
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: 2znSRUp6TdUv2HIesdC6jvn3hSL1YxhegXokIOvsCUk=
Subject key identifier: 31:24:62:79:A2:94:45:CF:37:34:5A:D1:F6:54:D5:D5:07:6C:85:FC
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0DB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0D90
Signing time: Sun 26 Jul 2026 18:14:40 +0000
Manifest this update: Sun 26 Jul 2026 18:14:39 +0000
Manifest next update: Sun 02 Aug 2026 18:14:39 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: 0QfvSdMI4OLs6NkD7WRhXheWfSnSr8Pfgs8gAw5yk3A=)
2: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: gV/ga6pNiDEaMqYwxdpiqSmurLeCeq3zgA8Tgp7bxMk=)
3: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DV3D2ua6Pzkyk7Fv2P62LJuR1RPZf+ZsaSUj29nvkgY=)
4: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: iChi/qFc6Xw/AVMPU0nsV/Vuxz3VAje7MWNsU7y29RI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3512 (0xdb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Jul 26 18:14:39 2026 GMT
Not After : Aug 2 18:14:39 2026 GMT
Subject: CN=6a664e90-4c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:89:e3:ac:62:1a:9c:4f:ee:26:7b:20:98:
4f:40:2e:70:fc:83:cc:15:1a:35:b6:d4:4a:80:52:
73:da:42:40:96:58:7b:8b:47:be:1d:21:24:7e:7e:
66:16:3a:8f:c8:02:42:14:a0:d7:78:a4:96:35:cd:
fa:b9:ef:98:31:98:64:f9:5a:f0:b3:b9:59:c0:c7:
c3:a7:4e:28:6d:fc:1f:27:c0:84:b1:2d:a0:a5:76:
7e:e3:3c:9f:e0:23:58:ab:12:e8:d8:42:d7:92:3a:
ee:86:f1:dc:90:e7:b0:39:84:61:9d:8c:81:6f:18:
31:8c:92:7a:68:73:e8:b3:bc:ea:7a:ab:e7:a5:7d:
af:dc:94:82:6c:04:90:80:9c:9b:b7:23:e9:52:3e:
f9:a5:69:0b:1f:b7:a3:f2:f0:b7:b2:72:03:69:c2:
21:86:67:b7:82:46:d9:e3:28:fe:fb:1d:2e:23:2f:
4f:77:d3:5a:c6:b9:1c:5b:02:c3:1a:d6:80:7e:63:
ec:10:2f:e5:de:af:3c:32:87:4a:45:5d:c6:b5:42:
1e:55:65:c5:6b:7c:9f:00:7b:a6:60:2b:d1:e8:b1:
71:0e:c7:84:1f:48:6d:38:a9:d9:5f:31:f4:8a:e6:
2b:3a:05:51:63:bf:29:fb:95:98:a9:ba:27:1f:11:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:24:62:79:A2:94:45:CF:37:34:5A:D1:F6:54:D5:D5:07:6C:85:FC
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:f4:0d:e8:c7:c7:bb:60:9a:23:07:6e:b1:e1:42:15:3f:
16:10:e6:f1:8b:71:5a:6f:6b:01:07:cb:81:8d:4b:e7:c1:96:
b4:e0:0f:f8:d2:d0:a7:93:ff:4b:19:8a:bd:a8:5c:19:23:a1:
a4:95:82:a0:52:06:aa:ee:a6:b5:09:d4:73:d3:23:9b:ea:db:
93:e6:82:4b:29:81:43:d2:ef:c1:39:e0:89:96:46:20:f7:3e:
6f:1b:7d:24:ba:fc:c9:73:df:8b:85:70:32:25:1b:33:7a:18:
0c:94:3e:f0:a0:71:75:a1:e6:e1:d0:da:fe:fe:b8:9d:c1:43:
bb:f3:c0:00:ea:16:8c:79:e4:80:e4:40:24:c8:4c:54:31:58:
8c:6f:fc:b6:8e:12:51:93:b1:31:dc:87:d0:6a:c9:92:e2:1f:
dc:50:ab:ce:5c:3c:04:ba:61:9b:67:ae:d7:d4:54:dc:f4:5e:
ae:5a:e3:41:d4:45:ea:04:4a:b4:5b:09:f0:46:b8:80:1b:4c:
bf:bf:bf:04:f1:e8:85:06:b8:ff:36:e8:18:f5:b2:e4:42:a0:
cf:f7:ae:77:d5:f5:4c:b6:a5:b6:6b:c5:26:e5:2e:70:0c:8b:
d7:9f:07:58:26:a0:c8:a3:62:ce:73:04:dd:7d:54:c8:56:5a:
4e:95:d0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:04 2026 by rpki-client