
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/EABVOpvJE4QgnFKpyPZRi1bVxpg.mft
File: EABVOpvJE4QgnFKpyPZRi1bVxpg.mft (raw, json)
Hash identifier: R2C1tRjJz11iztpVXsJy+UGlSjvA7KJJNA8NjB+I9mA=
Subject key identifier: EF:B3:45:C8:A9:47:58:50:67:4B:52:2C:35:1F:A1:BD:6C:B3:9E:4E
Authority key identifier: 10:00:55:3A:9B:C9:13:84:20:9C:52:A9:C8:F6:51:8B:56:D5:C6:98
Certificate issuer: /CN=A9185308/serialNumber=1000553A9BC91384209C52A9C8F6518B56D5C698
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EABVOpvJE4QgnFKpyPZRi1bVxpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/EABVOpvJE4QgnFKpyPZRi1bVxpg.mft
Manifest number: 21
Signing time: Thu 23 Jul 2026 10:57:18 +0000
Manifest this update: Thu 23 Jul 2026 10:57:18 +0000
Manifest next update: Thu 30 Jul 2026 10:57:18 +0000
Files and hashes: 1: EABVOpvJE4QgnFKpyPZRi1bVxpg.crl (hash: yUGkrXMPm2w+fQkGX99A01eqWB2xLsfOxR+5I+H7r9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/EABVOpvJE4QgnFKpyPZRi1bVxpg.crl
rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/EABVOpvJE4QgnFKpyPZRi1bVxpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EABVOpvJE4QgnFKpyPZRi1bVxpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185308, serialNumber=1000553A9BC91384209C52A9C8F6518B56D5C698
Validity
Not Before: Jul 23 10:57:18 2026 GMT
Not After : Jul 30 10:57:18 2026 GMT
Subject: CN=6a61f38e-9c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:8e:42:35:22:80:47:ec:60:22:9b:30:c4:
92:94:ad:36:85:ce:86:a6:ea:0a:09:69:a9:3e:8d:
b5:80:22:ba:2b:48:7e:3d:a2:90:e2:66:d0:42:ef:
53:2b:96:e8:36:84:58:20:65:70:80:6f:cc:3d:e9:
a7:3e:f7:98:d5:f5:eb:79:36:97:30:77:6d:4e:5b:
49:02:04:ed:92:9c:fd:05:48:a7:1d:5e:82:a6:1c:
06:5d:95:0d:d7:d7:a7:2d:6e:65:c4:e9:27:0c:fc:
1d:99:ab:bd:e4:0a:ab:df:3c:d6:fb:c8:b4:6b:b5:
44:9a:f6:47:50:15:2f:e1:46:3e:dc:35:dd:fc:b9:
74:52:76:24:9e:70:ac:be:8a:03:fa:f0:b0:ed:61:
60:67:f4:cb:79:49:98:1c:9d:1d:f4:94:9e:31:62:
b3:b9:75:b9:43:3f:d1:3d:1a:04:4a:0b:c5:cf:b9:
4f:dd:57:93:21:24:13:a0:a3:d5:4b:62:2b:12:6a:
4d:5d:b7:6f:5f:60:c6:52:08:34:d9:b6:56:41:50:
2c:54:2b:d3:27:f8:3a:79:43:66:de:60:f3:56:58:
64:a9:0b:40:78:de:14:4c:11:7b:43:84:41:c9:25:
2f:47:75:7b:1e:91:c2:2b:06:f1:17:c3:b9:50:b7:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:45:C8:A9:47:58:50:67:4B:52:2C:35:1F:A1:BD:6C:B3:9E:4E
X509v3 Authority Key Identifier:
keyid:10:00:55:3A:9B:C9:13:84:20:9C:52:A9:C8:F6:51:8B:56:D5:C6:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/EABVOpvJE4QgnFKpyPZRi1bVxpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EABVOpvJE4QgnFKpyPZRi1bVxpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185308/F57472BA557A11F188F83279CB833773/EABVOpvJE4QgnFKpyPZRi1bVxpg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:8e:49:57:6b:99:87:13:32:8f:58:91:45:dc:82:5a:2a:
1c:b8:61:16:da:a1:ab:96:b4:3f:6f:4f:2e:9b:73:1e:ec:28:
da:13:d1:98:8a:ae:0c:ab:62:62:d0:ea:6d:d9:db:69:8b:0e:
b3:87:60:ee:3b:e6:d7:f8:86:d2:61:25:d2:91:b2:b9:31:a4:
b0:b9:20:08:b3:d9:2f:43:e4:b1:5b:55:03:04:39:81:9d:cc:
28:3d:93:34:06:31:1a:d9:41:80:00:63:5a:96:15:3d:fc:0b:
34:45:65:5a:82:1a:c8:d5:25:07:1c:b8:5a:b2:1a:59:4d:83:
a5:7c:bd:63:f3:52:47:88:50:5c:d2:0c:8b:20:e6:e1:07:0f:
21:e1:0b:0b:11:74:7e:f0:3c:89:2f:2c:8e:23:11:28:c3:59:
b8:27:eb:dd:1c:be:52:28:ca:e2:b1:fe:e5:f1:30:15:dc:3b:
3c:26:16:6f:3a:8f:12:10:6f:4c:4a:13:f4:71:37:a3:1f:9b:
ad:cb:09:41:9a:a7:3f:88:f7:c0:ea:0c:d8:6f:b2:69:08:1c:
85:5a:9d:df:a7:21:69:7b:2e:99:45:bf:5d:a3:a6:4a:50:8b:
58:fa:05:c4:d7:ac:5a:8b:5f:26:bc:cd:0d:d3:99:5a:bf:2f:
a7:95:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:23 2026 by rpki-client