
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier: 22CI+B+lBka9FBD4LYcs62C3ErALcdahS0WpaNBPHRY=
Subject key identifier: 8E:92:24:4A:03:F1:07:88:07:AC:AF:BF:C5:02:67:FF:0D:E2:AF:B2
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial: 0F2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number: 0F12
Signing time: Sat 31 Oct 2026 17:49:07 +0000
Manifest this update: Sat 31 Oct 2026 17:49:06 +0000
Manifest next update: Sat 07 Nov 2026 17:49:06 +0000
Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: VIykik2X09n7Ulgvqpu51HXDaMlni8oR/L/9dPezN88=)
2: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: rUpaSwZKGK2SflEl5oRSUOsZ6h9lQccT+3OZkbf79PI=)
3: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: 8IEOcn859bdj07hvdLHHiu5te9v+Mf6Y9BRqk4uy5v8=)
4: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: IXDMktuW1eMer2Jfj/UCXO4EyeiZ3TkOZOE5RKCxpb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 17:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3886 (0xf2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Validity
Not Before: Oct 31 17:49:06 2026 GMT
Not After : Nov 7 17:49:06 2026 GMT
Subject: CN=6ae62a13-6f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:c9:3f:31:12:df:71:99:82:0f:e4:29:6a:
be:c5:e0:59:37:18:fd:c2:6b:e3:26:90:ed:e9:8a:
07:55:32:2d:80:f9:be:b9:48:5f:e9:28:54:f7:5d:
75:04:2e:33:44:0d:d9:29:dd:0d:19:f6:f3:44:b5:
5b:0e:2c:62:ee:da:01:f6:b0:03:51:7d:67:29:b9:
29:7e:92:29:6a:28:85:17:90:55:76:96:94:ff:c2:
ce:5b:7f:76:6f:08:7d:b5:8e:4f:4d:c9:f3:a1:8a:
cd:20:3f:0c:44:83:e0:dc:ef:e8:ab:ed:8a:30:80:
e5:23:4c:ba:ca:d9:60:44:60:64:b5:71:4b:2f:8d:
0c:e1:6d:7f:b5:9b:a8:da:e2:85:dd:1e:c7:59:97:
8d:13:93:b1:81:58:db:9e:7d:69:e0:07:00:45:47:
be:07:9c:2b:a4:ac:49:33:60:8d:0d:04:b5:3f:30:
d0:54:70:60:b4:1d:23:6e:0b:96:93:19:99:31:35:
f6:27:60:fd:16:2f:77:84:c0:d1:35:26:04:8f:bb:
26:58:bd:b1:63:10:a3:b8:57:a4:78:df:c8:14:1c:
2b:9b:4e:4d:9b:56:cc:f7:86:09:3e:d2:15:37:05:
bb:88:5b:91:c9:80:e4:4e:1e:f6:6a:9a:07:32:87:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:92:24:4A:03:F1:07:88:07:AC:AF:BF:C5:02:67:FF:0D:E2:AF:B2
X509v3 Authority Key Identifier:
keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f6:21:3b:7d:2d:8e:e3:b7:a7:c4:a6:20:91:67:69:94:22:
5f:4e:78:6c:49:c2:f2:40:8b:02:b6:fc:d0:83:05:6b:6a:80:
17:7a:e8:9f:b3:88:1c:22:65:50:05:fc:57:fa:58:cb:4d:1e:
3d:4c:00:02:f9:cb:8c:c7:ae:46:37:82:e5:1d:8e:5a:5c:e0:
ba:a1:ee:f1:97:76:4d:e5:d8:1a:52:ae:4d:a8:6a:b1:a0:4f:
59:f6:e7:d4:57:0e:d5:fe:fa:69:fa:06:0a:bc:f3:30:e9:95:
67:aa:47:97:37:28:aa:1d:cc:c8:97:d0:1e:22:dd:83:2e:9e:
06:96:a2:3d:ee:ed:6c:93:32:98:a7:16:38:ec:fb:41:5a:45:
bc:77:64:df:98:a4:0d:49:13:ea:8f:72:ea:da:6e:8c:f6:dd:
da:67:ab:cd:ef:d3:73:60:8c:4e:67:e8:b9:7f:03:ed:ce:53:
bc:3f:60:e2:aa:fd:83:b2:aa:d4:c4:ae:71:c1:d4:b3:31:a6:
87:e3:61:5d:4b:45:94:e4:b3:4b:48:e9:5d:9f:00:1a:c0:f9:
75:01:1f:90:86:eb:2f:1c:37:9d:2c:dc:37:24:14:9a:b5:75:
fd:10:7f:61:93:06:ea:3b:d2:56:52:2e:5d:47:d4:49:77:f9:
c5:b2:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:29:07 2026 by rpki-client