
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier: hX4Y5pcrILVtZ9+9c7Mh7eH1gNvaOkWNahJ1pR6pqWE=
Subject key identifier: DB:E5:89:39:23:60:82:16:96:6E:53:3A:82:DF:95:D8:E6:40:3F:EE
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number: 0157
Signing time: Mon 19 Oct 2026 05:53:26 +0000
Manifest this update: Mon 19 Oct 2026 05:53:25 +0000
Manifest next update: Mon 26 Oct 2026 05:53:25 +0000
Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: gKljHFpbwmbn82Qysox+6oOH70Q3yGmdCSGIASLOOnA=)
2: 9D269AE068A111F1B35136357747A888.roa (hash: Gf69RYkyEiyVqtQXBLOZ3FGll0UR1zPQP9SnHZMHYUs=)
3: C168AD504F2C11F1ABC5AA8AB2833773.roa (hash: L5WX9m+gsDcb4Xkr5gwSf+uci5kp8CuE133PRLJNs5k=)
4: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: OlddN+1Btn05jfz7izHATCAFLY0/IBXnBfKOwKNZEMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Validity
Not Before: Oct 19 05:53:25 2026 GMT
Not After : Oct 26 05:53:25 2026 GMT
Subject: CN=6ad5b055-b348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:cb:16:7d:e1:c6:c1:df:a7:64:bb:c9:6f:
5e:b6:ad:44:26:91:4e:98:c2:dd:07:85:32:37:80:
9e:82:c2:98:05:fc:09:a1:66:d6:3e:cb:98:a7:ac:
eb:52:fb:3f:25:0d:74:54:25:b6:40:9e:64:5a:ec:
51:49:bb:97:db:e6:83:67:ff:ef:b1:84:8c:2b:04:
6f:fc:26:d6:7d:cb:7a:78:28:c8:e5:9c:03:e6:48:
06:28:1f:21:6e:84:fc:fb:2c:94:2b:5b:9f:38:73:
8d:3e:d6:b9:fa:15:83:8d:42:32:17:4c:13:f9:38:
5e:36:4e:a8:94:bc:a6:4e:20:af:d8:06:c1:90:52:
2f:8a:2b:ba:30:7e:6b:a3:ff:78:d2:76:37:b2:29:
1e:78:e1:94:eb:26:f1:c3:d5:6e:3c:76:8e:02:f1:
43:2a:09:83:09:6c:de:28:4d:14:8e:6d:67:57:62:
8b:23:d2:76:aa:73:09:71:69:0e:08:92:95:8a:2f:
a2:72:cc:ee:89:5f:a7:9c:4d:f0:0b:86:d4:6c:0f:
22:d9:ba:10:2c:14:16:67:d7:46:6c:54:e7:52:e6:
f0:a5:76:fa:31:f4:44:a0:b2:12:43:ee:bd:1b:b4:
7d:dc:d3:b9:0d:1d:a4:32:6b:ce:8e:18:f5:04:b0:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:89:39:23:60:82:16:96:6E:53:3A:82:DF:95:D8:E6:40:3F:EE
X509v3 Authority Key Identifier:
keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:73:b4:78:0e:02:38:d5:19:71:4a:cf:d8:c9:6c:71:1d:23:
6e:4f:1c:22:17:77:a4:e7:8b:d7:4e:15:cf:57:7d:0a:87:42:
77:74:20:ec:3b:46:54:c2:0d:91:95:83:80:aa:52:76:3b:55:
c5:5f:6d:52:4a:49:ba:e6:98:e4:fa:fb:6c:84:41:3b:8b:7f:
7d:70:2b:00:b5:9e:9e:fa:83:c7:f4:c5:4a:7f:d2:d7:55:09:
27:38:4b:5a:01:ec:77:2a:d9:5d:21:fb:a3:6b:9f:43:30:f6:
3d:21:d6:27:cf:8e:74:29:2e:c7:d0:22:4e:07:be:9d:eb:43:
c0:b0:52:1c:7e:20:11:f4:b8:4c:b4:36:44:39:6d:af:8c:b7:
0c:5b:9a:7c:5c:73:7a:6a:b8:03:34:f7:dc:42:6b:26:33:c3:
7c:13:d9:4c:5e:4b:d9:d6:54:31:df:cd:1f:e9:1f:5e:82:e4:
46:bd:3f:5f:74:04:48:1a:96:35:ff:f7:36:4c:20:8d:1d:b9:
c8:3e:bc:9d:2f:88:0b:d0:46:1b:4c:d1:85:81:2d:a6:2e:7e:
ea:b6:c4:f0:e4:e0:03:b5:45:1e:b0:71:26:18:3e:4b:36:59:
10:c9:b1:f0:69:dc:17:d3:6b:c1:31:e5:1c:e0:92:7a:2c:1d:
63:a2:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:28:14 2026 by rpki-client