
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json)
Hash identifier: Sb/w6OSCNA+YutY4YHRTVRAjnuE2FGHtl0ShofUKH2M=
Subject key identifier: 37:53:38:8D:BD:35:96:08:69:B1:DF:DC:80:EB:66:4C:28:8A:4B:11
Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
Manifest number: 0100
Signing time: Thu 23 Jul 2026 07:56:35 +0000
Manifest this update: Thu 23 Jul 2026 07:56:34 +0000
Manifest next update: Thu 30 Jul 2026 07:56:34 +0000
Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: xfM2reiUzxknMHgAMOzruWXH4Nm/cbhWAneXdXe3wkk=)
2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: b/gx6jE3ztiTlC5Eac5TsfJ6NWxaMyjyfxR8HfsCYbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Validity
Not Before: Jul 23 07:56:34 2026 GMT
Not After : Jul 30 07:56:34 2026 GMT
Subject: CN=6a61c933-3afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:51:bf:93:8a:63:1b:fc:6f:ce:59:49:46:
27:ef:e6:58:55:a8:6c:94:22:6d:bc:d0:1a:5a:57:
83:89:36:76:b6:ae:c5:69:cc:8f:2b:a4:25:f1:1f:
c2:28:98:44:61:79:b6:1b:91:7a:c6:be:07:b6:9b:
52:e9:ca:67:bc:74:fb:1c:79:f7:20:e2:eb:2c:d4:
bd:74:85:a5:c5:7a:43:99:96:c5:64:17:ff:22:da:
22:bc:a5:6c:c4:a0:b4:0f:5c:15:0a:52:a8:0a:ba:
13:f7:ac:a2:ab:cd:d4:d3:b8:32:e4:02:8d:01:58:
34:55:d2:99:2c:4f:0a:20:0e:ce:ad:91:8b:67:df:
aa:12:23:69:3a:f4:9c:df:bf:ab:2e:3c:9e:88:f7:
75:46:2a:fc:bc:ef:46:ac:b5:fc:59:e0:6d:cc:3e:
69:c8:0a:cc:f7:f6:a6:a6:33:d4:f2:52:ed:a0:26:
a4:af:d0:32:3b:83:91:dd:f5:a6:cb:69:d3:c3:ee:
bf:1d:17:84:60:60:37:45:e7:fe:50:46:a5:f9:71:
d1:b4:bc:61:5a:30:20:15:ce:ea:4f:3b:54:8b:a1:
02:89:f1:98:e0:68:f9:24:5e:85:2f:e4:97:57:b0:
0a:7b:44:0e:e6:df:1d:e9:33:8f:fd:7e:2c:64:01:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:38:8D:BD:35:96:08:69:B1:DF:DC:80:EB:66:4C:28:8A:4B:11
X509v3 Authority Key Identifier:
keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:87:9b:f2:00:1e:2e:42:2d:9c:7d:2b:49:19:70:2b:ee:bd:
68:eb:a5:96:9c:1c:a9:4a:65:7b:5d:e1:46:44:c1:66:48:be:
ee:33:a5:2f:38:de:c3:31:92:75:58:e6:d1:84:a5:be:c5:fc:
3b:cb:75:6b:3c:41:63:ad:d1:fd:97:38:36:95:a9:76:03:43:
0f:5c:b6:16:b5:4f:db:13:38:a5:f3:db:a8:36:5b:a8:ba:f7:
d4:c8:63:c1:e8:37:52:43:12:32:63:77:af:89:c2:ea:10:ed:
a6:44:54:ff:4b:ba:79:b0:ca:f2:58:96:72:76:a1:53:fc:8a:
4e:b7:f0:39:90:b1:18:02:ad:eb:c2:3b:95:1b:09:4a:53:33:
ea:66:ac:69:81:f2:e1:63:ea:44:fe:cd:0d:e3:8c:ea:89:eb:
1f:94:55:db:5a:06:6c:a1:59:19:f3:4a:ca:b5:8a:bd:33:88:
5e:75:a6:24:10:5b:dd:04:3a:1a:19:bb:5c:84:23:ec:ae:29:
0b:19:b8:4b:ac:3c:20:ad:70:7c:e8:53:d9:63:7d:d7:e2:d9:
34:cf:78:50:ac:10:eb:70:8b:72:63:ab:1d:d1:23:e0:d1:d1:
2e:ae:66:b5:78:6d:99:99:7c:bf:15:e6:d2:f8:b3:9d:cc:49:
9d:43:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:43 2026 by rpki-client