
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File: EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier: +hTdi8Fltb9Drwo6n79xFn2VjTj1dktYxDkecUpH1lw=
Subject key identifier: 7A:78:11:47:65:CF:FE:39:E9:B3:FC:09:4C:7A:4C:5B:D7:2D:4A:20
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer: /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number: 68
Signing time: Mon 21 Sep 2026 08:02:07 +0000
Manifest this update: Mon 21 Sep 2026 08:02:06 +0000
Manifest next update: Mon 28 Sep 2026 08:02:06 +0000
Files and hashes: 1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: 8Hc4+sJtSamrAWa0KKagn7LoWuzCRZ5hpfkwT4w5npY=)
2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: A3c7atco3d4E3cIrhHmLieVqgFTfi0qUJCdFz0a95To=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Validity
Not Before: Sep 21 08:02:06 2026 GMT
Not After : Sep 28 08:02:06 2026 GMT
Subject: CN=6ab0e47f-4c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:c0:56:59:ab:72:e1:07:40:c9:c4:4c:08:
9d:99:d9:68:ac:6c:a7:70:ac:c7:e0:72:68:29:17:
64:37:b2:95:1e:a8:11:ac:c6:f0:fa:fa:85:09:1a:
7b:03:18:2d:19:ab:c4:cc:ce:f1:65:43:f3:4a:a7:
8c:29:d8:e8:7a:2d:eb:38:e3:b1:1a:ee:c4:59:d2:
04:a0:08:5b:61:20:f0:e4:62:4a:e9:39:45:81:e5:
c2:af:34:7b:0f:dc:5d:ff:e3:54:ea:15:bc:fd:6c:
6f:01:92:0a:69:50:0d:ce:97:37:0a:15:da:fb:24:
66:ad:ae:2f:1d:e7:51:24:31:5e:0c:5d:60:8e:53:
46:8c:13:b6:69:66:87:53:69:e6:2f:1d:5b:db:9c:
f8:25:b5:53:6e:02:a9:f6:40:eb:01:70:a7:fc:b5:
5c:a2:21:dd:85:6b:43:d5:f6:82:31:c6:1c:90:7a:
62:53:f2:37:dc:29:91:58:b5:b7:aa:48:78:0b:44:
f0:a8:59:b6:14:86:6c:34:a0:89:b7:cc:6f:9d:70:
34:72:38:17:37:81:3b:b9:cf:b1:89:12:2e:6e:a9:
c1:8a:98:a9:4e:65:b1:11:d7:a4:65:41:0a:2d:5e:
db:46:28:cb:fa:0a:6b:75:12:4f:0a:1b:21:7e:3b:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:11:47:65:CF:FE:39:E9:B3:FC:09:4C:7A:4C:5B:D7:2D:4A:20
X509v3 Authority Key Identifier:
keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:fa:6a:50:a3:7a:d9:d6:e7:5a:87:0b:82:a5:e5:6c:0f:5b:
fb:b0:ce:9f:84:05:66:6e:b3:91:2a:c5:7b:01:83:84:fa:aa:
c1:e0:54:75:f5:f7:33:53:ed:39:7f:17:67:f6:6b:da:4f:00:
72:e6:5e:5a:e3:de:9a:d4:82:57:a2:6f:e1:c9:da:b0:11:0e:
eb:de:aa:38:76:f4:32:25:88:ed:a4:fb:49:9a:e8:ff:c9:8f:
e6:10:d9:79:67:7d:ce:93:6b:a5:91:91:ca:94:54:1d:b1:66:
28:06:79:56:0f:1f:ca:a4:35:50:a9:2a:cb:a1:a9:33:47:4c:
86:3d:5a:42:f2:75:9b:a8:5e:c6:dd:d4:62:90:9c:08:37:78:
f2:9f:e3:c3:04:6c:67:40:ec:5a:93:3c:31:33:5d:41:1f:a7:
3c:cc:a2:3c:b7:69:43:bc:80:a3:a8:db:a0:39:75:01:f2:52:
d2:aa:0b:77:6c:15:d1:0b:7d:bf:54:91:35:33:87:2d:c8:a7:
d4:dd:00:55:8b:3b:ff:b3:44:37:f9:4f:ba:94:5f:74:e7:62:
0d:fb:e6:5f:7b:ab:a4:7a:b7:ac:98:a1:0f:57:c7:aa:d3:f7:
a2:7e:41:5e:46:ac:bb:73:62:66:27:3b:ce:ed:a8:dd:aa:7c:
8b:d5:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:04:49 2026 by rpki-client