
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier: fr7VqzFb9ODKfzCYQl1frv43olWyhAQ9ZQEC81JXtEU=
Subject key identifier: 60:2E:EF:8F:38:31:25:0C:9A:EB:3C:5B:A1:9B:8E:A8:80:EB:50:5B
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial: 0EE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number: 0EC8
Signing time: Fri 12 Jun 2026 17:39:29 +0000
Manifest this update: Fri 12 Jun 2026 17:39:28 +0000
Manifest next update: Fri 19 Jun 2026 17:39:28 +0000
Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: pp1bFpx5ePkl9QKkYckXmXQZdVi8jx4Tl8EQ/+FqfjY=)
2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: XQHNZu9WrDOHXcrOnwFedWqMNY7Ym61M7N8j6VKuPNo=)
3: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: XHrlt6xoD1A14UELLtFlgRu6lNHev3zfVPKKrggxdO4=)
4: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: aigYc/n/JGvIbVIQwDO9bKK+eMUG5TvhV7PY2a5Qs6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3809 (0xee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Validity
Not Before: Jun 12 17:39:28 2026 GMT
Not After : Jun 19 17:39:28 2026 GMT
Subject: CN=6a2c4450-3217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:8a:d9:96:1b:ce:fb:97:07:7b:09:33:32:
92:ff:95:1f:54:8e:8f:17:89:db:8d:97:e9:ef:29:
c3:31:01:91:d9:d1:d4:47:5e:18:57:4a:d6:83:d2:
61:90:31:48:7d:d5:11:2f:b8:77:46:03:83:0e:ea:
2e:a8:b0:20:78:a7:3d:cd:b1:3e:6f:a4:8b:21:4a:
cc:fc:86:2b:d4:9a:73:a2:e9:b2:80:f7:31:0d:84:
3d:44:e0:cc:65:d3:73:f3:30:67:8e:9e:3e:a5:67:
a7:b2:29:37:9e:57:17:56:d1:91:7d:99:e3:3b:b1:
c6:ec:1c:da:dd:46:b6:f0:ea:b4:cf:79:7d:54:ca:
f2:71:c5:6b:54:d9:a4:60:a6:37:10:b8:58:86:15:
88:05:2c:55:56:5b:74:be:66:ae:c2:32:e4:f0:d3:
6c:cc:87:bf:34:b3:fc:1e:d7:da:9c:02:74:f9:99:
63:bb:19:cf:ed:84:c0:bb:a4:74:b6:0f:32:35:94:
2e:d4:b3:39:27:74:d7:48:9e:ec:4d:32:23:2a:6a:
3a:e9:30:36:31:7f:3a:a5:70:fb:30:d5:ac:f0:ea:
79:94:45:f1:ec:ef:50:60:13:82:5a:4f:e3:47:12:
2f:2d:47:a3:6d:3c:f0:03:ff:47:4e:7b:6f:cb:95:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2E:EF:8F:38:31:25:0C:9A:EB:3C:5B:A1:9B:8E:A8:80:EB:50:5B
X509v3 Authority Key Identifier:
keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:98:db:41:87:75:6e:96:69:89:d8:5f:2c:78:88:95:98:e8:
37:4b:33:38:9d:68:c2:92:d3:07:dc:90:ab:31:f1:bc:96:fa:
d4:5b:16:cb:7d:99:28:3b:2a:df:0f:ae:8f:7f:ae:c3:89:5b:
b6:b8:35:9c:12:c7:9b:4d:ae:70:ad:d2:ee:43:f1:72:e9:7b:
b5:af:b0:d8:ed:64:56:23:33:79:67:6a:8e:70:67:fd:3e:93:
f3:83:b5:a9:0c:ce:5e:55:89:23:13:d4:5c:b0:ff:35:0e:41:
f4:43:9c:a9:52:fb:de:02:db:d7:8f:da:cd:64:dd:c3:bf:16:
2a:56:7c:1e:a4:c6:bf:fb:68:94:7e:32:03:55:24:d1:68:de:
d1:11:18:04:15:d2:59:40:31:3f:4f:c7:c1:58:c2:54:4d:7f:
cc:5e:24:28:26:65:8d:09:c8:c1:ab:31:ac:4d:f7:e1:17:af:
3b:52:73:64:54:23:f8:99:11:b2:e2:a0:b5:d3:75:ea:09:b2:
89:34:f8:b3:98:26:e6:e9:f5:1a:57:8d:2d:13:4b:0b:b3:8f:
51:ea:10:12:ff:55:db:c4:27:71:44:3b:0b:4f:c5:e0:3b:31:
18:05:61:44:48:c3:68:4f:50:da:71:d1:3f:35:7b:9b:e4:98:
88:0e:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:11:07 2026 by rpki-client