
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: +JjgoZ4s08/WiIhCHfoTTnJ0Al/dCNw2rbvOkfF03dI=
Subject key identifier: 13:43:36:F3:F9:19:B5:1E:C0:55:91:A6:E3:AC:E6:94:24:9D:3A:88
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0D92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0D6A
Signing time: Tue 12 May 2026 18:03:10 +0000
Manifest this update: Tue 12 May 2026 18:03:10 +0000
Manifest next update: Tue 19 May 2026 18:03:10 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: 2o0cXSmMkfard8TO2YAFYC8F070Vo+KQ0tENKeTMVJY=)
2: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DV3D2ua6Pzkyk7Fv2P62LJuR1RPZf+ZsaSUj29nvkgY=)
3: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: gV/ga6pNiDEaMqYwxdpiqSmurLeCeq3zgA8Tgp7bxMk=)
4: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: iChi/qFc6Xw/AVMPU0nsV/Vuxz3VAje7MWNsU7y29RI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3474 (0xd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: May 12 18:03:10 2026 GMT
Not After : May 19 18:03:10 2026 GMT
Subject: CN=6a036b5e-966e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:9e:97:eb:bd:6b:16:fa:8a:2b:9e:5d:0f:
27:b9:a4:5c:a8:a9:12:3c:e0:0e:b3:1c:36:e8:40:
e2:cd:ca:31:08:3c:8c:f7:4a:c0:dc:a1:5c:da:a5:
50:d9:97:da:99:6d:75:2e:06:63:a6:0b:ff:1f:72:
21:a9:62:da:64:d3:fb:0c:3d:ec:97:94:c9:90:49:
ba:6e:55:26:40:a0:50:18:c5:a0:ba:39:58:fd:88:
67:f0:76:a4:99:8a:db:c5:04:ee:ff:64:39:0d:02:
0f:c3:91:50:e9:12:ca:7c:8f:13:d5:3f:67:32:d8:
9d:a6:f3:9f:59:07:21:e4:bc:c7:5d:9a:89:c7:19:
1a:2b:9c:c4:8d:ce:f8:91:74:99:21:0c:87:a2:e1:
5d:63:ef:c8:dd:a7:b2:d4:96:a4:03:d3:af:14:59:
c0:6b:08:b7:b4:28:69:4c:c6:c5:46:c1:a6:77:ef:
17:03:1a:cf:4e:19:72:90:02:03:bc:ff:57:2e:04:
6e:9c:ca:c4:ff:84:d5:db:c2:3e:0e:2f:55:dd:ca:
21:36:bd:0f:50:f2:80:ca:4c:01:68:18:bc:fd:84:
fd:0d:9b:2b:0e:f2:d4:ea:45:64:88:67:ce:98:c0:
20:f2:e0:ac:1f:5b:00:0d:fc:e7:79:5d:e4:59:24:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:43:36:F3:F9:19:B5:1E:C0:55:91:A6:E3:AC:E6:94:24:9D:3A:88
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:03:90:41:82:76:95:3c:04:eb:55:4e:ed:fb:98:08:22:0d:
f9:29:3a:70:46:25:a9:96:01:06:fa:8a:0b:da:cc:a0:32:f4:
84:5f:ec:72:e2:49:cd:ad:32:5e:4a:43:8c:2e:42:97:14:c0:
06:35:c2:6f:f2:c1:f3:de:29:6e:b6:a4:0b:b0:ff:f2:f4:46:
d8:e7:3a:50:a9:63:1f:4c:8d:e9:b0:94:88:08:8d:b7:0e:db:
2b:ae:3c:dc:21:e5:9b:57:56:62:59:7e:41:f2:65:43:23:1f:
87:73:62:a7:04:c3:d5:0b:78:45:71:5c:f9:8f:8e:8b:97:c2:
c4:14:fd:a9:d4:dd:36:43:ee:d9:71:a6:13:a0:16:c0:70:d4:
16:6c:4e:e7:5b:d4:c0:51:32:ad:a5:0f:bf:78:98:5d:84:0a:
a1:61:63:08:c5:44:71:ab:74:29:64:bb:52:28:10:5b:dc:64:
2e:38:60:17:60:19:91:29:3f:cb:cb:b7:ef:3c:19:ad:1e:13:
65:a5:d6:2d:1f:05:89:ea:2d:f5:c6:97:00:cd:fa:d6:1c:23:
07:fa:6b:c5:df:82:4c:3d:7f:96:a2:16:b6:f5:84:3b:25:3c:
7f:ec:2f:83:5a:92:5b:f6:48:b1:58:04:eb:5b:85:58:ef:5c:
e6:9f:7b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:39 2026 by rpki-client