
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
File: eErjDFQTMvpDt1Y83AGwLtG9nFA.mft (raw, json)
Hash identifier: AQhUSC4Jymunjhp/PZGYq/dyL1WN+c1r0y9ktUkziM8=
Subject key identifier: 17:4A:BD:FA:98:7C:69:AA:EF:3F:E2:C2:D0:29:69:4C:57:1E:EA:6D
Authority key identifier: 78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
Certificate issuer: /CN=A916BCBA/serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Certificate serial: 35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
Manifest number: 35
Signing time: Sun 05 Apr 2026 07:56:57 +0000
Manifest this update: Sun 05 Apr 2026 07:56:57 +0000
Manifest next update: Sun 12 Apr 2026 07:56:57 +0000
Files and hashes: 1: eErjDFQTMvpDt1Y83AGwLtG9nFA.crl (hash: FoMvmJ5CxmVapTaX7fhFck1edadJky7L85QwwZikrlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCBA, serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Validity
Not Before: Apr 5 07:56:57 2026 GMT
Not After : Apr 12 07:56:57 2026 GMT
Subject: CN=69d215c9-584f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:58:ad:bd:14:05:2c:a3:b7:2f:25:b2:83:
08:c9:3e:59:59:dc:6c:40:76:de:38:ec:d7:bd:14:
39:0b:63:ae:75:ff:0c:4c:b7:62:c2:b1:2e:f1:d9:
0d:b7:06:78:31:53:b4:4d:07:6d:4e:5e:0e:80:ee:
52:60:ab:d5:97:ed:67:ef:d8:1d:39:96:d4:6c:0e:
e9:7a:c2:ab:a3:ee:4a:5d:f3:a8:89:7f:f1:28:48:
1b:9b:ca:99:56:73:1f:8c:07:47:d6:c1:e0:e8:63:
30:09:bf:7f:52:29:d3:a3:3d:6b:a5:27:0e:e2:8a:
2b:e3:d5:fb:37:86:77:6e:ae:78:19:18:66:6a:85:
92:b2:9b:15:91:61:d0:fb:9a:9b:de:bb:d5:ea:d1:
5b:46:07:05:4c:6f:82:a9:18:60:3b:b1:b0:07:f9:
2e:01:4f:d7:67:a6:93:19:36:b7:06:88:a7:30:3c:
77:c6:1c:2d:29:7e:58:dc:f0:5c:11:b4:69:d8:09:
cb:de:12:f2:06:e6:23:1a:fe:ba:94:5a:1b:af:f3:
95:8c:3e:5f:b8:0f:1e:c5:a9:59:57:23:b6:4a:e8:
0f:b7:49:59:d9:0d:22:4e:e5:9f:75:3a:e1:be:02:
8f:cc:b7:d0:bc:15:5b:bd:02:85:b8:b1:e1:73:d0:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:BD:FA:98:7C:69:AA:EF:3F:E2:C2:D0:29:69:4C:57:1E:EA:6D
X509v3 Authority Key Identifier:
keyid:78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:44:43:5f:36:cc:b8:11:63:79:59:0c:fd:89:54:a2:0d:f3:
c6:a2:cb:11:3a:51:fa:af:f0:39:06:f7:b7:b0:3f:96:41:ea:
8d:4f:e5:bb:9a:f6:94:68:03:c4:59:2b:14:fa:1f:81:98:5b:
e8:76:28:5c:8a:15:de:1a:be:f6:d6:87:76:c7:ad:3e:40:81:
9c:57:66:ce:b1:c6:af:8a:9a:80:07:12:75:4f:73:cf:92:65:
93:cd:e1:0e:bd:3d:1c:2a:63:23:82:42:06:14:9b:bf:76:61:
af:8b:0e:3e:46:0c:80:b3:fd:3b:cd:f0:24:21:38:cc:75:c3:
03:e2:d5:0f:cb:8c:48:45:80:0d:8d:bb:5d:d6:02:5d:01:18:
91:b8:cc:61:7a:14:84:81:66:15:bf:2e:cf:c8:b4:36:3d:be:
00:d9:2e:b4:09:84:cc:ea:a2:19:ce:92:6f:c5:d8:50:c6:ab:
d7:6f:07:c6:c6:6a:d5:4f:44:1e:c4:ae:8f:5f:e0:23:24:cf:
46:d7:82:b7:01:f3:92:f7:16:9c:97:c5:8b:a2:01:62:46:bb:
65:eb:3a:45:55:7c:4f:2c:38:4c:cf:10:2e:79:53:ab:dd:59:
7c:d1:2f:7e:44:3b:07:89:84:c2:af:11:08:c9:0c:d2:20:8e:
8c:f6:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:01 2026 by rpki-client