
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier: 3f4BeXD8o9A4WJg1sYabtDaJoiXreOyoEnGovjoHYt8=
Subject key identifier: 12:64:5D:AB:4F:25:2D:98:DE:8D:B8:08:E6:CD:8D:BF:FD:8B:C1:2E
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial: 1EEB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number: 1E59
Signing time: Tue 12 May 2026 16:05:44 +0000
Manifest this update: Tue 12 May 2026 16:05:44 +0000
Manifest next update: Tue 19 May 2026 16:05:44 +0000
Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: s+iKSTzSJjy8FZJYUglYF94HcpVCL8bOFS+42gshIvk=)
2: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
3: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
4: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
5: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7915 (0x1eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Validity
Not Before: May 12 16:05:44 2026 GMT
Not After : May 19 16:05:44 2026 GMT
Subject: CN=6a034fd8-4cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:6b:ca:67:85:6c:9f:c6:78:e5:0a:4b:bc:
d5:d6:bd:33:57:17:29:da:8b:d2:60:67:34:a7:7f:
26:5b:54:15:55:f3:bb:4c:54:e1:b9:1b:c3:ce:b4:
51:dd:cc:b8:b4:19:d8:cf:95:51:8d:2f:b4:a5:2c:
29:77:ca:bb:36:f6:ef:58:11:fb:43:77:94:2e:b8:
8b:42:58:60:2e:09:33:69:60:08:b5:65:50:7c:b9:
54:85:7b:0e:49:bc:80:32:2b:e9:63:64:24:db:a2:
29:c4:95:50:c7:14:3e:4b:80:0c:ab:d9:42:42:9c:
51:a4:a7:9b:79:6a:d3:53:13:90:be:33:4b:9e:fa:
4b:1a:60:0a:64:56:fe:54:c5:98:aa:ca:3e:de:9b:
34:33:58:71:7c:64:37:cd:31:87:b2:65:e3:1a:bb:
d7:73:18:28:4f:87:14:16:1c:c1:50:95:42:30:da:
8d:93:b2:d1:e3:a0:72:bc:be:ac:e7:fb:40:5d:c2:
6c:c5:45:bc:40:ed:5d:9b:eb:8c:3c:48:11:76:31:
77:2e:dc:9a:25:aa:45:8f:8b:c8:7a:f0:96:61:94:
60:0e:e3:1c:e9:9b:e6:6d:10:53:9f:35:40:18:e9:
a5:bc:f6:fa:0f:69:e6:99:e0:87:6e:06:e2:93:a7:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:64:5D:AB:4F:25:2D:98:DE:8D:B8:08:E6:CD:8D:BF:FD:8B:C1:2E
X509v3 Authority Key Identifier:
keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c9:8d:d2:30:5c:87:bf:4f:2e:56:4d:91:d7:38:81:8f:4b:
7b:d9:50:6d:e9:14:18:0e:72:cd:14:f5:5f:67:ab:36:17:a2:
8c:a6:7c:1a:b5:1d:63:ce:86:a0:98:49:73:78:77:d6:80:52:
ad:91:18:69:c4:e3:fa:06:b5:38:77:22:3d:2e:8f:57:6c:e0:
bb:0c:59:0f:47:fe:1d:1d:8d:df:76:99:3c:c4:59:ad:8c:1e:
89:df:db:84:c4:23:38:3d:5b:97:c4:44:43:38:d3:06:09:75:
36:2d:fb:52:23:85:a3:20:e9:7e:1f:db:ec:16:b7:90:b3:ef:
40:d4:88:41:c0:82:d3:ad:0b:d0:93:bb:fb:33:c8:97:c5:94:
b4:8e:60:b0:ff:f2:7a:82:d2:d4:d7:f2:66:7b:53:8b:c0:60:
11:48:72:11:cd:48:59:4e:ff:24:70:62:16:de:08:1e:5f:5a:
06:fc:e4:51:05:c6:3a:5f:56:4f:7f:29:9c:b5:c2:cd:53:8d:
dc:5b:d0:c6:94:e1:64:a5:43:b1:2d:b8:e6:48:15:bc:af:46:
57:4f:85:2f:18:00:f5:a6:92:94:88:61:c5:f9:72:bc:1a:b1:
94:36:42:a5:4b:3b:36:3e:ef:61:77:e9:ae:28:aa:d3:be:b0:
6e:5f:8e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:30 2026 by rpki-client