/EOBQLz04LowVZuzMKhIbbEOd6Xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:bb:7a:b7:a9:db:7e:08:93:ea:28:42:53:56:32:6f:6e:
f1:3d:10:d3:6a:67:e6:22:71:6c:79:b0:c5:3f:22:ab:d6:e4:
ce:7e:00:5e:e4:c2:b0:ca:e1:08:a2:ff:7e:fa:5f:cb:62:06:
b2:e3:63:af:ff:19:8e:d1:8c:44:5f:f7:87:b1:e8:ef:fe:a5:
39:5d:a7:7f:4a:17:c9:26:21:f4:c1:17:90:74:5e:b2:a5:3e:
44:e3:f0:28:58:9a:11:cd:8a:6a:d9:15:31:30:c6:20:14:a6:
b2:4c:d2:e7:cd:f1:99:00:79:b5:b8:0f:61:13:4d:a3:51:bf:
51:16:c4:72:19:ff:be:8d:bd:50:a7:e7:d8:2e:d0:9f:c1:f9:
c4:59:82:2d:cb:e6:ca:32:2d:8f:59:8a:ad:6c:2b:f6:11:3b:
6f:1e:d9:66:ae:4d:91:9a:9f:2c:42:ab:f2:5e:af:21:80:9d:
33:98:3c:dc:e2:54:cf:77:57:8a:88:83:87:dc:47:41:21:1e:
7f:08:f2:4f:94:f3:0c:4f:96:38:87:18:2d:bc:5c:05:63:48:
f2:c2:e7:59:ce:9f:f9:3f:bd:77:49:1d:d3:57:04:9b:61:80:
cd:1b:86:da:55:7b:ad:f9:2b:d0:3f:28:d3:97:2e:df:5a:87:
f3:9d:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:10 2026 by rpki-client