
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File: EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier: ms/uqbriPbTPlXif1+8gEL4JUZLuP+QulwbfqIRcB9s=
Subject key identifier: 96:C6:57:5F:05:C5:00:3D:2B:B1:2A:20:D5:7C:15:3D:5B:BF:1E:ED
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer: /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number: 49
Signing time: Thu 23 Jul 2026 10:24:53 +0000
Manifest this update: Thu 23 Jul 2026 10:24:53 +0000
Manifest next update: Thu 30 Jul 2026 10:24:53 +0000
Files and hashes: 1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: dWXQRY9BCmJv7HolpwgvCEw9iS9DHc+HBcc5aX3Jao4=)
2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: A3c7atco3d4E3cIrhHmLieVqgFTfi0qUJCdFz0a95To=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Validity
Not Before: Jul 23 10:24:53 2026 GMT
Not After : Jul 30 10:24:53 2026 GMT
Subject: CN=6a61ebf5-2e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:37:26:2b:5e:e7:12:c4:af:9d:ff:32:e0:
54:9c:2f:f3:6d:f3:2e:dc:a1:c4:da:2d:ab:5f:c1:
a2:19:52:df:ed:67:d7:a5:93:ec:98:d8:02:23:bb:
e2:b9:d9:c5:9e:7a:c4:eb:f9:2b:0c:9a:11:be:d8:
d8:97:0b:d4:86:4a:5f:ac:ba:c7:2d:58:62:0b:47:
65:70:d4:85:59:6e:46:e9:e4:3f:49:5e:ea:61:06:
b9:0d:05:96:72:3b:81:ee:36:57:b0:a3:0d:b8:1f:
be:e2:2e:9e:d0:f0:fe:76:e4:e5:9b:9d:d3:26:58:
69:57:74:75:62:6a:75:1c:61:28:e1:4a:0c:03:d0:
47:ec:b4:16:23:06:f3:9a:9d:7f:4e:3e:92:58:d8:
b9:8b:68:e5:fe:32:49:45:68:0b:6f:15:0a:b2:cf:
05:22:2b:8c:5c:a8:df:da:b6:24:81:d4:e8:58:19:
ab:9b:6c:ec:82:db:ca:b2:90:ae:ed:fb:9a:b7:07:
a4:35:44:c6:ce:ee:34:4c:92:0c:23:98:55:5b:ec:
8d:e7:cd:9c:f1:a2:24:ae:53:8d:38:cc:9b:04:e5:
fb:f1:23:5a:79:a7:3b:3e:97:d8:c1:cc:dd:9b:f9:
71:72:00:c4:60:48:be:23:c3:5e:48:6b:5d:29:af:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:57:5F:05:C5:00:3D:2B:B1:2A:20:D5:7C:15:3D:5B:BF:1E:ED
X509v3 Authority Key Identifier:
keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:59:b5:a8:3b:c4:c3:db:88:7c:f9:cd:7f:a3:88:96:38:
2a:72:6f:74:5d:45:17:bf:c8:2b:c9:c3:d8:dd:8f:2d:5b:f7:
68:1c:b5:b5:34:2a:42:28:35:7b:7b:d4:4e:df:14:67:b7:e2:
87:78:69:53:45:ee:b3:75:75:e2:77:f0:26:06:9e:c9:1b:34:
82:97:8c:4c:a7:dc:e3:0e:7a:3e:6c:db:44:3d:ce:b5:b1:83:
4e:4b:cf:0e:9a:e2:52:60:5d:5d:61:39:42:9b:b8:13:64:2c:
27:e7:34:1f:8b:09:71:bd:3d:d8:e7:fc:04:84:19:e7:fc:ba:
53:93:ca:b4:44:83:6d:f3:fd:e2:66:fb:61:91:dd:ef:70:4b:
0c:38:24:b0:4a:82:18:d5:e5:bf:48:03:a0:5f:08:4d:cd:8e:
04:04:37:48:fd:2a:5e:8b:44:a7:76:86:13:79:f1:ba:02:12:
af:88:52:7d:e0:2a:86:b2:fe:69:9a:07:8a:84:7c:a1:3b:c9:
b4:49:a1:36:ec:15:a1:30:dc:1a:f6:73:ce:70:1a:82:cf:ae:
31:99:e1:b9:d6:f9:13:9f:76:da:7d:03:13:ab:7a:fa:a5:5d:
8e:3e:98:0f:97:12:d7:14:f8:b7:b5:c2:32:32:f4:f1:28:05:
b6:d1:14:9b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
M0Y5MDExMC8GA1UEBRMoMTJGMDg5NkUxQTNDQkYyNTAxOTEwMDA5RDk4NzkwNkJB
NTNDNkNDMTAeFw0yNjA3MjMxMDI0NTNaFw0yNjA3MzAxMDI0NTNaMBgxFjAUBgNV
BAMTDTZhNjFlYmY1LTJlNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDc0jcmK17nEsSvnf8y4FScL/Nt8y7cocTaLatfwaIZUt/tZ9elk+yY2AIju+K5
2cWeesTr+SsMmhG+2NiXC9SGSl+susctWGILR2Vw1IVZbkbp5D9JXuphBrkNBZZy
O4HuNlewow24H77iLp7Q8P525OWbndMmWGlXdHVianUcYSjhSgwD0EfstBYjBvOa
nX9OPpJY2LmLaOX+MklFaAtvFQqyzwUiK4xcqN/atiSB1OhYGaubbOyC28qykK7t
+5q3B6Q1RMbO7jRMkgwjmFVb7I3nzZzxoiSuU404zJsE5fvxI1p5pzs+l9jBzN2b
+XFyAMRgSL4jw15Ia10pr1F5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlsZXXwXF
AD0rsSog1XwVPVu/Hu0wHwYDVR0jBBgwFoAUEvCJbho8vyUBkQAJ2YeQa6U8bMEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwLzAxRkEwMDcyMUMz
NzExRjE4ODQ3QUIyQjM4M0Q4QzY3L0V2Q0piaG84dnlVQmtRQUoyWWVRYTZVOGJN
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRXZDSmJobzh2eVVCa1FBSjJZZVFhNlU4Yk1FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz
RjkwLzAxRkEwMDcyMUMzNzExRjE4ODQ3QUIyQjM4M0Q4QzY3L0V2Q0piaG84dnlV
QmtRQUoyWWVRYTZVOGJNRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA/Ylm1qDvEw9uIfPnNf6OIljgqcm90XUUXv8grycPY3Y8tW/doHLW1NCpCKDV7
e9RO3xRnt+KHeGlTRe6zdXXid/AmBp7JGzSCl4xMp9zjDno+bNtEPc61sYNOS88O
muJSYF1dYTlCm7gTZCwn5zQfiwlxvT3Y5/wEhBnn/LpTk8q0RINt8/3iZvthkd3v
cEsMOCSwSoIY1eW/SAOgXwhNzY4EBDdI/Spei0SndoYTefG6AhKviFJ94CqGsv5p
mgeKhHyhO8m0SaE27BWhMNwa9nPOcBqCz64xmeG51vkTn3bafQMTq3r6pV2OPpgP
lxLXFPi3tcIyMvTxKAW20RSb
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:08 2026 by rpki-client