
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier: 9jBr5b2TvGHQxM7TiDz+2QE6GyI1NGZOoIa7c+l+3bQ=
Subject key identifier: 99:E2:A8:55:67:66:58:8A:16:A5:E8:39:FE:BD:9F:15:87:38:4E:A9
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial: 1F0F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number: 1E7D
Signing time: Wed 22 Jul 2026 16:09:34 +0000
Manifest this update: Wed 22 Jul 2026 16:09:34 +0000
Manifest next update: Wed 29 Jul 2026 16:09:34 +0000
Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: I4i9qjHX9V3t/EvB+wkFbfDQ9PEocD8UXzMu3gp/qvs=)
2: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
4: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
5: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7951 (0x1f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Validity
Not Before: Jul 22 16:09:34 2026 GMT
Not After : Jul 29 16:09:34 2026 GMT
Subject: CN=6a60eb3e-c439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:31:b6:a0:1e:b5:b8:ac:95:58:09:40:3e:
bd:7f:c5:3a:3a:e1:a7:d0:8c:31:f7:d6:21:a6:71:
98:ed:0c:2d:a5:66:2c:99:3c:27:f2:86:14:33:86:
1a:bd:88:52:56:ae:fb:72:04:6b:e9:de:91:09:d7:
2b:4a:0d:ca:bb:b8:fe:ba:a6:5c:be:29:3e:2a:df:
36:03:f7:9d:8b:97:fd:4e:5b:6b:6b:5e:b1:10:44:
f6:62:43:15:2b:04:7d:5e:4e:d8:0c:d5:6c:5b:0e:
0e:5c:ce:ef:3b:2c:4c:af:6d:75:d2:15:17:4d:3d:
4b:94:e1:ba:48:f9:d6:a4:cf:43:3d:2e:86:c6:8c:
2a:a5:e3:1e:34:c8:50:a2:c6:6f:03:d7:f3:71:4f:
ea:4e:f0:e2:db:9e:45:cf:95:ba:7c:b2:8d:8d:5f:
ea:26:7a:a0:36:22:cb:63:fb:a9:17:30:65:c2:b0:
f2:11:a3:52:f3:52:a1:a2:7e:72:22:4f:fe:f7:a5:
84:65:b4:f2:a6:be:8d:b6:32:15:df:b3:56:38:14:
29:6c:e6:d8:aa:42:a8:16:aa:61:de:9a:1c:44:5a:
35:e2:0e:49:d6:48:38:66:ed:ee:07:b9:de:e5:0c:
54:59:ff:24:8c:70:d5:f0:e7:20:c5:0e:6b:4a:c1:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E2:A8:55:67:66:58:8A:16:A5:E8:39:FE:BD:9F:15:87:38:4E:A9
X509v3 Authority Key Identifier:
keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:be:a1:1b:5e:cf:55:91:a7:ff:ee:af:ea:1e:01:8c:3b:
7a:fa:8f:b6:09:dd:de:83:90:8b:f6:07:b4:f8:97:a8:9e:06:
fd:e7:0d:7c:7c:c7:b8:d2:20:2c:02:c6:79:20:5e:52:96:13:
91:75:f8:61:6d:8b:02:c8:c7:69:ef:65:e7:24:46:b2:ad:c9:
7c:61:07:34:a2:36:55:2a:c5:dc:85:00:37:f6:49:5b:f8:d7:
53:7d:e5:8d:54:c7:74:97:e3:85:cf:82:d6:38:6b:e6:1a:ac:
62:f1:47:30:2b:72:82:67:28:6f:d7:8b:51:cc:37:40:72:88:
f5:32:ac:a3:40:36:bf:7b:fb:67:5b:68:95:11:9c:2d:a3:eb:
6e:b0:93:29:98:0c:57:48:61:87:e6:99:b3:8b:58:c2:fc:f0:
bc:89:55:83:ac:aa:56:08:85:0f:0c:66:54:e7:d1:62:6b:b9:
5a:c8:d0:bb:41:17:aa:12:7e:de:c0:83:8a:61:8e:a8:63:78:
5a:3f:82:91:40:a1:dc:83:4f:f3:20:21:09:3b:2f:0f:95:97:
e7:94:08:1b:86:75:04:ec:1d:c4:90:1e:02:ab:eb:f3:9c:a2:
60:a4:12:cf:5b:81:5a:a4:ff:b9:36:19:c0:ca:98:f4:59:95:
ab:94:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:53 2026 by rpki-client