
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
File: evqYcujQ_5IpleWJO1nDIUdnsfw.mft (raw, json)
Hash identifier: 7xYhadZBc3W3tCTLjiwqvqNxzSR9SRVVoPqZYu3d2Yk=
Subject key identifier: B1:92:9A:8C:4A:45:E3:F4:BE:A7:BB:49:FC:F1:0F:DA:8B:B3:26:40
Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Certificate serial: 09DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
Manifest number: 09CF
Signing time: Sat 04 Apr 2026 19:43:04 +0000
Manifest this update: Sat 04 Apr 2026 19:43:04 +0000
Manifest next update: Sat 11 Apr 2026 19:43:04 +0000
Files and hashes: 1: evqYcujQ_5IpleWJO1nDIUdnsfw.crl (hash: O6rdK+8oQklmTTJzi8OetNSVBmsDRdGEe8ITF+0vO2E=)
2: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (hash: l2WaNVRV5ZJuJk5CI4F7nbB931dbJOqt5R9kqGSFInI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:43:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2522 (0x9da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154AA5, serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Validity
Not Before: Apr 4 19:43:04 2026 GMT
Not After : Apr 11 19:43:04 2026 GMT
Subject: CN=69d169c8-c75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:16:82:d5:7b:ea:b4:e7:0a:89:2a:19:5b:25:
9d:89:bc:d5:b8:47:eb:4e:2d:f4:f8:30:60:4e:51:
85:3f:6c:61:8e:f7:45:b4:51:58:4e:f2:0d:00:80:
50:db:fa:fa:fc:b8:d1:0b:d3:b3:04:e4:f1:d4:c6:
d6:48:f0:bd:fa:30:05:90:62:23:28:94:14:ef:7a:
ac:61:5b:e5:cc:58:a5:c8:43:80:65:98:b5:1e:22:
77:05:1c:bf:52:1c:06:63:07:ea:ca:5b:a0:44:1d:
93:c5:91:cd:74:88:95:54:47:99:5f:d9:3e:f6:ea:
b2:d8:92:72:73:c3:d4:7f:0e:df:b9:f9:86:1a:35:
b3:73:62:1e:50:b6:a4:62:f6:cd:44:db:09:cf:79:
ea:49:f5:11:3f:8f:82:1e:2b:4e:08:0b:be:61:66:
31:ff:b3:5f:8d:bb:e6:2f:a9:94:04:f2:84:ca:46:
9e:c7:a1:33:bf:13:39:90:4d:b8:fb:78:30:5c:66:
d6:ab:ad:d4:10:e3:b0:25:cc:64:7e:54:df:89:7b:
cc:9b:5f:8d:36:7a:90:bd:6d:32:c1:24:80:f1:c1:
ac:e3:67:c2:63:bf:56:76:ee:65:ba:31:74:fe:27:
08:4d:09:4e:b0:cf:28:09:1d:ef:00:ff:da:a9:9b:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:92:9A:8C:4A:45:E3:F4:BE:A7:BB:49:FC:F1:0F:DA:8B:B3:26:40
X509v3 Authority Key Identifier:
keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:42:ea:30:14:e6:9e:3a:2b:9f:96:a0:72:16:e6:0e:39:cf:
c1:a9:08:13:c1:41:ef:9a:1c:31:e6:b0:50:7a:07:3d:4c:9a:
41:6e:b3:ab:1f:4f:66:a6:be:ab:84:04:ef:ad:22:cb:bf:fa:
1c:04:70:c9:d3:5f:be:69:90:0b:85:fd:35:24:cb:20:14:9a:
4c:40:10:9d:f0:7c:2b:c8:d9:20:2c:bc:04:46:74:9c:31:34:
60:0e:8a:22:54:df:06:2b:de:fb:e2:62:06:38:83:4b:74:42:
c7:56:2f:39:77:69:e3:18:9b:7c:76:5d:30:2d:01:59:76:88:
ce:c0:36:79:2f:d6:25:9d:52:f8:40:51:60:22:b7:1d:aa:13:
16:c4:02:f1:58:15:94:b6:db:0a:63:e5:87:49:aa:fe:65:15:
7d:20:e3:1f:72:56:0a:22:f7:a4:bb:d7:bc:d6:3a:7e:c9:9e:
e8:41:f6:20:ba:6b:67:4c:20:0a:17:b7:e7:b7:c4:09:7d:80:
66:ff:de:e1:34:a4:1b:ef:69:7a:f2:e1:1e:8c:4d:8d:b7:b5:
e8:03:19:c7:c8:cd:ff:27:c0:45:9b:cf:d9:2d:db:e1:1b:83:
a8:2e:f7:d7:8a:ec:11:cc:9e:12:70:08:4b:2f:b6:36:d0:e9:
58:45:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:33 2026 by rpki-client