
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier: dR0dy2WNJD2wob5q/8T5xiM5eRpA0odrfxNL7iR1IN0=
Subject key identifier: 19:3E:F1:DD:9B:7A:2A:74:4B:B0:41:7B:D2:60:62:6F:B3:12:38:96
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial: 0D66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number: 0D39
Signing time: Wed 22 Jul 2026 18:25:26 +0000
Manifest this update: Wed 22 Jul 2026 18:25:26 +0000
Manifest next update: Wed 29 Jul 2026 18:25:26 +0000
Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: zJ1Ul4fIDRt4YptC2GfRezKCAEb06ajGpyN36BUT2Mw=)
2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: R7rZtnSJJ0QZFo5Ja/uQYwMCd6fNJf9hdwEvNCJu1OA=)
3: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: Dw3nMUxEhyHX5ev98aRNWPLfcsu+JByGF2YmsWZl+nQ=)
4: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: FMrV9a339leH9QraYW+j9/idX+LpdB6y6EvY3B6c48k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3430 (0xd66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Validity
Not Before: Jul 22 18:25:26 2026 GMT
Not After : Jul 29 18:25:26 2026 GMT
Subject: CN=6a610b16-0493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:f2:2e:71:98:9b:84:d2:24:50:45:35:d8:
e8:23:f2:33:21:57:92:e9:52:05:02:4c:ec:4f:e7:
d5:e1:3a:fe:ba:a8:83:96:e9:03:84:4d:a4:26:1b:
ad:e7:ab:24:69:c5:fc:51:1d:90:97:b4:e2:c5:8a:
46:8e:e4:5a:ef:8f:25:f4:a9:dc:db:b1:de:d5:22:
c6:86:65:d9:ac:cc:55:e2:b9:06:c4:ee:3e:dd:90:
81:a6:f3:8b:75:f5:df:93:f5:52:03:74:63:db:84:
e0:66:74:b4:75:26:bf:43:34:fd:4a:32:9b:59:fc:
ce:cb:1e:bd:06:7b:26:d6:7a:74:1b:dc:c1:2b:57:
4e:a0:6f:d8:2b:54:5a:4e:0d:9f:59:96:9c:9a:8c:
dd:f3:bc:71:b4:f2:a1:c0:70:d5:cf:50:16:d4:e7:
22:a5:16:84:b1:e6:86:26:1a:87:60:f2:28:ff:41:
0f:21:cd:0a:e5:99:ac:62:c2:f5:57:08:ca:30:8b:
3e:5d:ed:6e:95:79:d7:a4:15:49:ae:ce:35:16:b0:
f4:cf:d4:97:73:6c:6a:e6:d5:85:50:c8:e1:c9:f0:
f2:8f:4e:b2:76:f2:84:4a:fd:a4:82:57:c5:73:49:
81:f8:f9:9e:9c:f3:d0:a0:e7:11:76:94:bf:98:70:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3E:F1:DD:9B:7A:2A:74:4B:B0:41:7B:D2:60:62:6F:B3:12:38:96
X509v3 Authority Key Identifier:
keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:61:25:1d:2b:20:31:38:ca:63:58:34:42:df:d1:03:df:36:
7a:8a:a0:5f:9c:46:9a:ef:79:c7:e9:23:7a:c6:d3:40:db:1a:
65:43:29:20:38:00:36:36:fe:cf:27:6d:60:cc:1f:1e:91:97:
64:5d:2a:58:23:0b:d9:bd:6c:ed:e0:9b:3f:9d:8d:64:3a:4c:
ec:15:17:7a:c4:bc:b6:02:a9:81:8a:65:9a:7b:27:58:c0:4c:
2e:7d:46:77:00:91:39:c2:ec:f5:ac:9a:8a:c3:f7:f9:b5:0b:
c4:86:fa:0e:e8:c8:61:28:d0:ec:b7:37:c5:68:9c:21:21:88:
2e:d4:0a:b6:0f:36:98:38:84:1c:88:b9:e8:bc:8c:87:a1:f8:
02:46:69:69:db:08:9f:5c:d7:19:8e:e0:51:69:c6:70:e5:c4:
2e:93:81:ce:39:01:83:f0:d5:93:11:fc:49:e9:c0:fa:4f:0e:
ef:8a:e7:1d:fc:c3:f4:6b:9d:c3:be:6a:ca:60:7e:5a:f2:b4:
d7:97:ed:0f:f1:f3:62:bc:d4:0a:87:f7:55:8f:99:f0:93:05:
84:d1:1f:ff:95:90:b5:35:97:01:1e:43:b4:7f:9f:c5:31:e0:
c4:04:42:09:df:76:28:fe:24:5a:00:20:95:cf:f2:a3:17:aa:
5b:58:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:01 2026 by rpki-client