
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json)
Hash identifier: 2nGz2y6c66tGU+t4iHiGvXPPHKRJLTBmloJbS2VFhbM=
Subject key identifier: 8B:C0:64:46:15:99:61:C1:9B:AD:2C:A2:9D:8F:A6:49:28:6A:1E:D8
Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
Manifest number: C4
Signing time: Wed 25 Mar 2026 06:08:52 +0000
Manifest this update: Wed 25 Mar 2026 06:08:51 +0000
Manifest next update: Wed 01 Apr 2026 06:08:51 +0000
Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: /+B7AHuB/XHgBbFRotwDOr+C3qzi8OPTUa9ppq/R/9o=)
2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: b/gx6jE3ztiTlC5Eac5TsfJ6NWxaMyjyfxR8HfsCYbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Validity
Not Before: Mar 25 06:08:51 2026 GMT
Not After : Apr 1 06:08:51 2026 GMT
Subject: CN=69c37bf4-fb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:d8:37:15:f0:14:c1:46:f7:2e:f7:9a:c3:
a7:65:56:ad:fc:1a:ee:3c:23:cc:99:a3:8d:d9:bb:
da:cf:0a:4d:ad:f9:79:92:9c:84:4e:d7:ba:33:55:
27:d4:b0:bd:8e:c1:b5:c8:37:b9:98:04:2f:ff:0c:
b5:61:a9:48:fb:07:24:c0:b6:72:91:24:40:fe:84:
01:e6:80:be:b1:72:e5:12:9c:59:cb:99:f3:4d:78:
4a:ec:b4:8e:11:f4:64:53:9b:03:83:43:2f:6d:37:
80:09:86:66:f8:ae:7b:71:6c:eb:eb:08:27:63:af:
e9:42:62:48:1a:2f:3d:e6:d2:e9:4e:23:1d:de:ca:
da:1d:b8:6c:95:02:ad:e0:66:98:12:c8:17:ed:e9:
ec:e9:ee:14:8d:12:b6:29:7b:a2:26:e1:ba:66:8a:
01:57:6d:e2:89:ff:f4:89:4f:d5:24:35:b9:ed:ee:
8b:fb:16:93:d2:18:77:f8:a9:50:98:6b:c6:ff:e0:
32:cf:91:a9:5b:ac:78:aa:6b:30:31:13:57:73:3d:
9d:da:c0:8d:57:28:c1:14:59:6f:a9:a4:d1:45:6e:
f1:2c:bf:29:0e:06:64:74:1a:50:ad:df:a2:79:b8:
71:fb:b8:15:be:2a:81:69:79:ba:ff:30:9d:9b:1a:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:64:46:15:99:61:C1:9B:AD:2C:A2:9D:8F:A6:49:28:6A:1E:D8
X509v3 Authority Key Identifier:
keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:63:51:bc:c6:c7:76:77:b0:97:da:56:e3:c0:12:88:75:de:
dc:61:26:4f:20:41:7a:d8:7a:76:47:76:f1:a0:6b:a1:fe:1b:
76:29:a1:38:9b:3d:73:92:58:a7:5d:28:06:ea:6d:33:2e:40:
89:b6:10:5e:52:70:04:17:6e:dc:d0:af:65:8d:2d:09:72:58:
51:51:32:be:d6:b5:12:b6:56:ca:d7:60:47:67:4a:8f:50:78:
1d:7b:37:bf:da:12:62:fa:d0:20:5c:26:18:f4:59:ad:0c:8f:
5d:6c:57:49:d4:8c:e5:c3:99:59:3c:ab:7c:fd:08:6e:39:05:
b1:d4:2a:52:0a:22:e0:93:e1:0c:ef:64:4e:86:0b:5f:35:31:
07:be:f9:60:61:8d:38:0c:9e:58:0a:eb:45:15:95:61:bb:c2:
51:89:13:03:e6:d3:f1:3d:49:ee:e0:da:83:39:2e:ad:14:de:
22:0d:56:9a:a9:e6:7a:87:e3:ef:7b:f9:c1:dc:03:38:af:39:
63:56:6a:e1:9c:50:79:c8:cc:2a:21:48:57:11:75:00:b4:27:
e8:3c:9c:fd:54:d7:ec:7f:7e:13:ec:01:37:43:28:7b:c8:c5:
52:e1:fe:81:a8:a1:fb:3c:f8:e5:f7:93:c8:24:45:23:28:36:
20:1c:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:18 2026 by rpki-client