
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
File: E0jUaqcLAwOwQCPwSmMFi01pY7c.mft (raw, json)
Hash identifier: 3CN9p0SIPolsVgVTSfup3jk0rT0VPzZFFoGZbCogI1w=
Subject key identifier: 57:58:07:5B:A0:EB:24:15:12:7A:69:DA:69:28:24:8C:1E:8E:3A:55
Authority key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
Certificate issuer: /CN=A91D30A3/serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
Manifest number: 4E
Signing time: Mon 27 Jul 2026 10:40:02 +0000
Manifest this update: Mon 27 Jul 2026 10:40:02 +0000
Manifest next update: Mon 03 Aug 2026 10:40:02 +0000
Files and hashes: 1: E0jUaqcLAwOwQCPwSmMFi01pY7c.crl (hash: LZbChEaiUMelZh+mL1f15NENzAQIx5OkvhNYGS9VmgI=)
2: 5417C204181311F1BB2D572D153D8C67.roa (hash: H47VU5jKVIkhr4upeiTnHoZK3wbZs9wvqmAqlKqwqns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Validity
Not Before: Jul 27 10:40:02 2026 GMT
Not After : Aug 3 10:40:02 2026 GMT
Subject: CN=6a673582-de88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:94:6a:88:85:b4:b6:2c:a8:b4:f2:57:4c:26:
3b:08:1f:4f:23:40:f6:c1:66:88:30:44:7e:e0:6c:
01:6a:f5:d8:80:7c:8d:bd:8f:31:e8:4a:45:bb:42:
4e:98:ae:78:ee:c9:35:e9:eb:87:8c:c0:4e:d6:e4:
fd:dd:ac:d6:a6:1d:b5:ce:5d:13:55:7a:24:56:08:
f4:da:61:f9:55:74:24:f0:a6:0b:ac:d2:e0:c4:4a:
69:c7:69:d2:c5:5c:76:59:29:27:44:d3:58:be:d7:
ff:90:cc:1e:46:50:e0:67:b4:90:8a:70:bc:1d:fc:
9b:cd:70:80:b2:68:c5:9b:23:1f:ea:8f:e2:44:0a:
c0:56:99:be:05:ef:5b:86:86:77:04:f2:a0:fe:70:
99:c9:b8:51:9b:8d:f8:9b:bc:d4:86:13:a3:de:f7:
51:d8:8d:61:76:79:f1:e7:29:36:48:7a:7a:1d:7b:
11:02:45:c6:af:ef:8e:7c:88:d8:e4:8f:c3:f6:ab:
b1:3b:b8:47:fc:bb:3d:b0:fc:95:bd:99:3f:47:a4:
1b:f8:71:bf:c2:40:b9:58:a7:c5:a5:50:ae:ef:94:
65:1c:9e:5b:ca:f6:07:33:71:71:ca:5b:80:21:b2:
04:06:5b:10:77:92:c1:c9:9c:86:43:0f:d7:59:f0:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:07:5B:A0:EB:24:15:12:7A:69:DA:69:28:24:8C:1E:8E:3A:55
X509v3 Authority Key Identifier:
keyid:13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:de:a8:4a:20:24:fe:09:6e:ff:a1:97:d9:6f:d8:61:fb:a9:
12:f9:ab:ee:ca:49:16:54:05:96:ec:15:81:3a:a5:e7:9c:61:
39:44:c7:65:3c:6f:79:df:ce:b4:8a:d1:48:14:5b:a9:a3:57:
7f:d8:75:5d:56:8c:75:c9:f4:f0:56:04:cc:85:53:b2:04:5d:
44:bc:41:24:7b:e3:66:82:2c:77:a4:e2:9e:d3:e6:f0:87:fb:
03:08:32:bb:69:85:97:b0:06:f0:85:40:29:d9:24:62:35:ed:
fd:0e:7d:4d:14:8f:f3:4a:76:6c:17:df:63:63:b3:b4:e9:0c:
2b:61:0d:73:31:5c:5d:df:9c:df:f9:ec:38:15:11:26:16:95:
84:18:a3:b6:8c:c5:57:53:64:5f:e4:bc:e6:bb:99:c1:a7:7c:
dd:7d:0f:8a:38:62:d8:69:5f:38:04:c1:74:76:29:30:b6:1b:
21:08:3f:8d:23:78:07:1d:ad:31:b0:30:fa:72:b6:18:ee:7e:
46:c9:71:78:3b:2d:f1:01:62:62:81:52:e9:94:2a:da:ca:26:
82:a6:d9:09:8e:2b:ee:cf:10:4f:4e:3d:74:c5:63:6e:94:a2:
c4:56:e3:ce:a0:52:80:be:ba:5e:ce:c9:e5:9f:a4:06:2a:2e:
1c:be:cb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:37 2026 by rpki-client