
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
File: EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft (raw, json)
Hash identifier: TKnP4QXGgCHTwUKmsERuci1NbNZWtr9kBMPN3gKFrT4=
Subject key identifier: DA:76:17:42:9E:A1:47:06:66:9F:1C:A8:D5:74:56:C0:16:60:67:B0
Authority key identifier: 11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13
Certificate issuer: /CN=A91F1451/serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
Manifest number: 99
Signing time: Mon 21 Sep 2026 07:25:04 +0000
Manifest this update: Mon 21 Sep 2026 07:25:03 +0000
Manifest next update: Mon 28 Sep 2026 07:25:03 +0000
Files and hashes: 1: EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl (hash: TPssAZpKgmRA+LoecNdL6Otg1/IzoJhWG3FuyLLV2ME=)
2: 00CEF3C805F911F1BB5A205A1A3D8C67.roa (hash: pL0a4n/xbwb/7ldCyV+DkeXgBlSEcBB9ELR4HhBbKlc=)
3: ACD9C588D02211F0B0E25D5AC4F9AE02.roa (hash: ay5HgAGU9lTCTPCqa8RgDwe7VpeL06ChtuS6jh6wRNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl
rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1451, serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013
Validity
Not Before: Sep 21 07:25:03 2026 GMT
Not After : Sep 28 07:25:03 2026 GMT
Subject: CN=6ab0dbcf-6b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:50:21:d1:2e:94:01:aa:09:6b:58:d4:78:
6f:bb:3e:78:bf:fd:ca:45:cc:17:03:b0:68:f2:d9:
14:9d:05:29:40:92:b2:ba:14:73:ca:4f:f4:be:08:
a4:96:bf:7a:fa:03:13:72:e8:7c:88:9c:c0:cd:15:
fa:f7:c8:2b:21:a5:14:aa:c1:b9:54:f3:8b:4f:02:
01:8b:40:47:cb:c1:06:8c:f1:5a:bf:7a:ec:6c:8e:
a7:a9:61:a1:fa:5e:4a:3a:b2:f1:b5:49:6b:d1:97:
1f:7f:f8:e3:a6:56:b3:e7:ab:7c:66:38:38:eb:69:
f5:a0:96:92:a0:dc:fe:78:5c:00:3b:5a:3a:76:8f:
b1:57:01:a4:75:9b:29:8d:ec:ec:86:38:48:33:58:
8f:62:6b:05:ed:a2:50:85:39:1e:0d:24:79:4f:48:
b1:d1:ca:17:97:86:5b:21:21:01:b5:e1:49:d8:91:
d6:db:d6:a2:5c:11:83:d4:61:35:7c:3c:a2:0a:27:
4e:b6:24:99:86:12:b8:e4:4d:4b:f0:b3:96:8e:ff:
ad:5f:c0:20:2c:39:67:0e:16:24:5e:c9:c1:c0:21:
ae:e0:d4:76:f9:eb:5a:2b:e4:d7:63:ad:08:87:d8:
51:6a:e9:9b:48:b5:95:4b:b2:91:8e:27:f5:b0:d2:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:17:42:9E:A1:47:06:66:9F:1C:A8:D5:74:56:C0:16:60:67:B0
X509v3 Authority Key Identifier:
keyid:11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:4a:66:bf:9d:6c:3c:88:64:f8:27:14:40:43:d7:8c:0d:e0:
16:8e:ae:60:3c:8c:ab:9f:41:3b:be:de:7b:70:eb:51:d0:61:
c1:87:51:c3:1a:ee:da:77:7b:8a:69:51:ca:39:9e:b9:84:c7:
06:fc:77:95:88:33:16:58:9c:d6:9c:70:28:37:a5:2b:c4:b6:
a1:19:b4:7a:4d:15:bc:09:55:db:a0:f4:28:ed:23:91:d4:1f:
41:80:4e:a2:90:81:06:95:ed:a5:79:77:d0:4d:4e:a7:1a:f7:
5c:42:3d:8a:b3:38:09:ae:6c:31:b4:e3:d6:c0:f3:62:0d:23:
8b:39:32:1e:b8:04:a1:30:5f:d8:86:1a:56:0d:ec:06:5b:27:
5c:b7:38:b1:cf:9f:6d:8c:cb:c2:c8:40:86:f7:b1:ef:e7:e7:
63:a0:41:8a:76:4a:4d:e6:eb:02:76:25:e8:a8:3e:ab:43:f1:
53:9f:c6:19:dc:0c:e1:86:ce:ae:33:8e:58:d6:60:5f:f6:a8:
8d:05:35:f3:e6:94:e6:7c:b4:73:1a:f9:d9:70:35:0c:77:2f:
39:25:fd:a4:a1:69:62:08:dd:17:d5:23:fe:cb:dc:84:43:01:
15:e0:32:11:d0:9c:f3:f2:34:7f:1b:9e:4d:00:11:c8:fd:03:
68:a0:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:01:29 2026 by rpki-client