
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json)
Hash identifier: iJJ4GzQtXtTlEcVNFYXSS7oXCFLbsM+x4ZObFDq0zZI=
Subject key identifier: 1D:BA:EA:B3:72:91:E9:97:DD:51:D9:3B:40:D7:7D:7C:2E:1A:84:0A
Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
Manifest number: B6
Signing time: Sun 01 Mar 2026 08:20:36 +0000
Manifest this update: Sun 01 Mar 2026 08:20:36 +0000
Manifest next update: Sun 08 Mar 2026 08:20:36 +0000
Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: z/CcwSmCeE6D0oZwW0h+MLf3hc5DOu9n5JghB7+ZYXM=)
2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: /YjMi8lxGGXF4c+I4EPLjThxhW4jZ0Qbd96sxIf1JkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Validity
Not Before: Mar 1 08:20:36 2026 GMT
Not After : Mar 8 08:20:36 2026 GMT
Subject: CN=69a3f6d4-aef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:6f:5d:45:4a:b3:9a:c4:94:33:fb:a1:c8:
9a:7d:b9:ba:7b:b0:c5:56:d9:aa:77:d2:e1:89:19:
27:5a:40:90:80:ce:89:bb:58:fd:36:1e:6f:1e:42:
bd:81:86:17:a4:ef:78:f4:e4:d0:b3:5c:d7:75:38:
38:f8:5a:45:e6:0e:90:6e:59:6c:39:0a:9a:11:79:
28:df:24:55:bd:80:45:3c:98:92:ec:0e:35:80:2c:
d6:30:75:d5:19:c5:e2:78:58:46:22:c8:b0:32:c5:
93:ff:c1:39:fb:cd:14:84:76:4d:ba:da:14:ef:2e:
bb:d8:fc:63:18:ee:c0:17:7f:bc:4c:c1:29:8f:fd:
fa:3b:8b:09:a8:d7:c3:a0:08:fd:3c:bc:99:a5:72:
42:b7:8e:56:02:ea:d5:f2:5c:0e:0c:3f:cb:f2:3e:
a4:4a:dc:f7:bb:f0:e3:5d:65:f8:0f:4d:6f:8b:14:
ee:2c:c2:97:dd:cc:ea:ba:e5:87:41:81:e6:7e:43:
44:c1:8e:e0:1b:38:14:75:17:df:50:69:ae:d6:48:
71:d0:a5:64:93:32:10:7b:06:50:03:96:b5:e2:ce:
fc:9a:3c:9f:63:58:c6:ed:4c:2f:f9:b5:20:0f:a1:
da:7b:0f:0a:e6:d0:28:f4:4f:c4:19:10:69:a1:da:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:EA:B3:72:91:E9:97:DD:51:D9:3B:40:D7:7D:7C:2E:1A:84:0A
X509v3 Authority Key Identifier:
keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dd:97:b0:6f:79:a8:ff:0f:af:42:6d:fa:b8:c9:de:c9:17:
dc:1e:8c:99:0e:af:df:dc:15:fb:c0:1b:9b:01:8b:73:fe:d5:
49:3a:2e:92:95:e9:b7:45:5b:ae:e0:00:4e:38:ab:fc:56:25:
19:81:e0:73:16:8a:ad:3d:26:78:db:69:c1:f2:35:c4:9d:83:
a2:d8:30:47:37:9b:2f:1e:36:37:b7:77:8b:73:a3:82:14:85:
4c:85:27:5b:af:3c:f5:f8:ba:b4:93:cd:d1:64:80:29:9a:c6:
90:fe:04:31:ed:a4:03:ee:a8:8e:7d:5f:a3:7f:d5:21:ac:ae:
ed:ff:1d:1b:17:e8:59:1a:d8:02:0e:61:ba:e4:d2:6a:d7:f6:
c4:cd:0f:ea:56:bb:a1:6f:d6:50:de:f8:96:71:82:14:69:87:
08:b9:fe:39:10:b3:1f:ca:6e:f0:59:ff:8d:13:60:ea:47:54:
4e:9d:62:d6:23:fc:e9:e7:a3:1d:f3:4f:fd:f1:5b:01:8d:68:
a5:79:62:2c:fa:a2:62:6c:9e:95:52:4b:8a:96:f9:20:e9:bd:
f2:1b:b1:fc:07:f9:94:e0:6d:df:1d:3f:42:f9:34:0f:cd:99:
21:ee:0b:04:7f:ac:83:aa:e7:b8:36:58:d5:39:ea:8b:b9:2d:
36:b5:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:08 2026 by rpki-client