
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: zKKcvDcApLGTkJf6jOhi8rnXcg4t7MwbUKm4pOg+O9c=
Subject key identifier: EB:47:08:7E:0E:8B:FE:24:36:F6:11:DF:59:4F:7D:31:7E:12:BF:94
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0DB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0D8E
Signing time: Wed 22 Jul 2026 18:12:07 +0000
Manifest this update: Wed 22 Jul 2026 18:12:06 +0000
Manifest next update: Wed 29 Jul 2026 18:12:06 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: O4LbsvrTAlQtvECPrf9pF5wf4pHcchWFrBb6ZhWXmm8=)
2: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: iChi/qFc6Xw/AVMPU0nsV/Vuxz3VAje7MWNsU7y29RI=)
3: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: gV/ga6pNiDEaMqYwxdpiqSmurLeCeq3zgA8Tgp7bxMk=)
4: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DV3D2ua6Pzkyk7Fv2P62LJuR1RPZf+ZsaSUj29nvkgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Jul 22 18:12:06 2026 GMT
Not After : Jul 29 18:12:06 2026 GMT
Subject: CN=6a6107f7-ce83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:97:ea:63:87:79:a7:a6:bc:21:60:a4:ab:
b2:ea:42:fc:3c:4a:4f:67:ac:ca:f4:42:48:03:70:
c2:d6:62:60:a6:92:50:83:06:fa:0b:b2:49:d3:ec:
7c:ae:c9:cd:07:1b:cd:c9:48:82:3e:a8:07:96:ec:
a4:ae:be:b3:ba:c9:87:20:13:5d:7e:a2:ce:0d:eb:
e1:f4:b5:e0:93:b1:40:d3:f2:bf:a9:2f:05:43:18:
a0:d0:b3:09:cb:28:99:eb:09:eb:9d:2a:f4:03:ba:
a2:bb:a6:68:1a:ce:81:1b:e0:8c:58:05:ae:e2:53:
c3:d3:e6:bb:b1:c1:b0:b1:fe:46:2c:0c:33:a2:f6:
e0:43:cf:c0:79:a4:62:89:5f:a7:27:a2:79:cb:06:
4d:57:9d:df:27:a4:7f:84:69:bb:94:44:7b:99:61:
89:a6:a0:ae:0b:1a:78:39:88:47:d1:8d:e7:3c:c6:
9f:cb:9e:44:1a:0e:6c:c0:fc:82:d6:19:67:96:a8:
52:99:3f:aa:b8:13:5f:d0:d2:33:f5:3c:0c:49:03:
61:11:92:c7:c9:ef:5b:f0:f8:e9:01:e5:6e:fa:0f:
e2:9f:82:b0:35:1e:08:1c:25:0c:c6:aa:dc:b3:3d:
3b:b6:d7:1d:9c:6d:51:e7:ac:5d:1f:e3:7e:44:99:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:47:08:7E:0E:8B:FE:24:36:F6:11:DF:59:4F:7D:31:7E:12:BF:94
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:46:79:f0:4b:85:3a:ad:38:35:29:15:4b:75:0f:49:59:5d:
62:1a:5b:30:d6:44:68:1a:b5:15:1d:b6:1a:45:df:93:29:b6:
e3:01:8a:69:92:52:03:ad:fb:e5:ab:3f:d9:66:32:82:d8:ac:
51:5e:6b:5c:fd:92:45:42:fd:20:a2:ba:7a:da:cc:ce:fa:bb:
67:1d:21:4e:99:4e:d1:5d:21:ab:d7:b5:e6:a1:87:98:56:83:
ac:0b:17:22:09:4b:01:c3:c1:ff:02:5c:8b:cc:91:2b:1e:67:
51:6e:24:7d:eb:94:d4:1b:b0:04:4a:a9:d7:07:a6:8a:0a:88:
8a:08:68:7c:bf:60:91:4b:0e:27:aa:d0:87:c6:e3:d5:83:4a:
fa:70:f8:0d:b4:95:51:74:e3:47:39:5c:5d:21:e4:2b:1f:a3:
86:04:49:bf:6e:6b:9f:0f:05:5c:34:f2:1c:92:69:5f:47:a8:
c4:c2:d5:4f:2f:2d:8b:ea:a8:d4:88:63:6a:ff:38:b6:c0:34:
31:d9:8d:c2:ea:ae:d2:ec:8d:c7:6a:32:f5:b0:04:5c:c5:a7:
87:c8:16:b6:46:e1:da:de:83:19:6a:1a:5c:51:f1:83:4b:28:
b3:94:c1:d2:40:40:fa:66:fd:f5:af:74:58:6f:da:65:8b:0d:
f4:79:6d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:29 2026 by rpki-client