
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File: EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier: MEeB9wC1U4pZBtbjcDZV+aeAOi33LgF9AKdj6ncB/Js=
Subject key identifier: DB:F6:15:26:39:C7:DB:FB:8A:83:9F:FC:DB:71:0E:52:70:F2:01:AF
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer: /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number: 24
Signing time: Wed 13 May 2026 08:58:50 +0000
Manifest this update: Wed 13 May 2026 08:58:49 +0000
Manifest next update: Wed 20 May 2026 08:58:49 +0000
Files and hashes: 1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: rGyQ0uwLuZ4t9xUBJnruw8M+FZ5eKO9j8XXwmSZT8dA=)
2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: p3H/WotmZtJh2VCUVKyKjndLevGeDwif8IcNwZKNTmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Validity
Not Before: May 13 08:58:49 2026 GMT
Not After : May 20 08:58:49 2026 GMT
Subject: CN=6a043d4a-dc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:80:f8:bf:f5:16:3f:b7:c8:39:9b:b1:75:
0e:a4:9f:2c:57:1d:cd:26:38:02:3e:63:ee:9c:49:
1a:47:9a:cc:3e:d5:3d:4d:c6:65:22:de:50:61:ba:
45:33:87:a2:c9:0b:9e:f0:19:3f:c8:44:a4:a4:3b:
39:84:7f:5e:8e:80:c7:63:63:3b:e3:8a:1b:a8:e8:
64:03:6e:58:c3:ef:e1:c5:b7:96:63:df:76:15:22:
2d:3e:d1:e0:42:22:05:63:6d:04:40:de:fd:d3:c7:
14:41:db:86:86:37:a5:41:e1:13:29:b1:af:21:90:
8d:e1:52:20:93:94:f4:ed:8a:65:bf:9b:51:eb:b1:
db:4a:2f:8e:9a:29:15:78:3b:17:be:28:2a:a3:3d:
0c:7a:d6:ad:37:ad:63:c3:bf:f1:d5:f2:cb:25:f9:
76:ff:f0:60:9e:f2:26:8d:00:8b:5c:97:33:a6:16:
92:90:e5:59:5c:67:c1:13:57:12:cc:da:b6:96:44:
3b:d4:5a:6f:23:27:38:ed:e3:9e:a9:20:e8:cb:a6:
2f:c9:33:06:6f:79:1c:e8:79:e8:98:a4:30:29:4b:
ae:d9:92:cb:72:96:43:e1:a4:f3:e3:73:36:88:9c:
50:32:8d:a4:a9:97:30:30:cc:2a:05:7f:29:64:26:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:15:26:39:C7:DB:FB:8A:83:9F:FC:DB:71:0E:52:70:F2:01:AF
X509v3 Authority Key Identifier:
keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:81:76:14:99:22:8d:f5:90:c6:0b:e5:bb:6e:d7:a0:bb:ba:
b8:bb:c0:eb:1d:7b:64:86:c9:5a:6c:fc:ad:ff:de:26:a5:5c:
37:88:3b:83:99:49:53:9c:1a:b9:65:ef:19:8c:89:a4:48:11:
9e:2a:9c:18:75:89:17:2b:f0:56:71:8a:1c:39:01:47:16:1a:
81:7a:ad:9a:be:38:4d:b0:c8:e1:33:72:c4:c9:0c:5e:ec:ff:
03:a4:8e:b5:60:64:0b:aa:fc:55:7c:82:be:f7:ea:9a:d6:94:
ff:f2:c8:1c:a3:09:cb:1c:ff:74:69:f7:08:79:23:b6:ce:56:
26:e0:78:96:91:a5:f8:29:1c:9e:31:81:b9:16:b6:78:2e:49:
8d:c3:8f:b3:f0:2f:eb:c6:c3:22:2a:98:4a:4d:70:da:b5:98:
7f:4c:87:46:3f:bb:bb:e5:a5:de:31:e2:16:9d:09:b8:6c:2d:
0e:49:d6:7f:4c:bf:15:eb:50:b9:e3:55:e8:a3:a0:25:1f:4b:
85:b9:16:fa:2a:66:80:4f:d9:01:c3:b2:62:6a:1f:11:ad:0a:
82:7c:51:6b:15:65:73:9b:0f:be:30:63:f2:0e:ae:6b:b7:1a:
c6:57:ad:9c:8e:ff:03:d7:11:ef:ba:23:47:b4:ce:f1:bd:9b:
75:08:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:28 2026 by rpki-client