
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier: s3pNtVJa0erPWPA4fQ2EwLeQsD7maWrzwYl8YM91Oqw=
Subject key identifier: 31:7C:A1:67:BF:A2:F2:31:16:56:89:30:4E:46:4F:5F:47:44:6A:F7
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number: DC
Signing time: Tue 03 Mar 2026 06:10:27 +0000
Manifest this update: Tue 03 Mar 2026 06:10:27 +0000
Manifest next update: Tue 10 Mar 2026 06:10:27 +0000
Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: 7m3u4sbZ0a4WeSHo3Ui8m49rjBbHWKkGrKcnfuZLl1A=)
2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Validity
Not Before: Mar 3 06:10:27 2026 GMT
Not After : Mar 10 06:10:27 2026 GMT
Subject: CN=69a67b53-ba87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:ca:4f:9b:0b:90:ae:1b:90:ae:bf:21:cb:
ea:26:f1:d7:95:fd:8b:62:80:69:a0:54:c1:79:ab:
24:53:28:2e:80:03:42:93:1e:d1:54:1c:bb:93:b6:
74:56:e5:45:46:42:1c:c3:e2:ae:61:0c:85:d7:1c:
0f:7b:98:83:1b:33:c7:a8:89:b5:f3:94:db:8b:fc:
89:65:83:30:4d:51:ec:55:ec:7f:d5:1c:88:54:5d:
e8:ac:fd:56:f4:71:db:36:7f:88:ab:78:73:01:f7:
95:4f:0f:fd:fe:72:d7:ad:aa:f9:f7:96:59:ce:9f:
03:4c:28:b1:bd:92:33:cd:cc:dc:f7:e0:4e:18:1d:
36:1d:e2:70:ab:eb:f7:9e:bb:85:cf:f8:54:ac:98:
19:fd:bb:16:35:27:73:2b:ef:56:97:e4:d7:a4:31:
69:db:80:d6:8c:05:98:a3:5a:2d:45:0f:2b:ce:18:
90:85:64:01:63:a8:5c:e4:4a:12:59:5b:a7:c6:1b:
ec:d1:2a:8e:28:09:ff:1d:ba:0e:a0:56:bf:72:1a:
e9:f4:bb:4c:d0:11:83:d9:c8:e0:ff:44:80:a2:f3:
d8:e4:bd:99:0b:e9:3e:33:d9:54:1b:1a:ea:c5:a9:
ab:b3:16:c0:89:db:ef:3d:10:12:57:a0:7c:57:67:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:A1:67:BF:A2:F2:31:16:56:89:30:4E:46:4F:5F:47:44:6A:F7
X509v3 Authority Key Identifier:
keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:29:57:84:df:9f:3c:cb:13:d8:b1:fc:77:0f:30:b0:99:27:
46:1e:55:7b:49:79:cb:9d:a8:b5:57:7b:7e:b7:51:09:4e:68:
ca:3e:39:a7:15:26:f6:f6:68:27:c3:53:dd:a8:72:9d:4d:58:
b5:2a:eb:76:47:df:35:c6:7c:2a:61:38:48:0d:a8:8b:63:66:
30:39:56:19:1c:56:40:9b:76:b9:5d:7d:27:a3:0d:d0:21:76:
5d:63:a6:0c:4d:6b:a5:24:f6:d3:93:f9:f5:14:b0:21:38:a1:
3b:61:2a:cf:50:6b:1c:b0:3b:f5:e3:40:bb:fc:c6:75:e8:fc:
14:2a:8e:b4:38:e4:5c:88:65:14:76:b3:f8:7d:74:47:a0:fd:
b1:a3:02:b0:26:cf:69:d6:6f:b9:3a:af:67:34:5a:53:ad:9e:
b9:03:91:3c:44:b1:8f:a4:5a:63:12:9f:b7:31:c6:ce:11:7b:
f3:47:63:6e:9a:f2:cc:86:c3:98:c2:29:e7:2c:06:36:a1:00:
f7:7c:8e:cd:f9:06:93:68:4e:8d:c8:df:6c:2f:94:b0:1c:08:
70:ae:94:b3:0e:6c:4b:84:84:16:74:e3:1f:83:f4:72:62:64:
96:63:9f:ea:19:63:91:2a:98:e1:c4:8c:96:dd:d0:e1:4e:b1:
0d:65:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:48 2026 by rpki-client