
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier: SZ2oQsixzPIQjTK/8hVOJXgxUiYwmdEmPWlYLUGMGKU=
Subject key identifier: 41:97:16:A3:E9:A1:7F:0A:32:B0:C3:06:67:30:CC:9E:5F:35:5D:1B
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial: 0F2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number: 0F0F
Signing time: Mon 26 Oct 2026 17:37:56 +0000
Manifest this update: Mon 26 Oct 2026 17:37:56 +0000
Manifest next update: Mon 02 Nov 2026 17:37:56 +0000
Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: CLlfqynKZQrbGB5ZwSAjeYdAfKsA/1yF4YGX7fwevZQ=)
2: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: rUpaSwZKGK2SflEl5oRSUOsZ6h9lQccT+3OZkbf79PI=)
3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: IXDMktuW1eMer2Jfj/UCXO4EyeiZ3TkOZOE5RKCxpb0=)
4: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: 8IEOcn859bdj07hvdLHHiu5te9v+Mf6Y9BRqk4uy5v8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3883 (0xf2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Validity
Not Before: Oct 26 17:37:56 2026 GMT
Not After : Nov 2 17:37:56 2026 GMT
Subject: CN=6adf8ff4-bea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:27:a2:b0:93:11:cc:2f:cd:3c:e5:8f:6b:
db:42:04:81:67:f3:03:27:d0:be:66:68:8b:ee:01:
0b:68:b4:79:6b:c9:b5:a4:e3:c5:67:ff:36:46:70:
ab:46:80:4e:6e:6f:a7:f6:2a:30:86:14:d6:b1:03:
ef:15:94:17:fe:5f:99:7b:76:fb:15:fd:1c:8a:f4:
d7:7b:a4:95:9b:5b:e4:b3:2b:eb:b6:05:31:86:c6:
f9:71:78:a2:75:bb:3f:28:f7:93:ad:f8:af:e2:2f:
fa:7d:f6:65:35:e4:58:ae:e2:c3:73:74:4c:bc:8c:
90:6b:bf:e8:41:23:bd:e2:09:57:3d:9e:b4:a6:1f:
49:de:b2:96:83:d3:74:f1:56:9f:53:77:d6:52:7d:
10:ca:d0:dd:a9:8b:60:a3:fe:a7:9c:77:1f:66:93:
a7:12:86:ab:92:d7:50:f7:5f:c3:ff:00:f2:dd:0a:
a6:6a:c1:f2:4a:90:54:69:95:d9:26:b6:25:4f:f4:
17:ee:b8:49:34:1f:09:40:93:ba:67:c9:f9:7d:ff:
50:e6:fc:00:f6:8c:cc:fe:77:22:ab:54:d4:04:35:
5b:30:67:f4:3d:c2:36:45:5b:f2:57:03:8a:6e:fe:
76:7b:73:6b:96:14:5d:34:87:ae:84:79:13:2f:fd:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:97:16:A3:E9:A1:7F:0A:32:B0:C3:06:67:30:CC:9E:5F:35:5D:1B
X509v3 Authority Key Identifier:
keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:12:bb:2d:c0:d6:0e:3f:35:2e:e4:75:c2:9d:1a:06:28:
79:46:13:31:bd:5f:ed:f9:af:fd:d5:9f:be:ed:c0:94:be:00:
0c:9a:7e:71:35:90:51:d1:eb:20:88:77:f1:7a:28:55:be:2b:
d9:2e:4f:35:8a:1d:36:e2:06:9b:97:1f:51:b7:c6:53:36:88:
58:6e:87:d2:8e:10:20:6b:a7:95:28:d5:20:26:66:8b:d9:59:
96:d1:fe:c9:84:b2:16:0a:6b:bc:03:85:46:b7:30:1d:28:ea:
af:8c:20:2b:b8:4e:bc:fd:83:33:75:b3:25:48:3f:da:20:4c:
76:07:8c:d7:e9:ae:72:59:03:be:c3:7d:17:60:12:0e:7f:44:
0b:26:16:b7:1c:84:69:9d:3a:7e:be:6b:30:7d:50:27:5e:38:
aa:dd:8b:cf:df:fc:8a:96:cf:4b:2d:0f:eb:ab:34:44:12:4d:
68:7d:57:41:a1:67:bb:7c:0b:ae:be:e2:b3:ef:80:35:db:49:
33:fd:f2:85:2c:45:01:f7:74:4e:d2:8b:1b:dc:e4:f9:d3:94:
be:8a:7a:09:61:4d:ff:6e:f1:48:4f:c4:1b:a3:6d:3f:22:e7:
8f:22:b2:09:26:2e:c0:59:4f:f4:d1:5f:2f:c7:b7:ab:1e:8e:
22:2c:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:22:27 2026 by rpki-client