
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier: gI3Pc953FHu6ns2nT8xaG6QRurxROLD3d+ZyeXACszM=
Subject key identifier: 98:BF:58:50:2A:B9:72:1B:9C:05:39:C3:40:64:51:2B:4F:6B:3F:34
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial: 0EFD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number: 0EE1
Signing time: Tue 28 Jul 2026 17:47:20 +0000
Manifest this update: Tue 28 Jul 2026 17:47:20 +0000
Manifest next update: Tue 04 Aug 2026 17:47:20 +0000
Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: NoCxneelA6zzaFuuHLB0xHCKSuYKLIzcYDJYN5Z5jrk=)
2: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: IXDMktuW1eMer2Jfj/UCXO4EyeiZ3TkOZOE5RKCxpb0=)
3: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: rUpaSwZKGK2SflEl5oRSUOsZ6h9lQccT+3OZkbf79PI=)
4: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: 8IEOcn859bdj07hvdLHHiu5te9v+Mf6Y9BRqk4uy5v8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3837 (0xefd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Validity
Not Before: Jul 28 17:47:20 2026 GMT
Not After : Aug 4 17:47:20 2026 GMT
Subject: CN=6a68eb28-a589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:cb:60:d9:2f:76:81:27:49:98:1f:fc:0a:
c8:63:0a:b5:b0:95:a2:8a:1e:41:81:bf:c1:d5:ec:
88:1d:04:4b:4e:da:02:b4:6c:d5:21:49:83:4d:93:
72:67:9e:6e:e9:55:42:bd:4d:d9:dc:c9:2e:93:79:
de:27:99:bc:5d:77:68:8a:c3:63:f4:bb:92:cb:98:
29:5a:fa:24:f6:8a:8c:f9:1e:e3:65:5c:da:22:2a:
e4:98:4d:5a:4e:ca:7f:2b:e2:5f:3c:13:e3:2a:90:
71:7c:62:97:39:18:9d:eb:20:13:8a:b8:a3:8b:e1:
fc:e7:16:0f:29:56:d0:b4:44:d5:19:b9:45:fa:67:
e6:87:63:8f:3b:d5:c4:48:c3:06:11:0c:ee:95:2a:
cb:43:7f:b6:58:0f:a0:00:35:de:3c:6a:40:4d:9a:
44:28:15:7e:a0:34:76:be:38:17:88:a0:86:09:21:
37:38:7f:58:d9:76:20:36:e4:4c:35:86:b4:d4:14:
0f:ac:7f:c8:a9:48:68:ed:02:a7:ad:1c:2a:88:5f:
94:9a:10:52:c2:f7:9d:7f:5f:3b:be:e4:34:ef:6f:
2b:bd:1f:d0:cf:e5:e2:04:3d:24:05:0b:1f:dd:10:
44:8a:43:a2:08:5a:74:e1:cd:be:f3:a6:d3:d8:c1:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BF:58:50:2A:B9:72:1B:9C:05:39:C3:40:64:51:2B:4F:6B:3F:34
X509v3 Authority Key Identifier:
keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:f0:ab:50:3e:8b:53:0f:35:54:01:a9:d7:de:88:56:5c:58:
70:18:ed:88:16:26:e6:eb:7b:f2:b5:e7:5f:ae:85:5a:86:28:
83:32:fe:02:90:0a:56:97:9e:57:78:e4:79:9f:59:05:fc:0d:
96:ea:9f:0d:65:c3:e9:35:62:c5:2c:0e:65:7f:8a:ac:de:92:
79:d4:7a:71:5f:ef:38:60:0c:07:96:ce:38:9b:1f:e5:10:07:
d2:8c:12:db:51:61:5f:be:6e:74:e8:3f:12:59:3a:6c:bc:c3:
8d:10:f2:84:c3:51:fb:34:53:5e:1b:04:46:a6:70:d4:96:87:
6b:02:3a:ff:d2:f1:6f:ca:be:94:89:3c:cd:46:43:1d:ca:6c:
5a:55:86:24:0a:7a:55:11:76:41:eb:8e:6a:0b:46:ef:04:e9:
75:cd:fe:46:40:64:53:12:50:49:be:e8:4d:e0:a0:2e:5f:3c:
5d:cb:37:73:d1:e1:96:b7:ea:95:ed:de:7c:91:34:5d:c3:f5:
9b:74:84:e4:8a:98:0d:8b:5e:ff:f2:82:50:0d:c8:89:68:cf:
08:d6:2b:89:f3:28:81:d2:c3:f0:d0:99:26:2e:e3:9f:f7:95:
b0:15:25:36:81:18:66:e1:5a:5c:e1:e1:f8:5d:f3:38:e1:f1:
54:ab:f3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:13 2026 by rpki-client