
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier: kSUZfNhe1JcwaEkk31LkrthSqmAnLDp3xCNQKUoa+B4=
Subject key identifier: 53:BA:41:83:5E:6C:DF:2F:C7:07:14:EF:83:7D:7E:BC:E4:D1:FA:BD
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial: 0541
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number: 0539
Signing time: Fri 04 Sep 2026 23:16:14 +0000
Manifest this update: Fri 04 Sep 2026 23:16:13 +0000
Manifest next update: Fri 11 Sep 2026 23:16:13 +0000
Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: +tBCngbk5rpx6TIBl5tgvh4sCe8/Yr1y87kFZzuR1TI=)
2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: b2Il84vwzqv/ef+O+Pns3mkcqkG1cdU06P6OcqDISP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Validity
Not Before: Sep 4 23:16:13 2026 GMT
Not After : Sep 11 23:16:13 2026 GMT
Subject: CN=6a9b513e-54ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:2e:c4:2e:de:a5:98:11:9f:b2:ab:2d:2d:
94:39:ef:1f:02:4c:2d:ca:b9:d1:27:c8:76:34:54:
a9:16:0d:4d:a6:58:dd:d2:82:bd:36:b6:a6:75:c7:
aa:e6:d2:f9:b5:b1:a1:af:4e:cd:9d:39:36:ea:04:
eb:db:aa:6a:8e:6e:25:93:59:f0:a1:8a:1c:52:c8:
10:b3:ea:b5:f5:66:71:1e:69:e6:e9:64:38:e3:78:
84:4d:14:21:38:2d:9f:e1:35:ff:64:90:99:6c:4a:
31:f4:02:83:22:aa:ff:31:8a:65:20:a3:8f:a3:36:
66:b7:98:6c:00:dc:c2:65:6b:db:18:96:2e:1e:36:
ab:20:70:fc:65:aa:6c:8d:c1:4e:35:a2:51:36:51:
90:44:b9:43:7e:da:66:4a:94:61:c5:7a:3e:64:63:
4f:e7:2c:f9:fe:9c:1c:0c:02:a1:63:6a:c0:12:fa:
1b:e8:93:74:3b:aa:72:19:ef:7c:94:c7:80:98:a1:
36:fc:ef:81:d1:73:7a:2a:e8:f3:0d:bb:38:91:d3:
72:08:bb:96:67:b3:5b:e7:25:03:7c:33:1e:6c:0e:
b2:46:82:73:72:6f:78:69:fe:6e:38:bc:36:03:70:
3c:88:1b:69:af:81:48:b3:c0:20:c4:95:0e:36:5d:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BA:41:83:5E:6C:DF:2F:C7:07:14:EF:83:7D:7E:BC:E4:D1:FA:BD
X509v3 Authority Key Identifier:
keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:37:ab:bd:36:03:96:69:94:6e:17:b5:12:7b:0b:ae:8c:07:
1d:cb:ba:10:ff:7f:27:94:b9:dd:77:91:58:d4:dc:b5:c0:c5:
8b:46:66:cf:94:e1:d8:10:0c:c4:e0:38:6d:84:59:c4:80:ce:
5e:e9:35:50:ef:43:97:67:24:4a:e5:b1:94:f5:9f:e1:63:e0:
41:9a:a0:10:6a:fe:bf:c3:ee:a6:e7:57:72:70:3c:ec:2e:85:
cf:24:25:9b:9a:e8:45:4a:9c:a1:2f:b4:e3:a7:4a:08:a6:e0:
c2:e6:5d:e5:df:b5:68:58:e2:d3:c9:64:e8:92:37:24:f3:2e:
24:31:26:ad:27:1b:f1:f3:c3:9c:74:84:ad:54:fb:89:c0:8e:
f1:73:d1:c4:2d:00:95:3f:30:7c:24:bb:13:d2:a3:ce:6a:2e:
8b:a0:26:ab:34:d5:1e:ca:9d:b0:77:ba:47:17:f9:47:25:e3:
c2:e2:08:d8:8d:ee:b1:22:0d:c9:56:01:ec:2b:aa:07:e3:bd:
85:39:43:9f:7e:7c:79:3f:01:46:07:f9:8b:c6:56:a3:ac:e2:
36:c6:e9:b2:fe:69:6b:d6:89:eb:16:9f:f6:79:97:0b:a6:62:
b1:3c:7a:e1:00:5a:67:cd:fe:43:14:16:1e:e3:c4:d0:1e:9f:
bd:d9:e7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:40:20 2026 by rpki-client