
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: P8oFZ41/S8YMXCHd0LlborEMUZaOLoQKBo2tGIHpNS0=
Subject key identifier: EB:9F:E6:87:16:C1:C1:62:F5:F0:AE:56:85:9E:88:43:86:EA:F3:F9
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0DD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0DAD
Signing time: Sun 20 Sep 2026 17:54:37 +0000
Manifest this update: Sun 20 Sep 2026 17:54:36 +0000
Manifest next update: Sun 27 Sep 2026 17:54:36 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: CpsQXH4g07snpRCuqR/mV0qvaB4GcG8JagjeD6bo8t0=)
2: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: gV/ga6pNiDEaMqYwxdpiqSmurLeCeq3zgA8Tgp7bxMk=)
3: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: iChi/qFc6Xw/AVMPU0nsV/Vuxz3VAje7MWNsU7y29RI=)
4: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DV3D2ua6Pzkyk7Fv2P62LJuR1RPZf+ZsaSUj29nvkgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3541 (0xdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Sep 20 17:54:36 2026 GMT
Not After : Sep 27 17:54:36 2026 GMT
Subject: CN=6ab01ddd-29b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:7b:2a:82:64:32:05:54:7f:85:7b:26:7f:
e0:d7:78:88:89:6a:cb:e5:d1:c4:e8:14:64:9e:8a:
8f:b1:4f:09:6e:9c:71:6f:9e:21:27:7f:4a:06:f3:
c5:26:e7:66:ac:b1:8c:a5:b5:39:e0:85:e0:ee:02:
f1:f3:12:2a:d2:08:4e:f5:3e:42:3c:a1:ea:8f:96:
51:1c:d8:b4:2a:17:34:df:0d:c2:a0:4a:e0:d5:1f:
b0:51:ee:d0:81:90:d7:82:20:ae:59:3b:4f:1f:af:
26:cb:2a:04:c8:4e:03:61:62:0b:db:dc:47:71:86:
0d:ec:e9:fb:e5:06:1a:88:41:9b:a2:45:77:2b:a9:
67:86:2f:7e:12:8c:12:03:0f:70:38:60:c6:0b:25:
c0:84:b8:14:3e:0c:8e:6f:6e:70:42:1c:0a:ab:56:
3a:d2:cb:5e:52:74:a6:67:d2:37:e9:52:2d:2e:39:
5a:86:ee:70:bc:9c:38:1c:7a:06:16:ca:2d:97:fa:
34:93:0b:9e:4f:b9:c5:37:6f:66:af:eb:34:0c:29:
65:88:fb:88:7d:47:3f:88:bf:71:56:9a:4e:aa:55:
4a:d5:aa:4d:bf:35:f2:18:df:e9:f1:07:7b:fb:32:
b0:62:28:17:fe:12:04:cb:70:cc:41:22:61:39:10:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9F:E6:87:16:C1:C1:62:F5:F0:AE:56:85:9E:88:43:86:EA:F3:F9
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:08:4f:cf:bc:c9:89:a3:f8:97:7c:61:c3:34:86:d2:d2:
85:2f:3d:5d:55:c4:66:24:4b:26:64:52:06:a5:54:4f:28:3d:
6f:9e:d4:fe:f2:6e:ab:90:80:5c:3c:19:41:62:9e:4d:e0:13:
06:33:43:87:1c:41:18:c9:cd:ed:ea:6e:05:5f:7a:39:c6:5a:
48:a2:27:24:91:c2:41:21:5a:71:9d:e2:71:59:7f:4b:2e:35:
da:93:57:12:39:2c:9d:84:a9:a7:8c:f5:25:e0:14:18:16:ac:
2b:33:a5:8b:73:0d:63:15:27:85:70:e8:35:6a:a1:ba:56:b6:
0b:bf:63:2d:a2:45:02:ec:6d:92:b2:08:16:55:12:ca:11:74:
4d:5f:83:26:86:f9:18:39:69:fc:81:d5:6f:e1:3d:c9:31:87:
22:62:f6:1a:15:35:d2:c1:ff:e0:81:4e:16:62:1e:ff:58:4a:
c6:50:82:3b:29:ad:6e:92:ce:15:b8:d6:14:84:2e:b7:10:9b:
ed:1d:52:d6:71:72:98:f4:d9:11:cf:93:10:4a:13:04:70:43:
c3:f6:70:02:91:fe:bd:79:77:17:4b:8d:2c:02:64:ef:9c:ef:
d5:d4:72:56:1c:62:0a:b5:b7:c8:d7:a2:4d:88:e1:5d:94:81:
eb:a9:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:13:46 2026 by rpki-client