
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File: EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier: kTQO6xk15SZPt2lT6ocJursF9KASdZ9xIpIeyScgOG0=
Subject key identifier: 90:36:AC:3B:6A:F5:38:C7:2D:F8:C8:A4:BC:22:21:85:B1:AC:5D:F8
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer: /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number: 72
Signing time: Sun 11 Oct 2026 08:31:31 +0000
Manifest this update: Sun 11 Oct 2026 08:31:30 +0000
Manifest next update: Sun 18 Oct 2026 08:31:30 +0000
Files and hashes: 1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: NJCEc7QENqW4HWAs6Gk1/zlI6ia6fNIs2Aip+rFPxfM=)
2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: A3c7atco3d4E3cIrhHmLieVqgFTfi0qUJCdFz0a95To=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 08:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Validity
Not Before: Oct 11 08:31:30 2026 GMT
Not After : Oct 18 08:31:30 2026 GMT
Subject: CN=6acb4963-a069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:bf:57:80:01:2a:22:28:c6:af:c4:8d:2b:
cf:6b:d0:20:a9:6d:25:f2:4c:b9:07:72:79:98:9c:
82:60:ad:a8:94:05:99:c4:42:ec:3c:a8:32:96:c6:
ed:70:2d:90:88:68:fe:37:2e:8c:e6:c8:ab:8c:14:
0d:79:ed:5a:74:74:a1:aa:d9:06:d6:42:7b:7f:a0:
d2:73:cc:89:78:11:dd:e4:7c:5e:62:ac:7a:51:d7:
00:8a:0b:89:a6:e2:31:ea:f6:7f:7f:c3:9c:eb:09:
e2:02:cd:5d:e6:2b:f2:9f:af:db:17:75:5e:31:54:
20:97:dc:72:c9:20:e6:a3:ae:fc:c8:be:1d:e8:70:
b4:d0:a3:c3:e6:48:bb:20:d6:bb:7c:30:a7:6f:b0:
67:53:da:6f:6d:de:d3:18:6e:19:75:f2:b9:fe:92:
f1:4b:c1:74:85:79:d7:53:e6:be:4e:07:2b:75:29:
1d:fa:ce:c7:ed:de:06:b6:b2:de:5d:f1:af:16:55:
5e:44:67:55:c2:3b:82:48:09:df:ca:dc:49:03:e1:
79:26:c9:46:a0:f6:bb:92:bc:83:ca:fd:6e:ab:0a:
75:73:64:eb:bf:27:9e:f1:87:34:12:22:42:bc:7c:
e9:09:2c:f5:05:40:ae:ec:21:d1:4b:76:7b:46:1b:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:36:AC:3B:6A:F5:38:C7:2D:F8:C8:A4:BC:22:21:85:B1:AC:5D:F8
X509v3 Authority Key Identifier:
keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c5:f6:e8:26:c4:31:cf:64:4e:75:3e:d1:35:04:11:bc:b0:
01:b6:32:61:51:4b:0e:e1:a7:c9:20:10:1c:04:22:11:dc:55:
dd:cf:23:0f:e5:45:f0:7d:a2:2c:d2:70:e8:51:82:29:7f:b1:
3a:7a:42:4b:bc:8e:d9:34:ca:99:39:4e:8a:36:32:f9:ff:49:
92:54:52:ab:19:7f:48:11:11:69:51:90:91:c3:9e:28:b0:37:
e7:92:f0:ee:08:81:89:2c:d0:ea:e0:52:82:49:58:7f:16:f3:
f4:e9:69:22:6e:65:f3:ac:da:5c:f1:7e:74:e4:fb:f9:45:30:
f7:10:e1:59:ce:91:da:2e:8b:bd:e1:0d:02:b0:b3:15:f5:ec:
7d:48:75:12:28:01:7e:91:14:5b:7a:d2:ab:c6:71:52:fe:fb:
b6:c0:ff:39:2e:4e:05:86:84:de:93:59:98:1e:62:b1:9f:01:
17:0e:48:dd:b7:4e:f8:5b:d0:4d:d6:68:9a:12:c7:78:0d:38:
fc:30:de:70:56:c2:55:11:12:a5:97:e2:73:b0:e5:4f:ed:88:
de:7d:22:40:33:62:3f:bb:cd:b0:1b:0b:71:a5:06:85:3a:46:
cb:9a:9f:73:a4:3e:28:a4:dc:8f:d2:7f:4d:3d:a9:56:21:12:
2b:46:16:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:09:01 2026 by rpki-client