
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier: zxOnzoFmELBmE5/0yRXuuB/jNpZTbbMeDo23UjkWGBE=
Subject key identifier: D0:39:B1:86:4D:8D:1D:18:10:2B:A8:D3:A3:57:A3:01:C6:1A:1E:E9
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial: 0132
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number: 0127
Signing time: Fri 17 Jul 2026 06:56:08 +0000
Manifest this update: Fri 17 Jul 2026 06:56:07 +0000
Manifest next update: Fri 24 Jul 2026 06:56:07 +0000
Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: SjjrqypwsX3LsKr5om9vJW47PdaW9Xxk0xc82q4jm54=)
2: C168AD504F2C11F1ABC5AA8AB2833773.roa (hash: L5WX9m+gsDcb4Xkr5gwSf+uci5kp8CuE133PRLJNs5k=)
3: 9D269AE068A111F1B35136357747A888.roa (hash: Gf69RYkyEiyVqtQXBLOZ3FGll0UR1zPQP9SnHZMHYUs=)
4: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: OlddN+1Btn05jfz7izHATCAFLY0/IBXnBfKOwKNZEMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Validity
Not Before: Jul 17 06:56:07 2026 GMT
Not After : Jul 24 06:56:07 2026 GMT
Subject: CN=6a59d208-e96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:63:c9:88:ff:c5:9b:07:64:9a:8c:35:d9:
e5:0e:f1:68:6d:ae:4d:1b:35:7a:81:b2:6d:84:5f:
af:dd:06:b9:55:86:d2:dd:e5:78:06:be:53:c6:44:
a9:69:a9:a0:67:c7:45:3a:e4:81:28:92:73:ce:13:
ba:41:bc:79:26:60:3b:19:20:42:31:cb:a1:10:3e:
0d:4e:23:38:27:54:3d:27:82:ed:4c:47:87:91:74:
c6:c4:2b:99:5e:c6:47:ea:30:f8:54:08:d8:ef:2d:
9f:b6:56:36:2e:d1:85:4c:d3:2c:ce:60:52:6e:75:
72:54:db:1e:87:73:0c:26:eb:b9:01:17:75:22:a3:
cc:e1:d6:d0:58:fc:2c:5e:85:4c:3d:71:39:91:ff:
84:cd:28:c2:f7:c3:7e:e9:36:bc:2b:4e:1b:de:f3:
85:27:57:d5:11:41:f9:13:96:3f:6f:7c:22:d7:69:
40:82:e0:ae:f0:62:29:15:0c:a7:91:4a:4f:cc:2c:
32:89:67:4f:62:ff:85:eb:23:fb:3f:c6:fd:1c:b8:
2a:a2:a2:90:85:ee:e6:c4:5c:8e:ee:1d:98:68:27:
82:58:69:dc:1f:3f:71:3b:84:7a:42:4f:a1:02:8b:
45:7d:3b:e9:e8:af:65:3f:14:fa:85:e0:b3:59:1e:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:B1:86:4D:8D:1D:18:10:2B:A8:D3:A3:57:A3:01:C6:1A:1E:E9
X509v3 Authority Key Identifier:
keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dd:a7:2e:7b:7c:8a:31:f4:3a:5a:49:d5:03:09:1b:8c:c2:
4b:7e:97:d9:5f:63:73:79:5f:ee:e7:f9:60:4c:01:07:d8:13:
bc:c3:9b:fc:0a:0f:c7:34:da:d2:b0:5c:67:b1:67:3a:c3:77:
18:9b:cd:5a:68:ef:ac:19:8b:73:4c:29:20:1b:b9:ec:ee:23:
07:1f:29:57:e1:41:a9:d5:6b:3d:8f:9f:d1:2b:a2:5d:7d:18:
cc:52:ad:79:4a:ff:28:6e:10:ef:34:b2:d2:26:54:d0:63:06:
9a:74:da:c8:81:bb:19:ba:34:ad:27:88:45:dd:ce:74:df:44:
88:23:15:c1:f2:59:7d:f2:15:6b:9a:27:33:d0:71:cb:b8:44:
fb:25:08:ba:63:22:df:0e:d1:3d:44:2f:42:6a:0f:6e:76:c2:
9d:63:2c:42:36:c5:8c:29:86:a2:bf:8b:47:3e:7e:15:a2:57:
41:14:ed:c0:f8:e5:af:96:38:1d:6c:0a:bb:e0:a4:c0:97:7c:
6a:df:4f:58:28:ed:6c:df:50:ea:f7:0f:ff:58:37:aa:d8:4e:
4b:7c:76:4c:59:4f:2a:4f:e7:8b:2c:41:4f:fa:5a:92:55:a5:
f5:9a:c3:8f:ef:89:ec:58:b5:be:5c:8c:c3:7b:76:c1:b7:66:
96:73:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:58 2026 by rpki-client