
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: fPzCpIRqkWTiAECVcqH1tYmUMAMzmO7qN6n6Z/lOIlc=
Subject key identifier: 24:57:86:06:A2:C6:1E:EC:71:E4:05:75:D1:4D:53:A8:3C:BF:39:41
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0DA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0D7A
Signing time: Fri 12 Jun 2026 17:58:41 +0000
Manifest this update: Fri 12 Jun 2026 17:58:40 +0000
Manifest next update: Fri 19 Jun 2026 17:58:40 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: V6SKH6rCvYHc10qcVR0JlxyTRR4uXIlsKFveJuPsNEM=)
2: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: gV/ga6pNiDEaMqYwxdpiqSmurLeCeq3zgA8Tgp7bxMk=)
3: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: iChi/qFc6Xw/AVMPU0nsV/Vuxz3VAje7MWNsU7y29RI=)
4: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DV3D2ua6Pzkyk7Fv2P62LJuR1RPZf+ZsaSUj29nvkgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3490 (0xda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Jun 12 17:58:40 2026 GMT
Not After : Jun 19 17:58:40 2026 GMT
Subject: CN=6a2c48d1-0c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:37:98:03:49:93:ea:c8:a9:f5:45:f6:ae:
2f:99:d9:17:4a:88:7f:45:5f:f4:2b:f8:1d:c1:4f:
c8:71:a8:ae:43:72:95:df:70:ed:86:bb:b4:48:57:
64:89:d5:d9:cd:32:43:e0:d8:8b:a1:1c:6d:10:c8:
52:15:58:c4:6b:82:f5:14:dc:24:a1:48:5d:06:6f:
21:59:3b:0d:ab:15:45:44:3f:a3:b7:b7:d3:7d:52:
fe:6b:35:57:7e:a7:8e:d3:82:5a:f3:fb:ac:48:c1:
53:5a:1d:e0:44:b4:15:f1:4c:ba:3f:85:d6:b1:81:
17:9d:08:43:cc:43:33:3d:3b:b8:8b:ef:32:bc:96:
4d:e0:c5:46:7d:dc:d4:29:19:60:66:b7:91:ec:0b:
83:79:37:55:17:2e:65:3a:37:6a:93:b7:bf:5e:22:
cd:79:34:66:64:e8:df:a1:a9:a3:e7:c1:22:55:28:
e4:69:18:f7:c2:fc:9d:09:34:e4:d2:dd:84:ce:dd:
1b:98:92:9b:7c:0d:e6:ca:6b:3c:66:99:da:7e:82:
b7:66:af:9a:f9:39:33:e6:5c:3f:d2:ed:fe:c1:46:
4f:7d:cc:5b:5c:60:1b:06:d2:bc:c9:8f:f5:92:de:
6f:b8:3d:63:41:60:d7:3b:1d:fb:2f:e2:c5:f6:23:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:86:06:A2:C6:1E:EC:71:E4:05:75:D1:4D:53:A8:3C:BF:39:41
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:9e:0d:8b:c0:18:f6:3d:b0:fe:88:7b:2b:a7:d6:25:21:2b:
05:b1:dc:7a:87:4b:25:91:68:6e:9b:eb:c3:81:31:fb:11:20:
f4:4e:5c:43:6a:5f:9c:da:c3:b9:a8:8b:02:72:4a:52:7b:9e:
a6:c3:87:18:1c:89:90:d1:62:bf:eb:58:e6:9b:4d:4d:f1:1a:
72:3d:3b:86:13:60:87:0f:14:9a:be:37:c7:9f:34:8d:76:df:
f5:47:97:c7:f6:3c:16:e1:d0:46:da:da:ff:cd:c1:d8:fc:57:
9f:f1:3b:67:1d:33:83:5a:6d:a9:2d:eb:80:b3:11:f8:26:a4:
2c:36:c3:4a:ae:d4:86:5b:9b:07:ef:07:63:b4:6c:e4:cb:24:
15:c2:1b:d0:26:80:5c:ff:58:41:a5:8c:58:48:63:35:ef:ec:
52:1e:1b:fb:ac:79:a1:fc:f8:98:b1:ed:a9:b1:c8:d8:fb:04:
58:b6:aa:40:67:70:d7:84:8e:68:c7:b2:24:b3:4d:b6:49:90:
0a:78:e7:1c:b2:7b:5e:33:fa:ec:72:23:5f:2f:3c:ac:2b:58:
05:9b:f7:81:cc:a3:ac:85:f5:38:1e:ae:33:d8:2f:6a:df:1f:
69:8b:55:34:1c:f5:f5:90:73:90:4b:f0:57:a7:3e:fb:de:b4:
55:86:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:13 2026 by rpki-client