
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier: hJHZ+n+oKegLM8rcRQ9jUFDWQhw/43VhlGvVjuUMK4A=
Subject key identifier: 75:03:5B:17:BD:9F:2C:BB:48:9B:6E:5C:37:C8:07:72:53:5D:B7:3F
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial: 1F38
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number: 1EA4
Signing time: Mon 28 Sep 2026 16:06:15 +0000
Manifest this update: Mon 28 Sep 2026 16:06:14 +0000
Manifest next update: Mon 05 Oct 2026 16:06:14 +0000
Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: CIXQohBuNWIDji3r1MZvfhho10iGc8wan1tUPwv7QDg=)
2: CD420BBC86EF11F19E006003A7EE528E.roa (hash: prjxQAidgmq4bIL41IJPb4DemAHY/2tYmvyzka4GluM=)
3: 807395488FDD11F195BE82A73211F970.roa (hash: BU7K+VvzWJLMxSs9elkeme33blAxmlXtFe8kkWOD/8A=)
4: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
5: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7992 (0x1f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Validity
Not Before: Sep 28 16:06:14 2026 GMT
Not After : Oct 5 16:06:14 2026 GMT
Subject: CN=6aba9077-1aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:5e:d3:a1:68:8a:e0:2a:58:28:93:0c:ec:
20:22:fb:b6:38:a8:c6:5c:e1:8b:c9:bd:73:49:df:
09:48:b9:23:50:05:9f:6d:a0:5b:d8:a4:da:be:f3:
bd:8c:58:c9:18:a6:12:f5:b8:c5:f9:93:06:b8:53:
c2:07:49:bc:67:69:d0:7a:8a:fd:92:52:d5:b9:49:
63:93:db:3a:14:b6:7e:7b:9b:df:ad:de:8e:23:d7:
33:91:26:cc:a0:9d:11:be:16:ac:a1:d1:c6:40:1a:
f3:55:78:0b:f0:29:54:2e:d7:e9:06:38:c7:27:89:
e6:80:68:14:ce:cf:40:d1:d3:46:df:9a:84:40:13:
65:d9:9f:91:e4:a8:45:0f:ad:74:46:e6:4e:69:a2:
be:ac:22:cf:3c:fc:49:f3:c8:fc:9d:96:4b:9a:fc:
c9:c2:2a:84:3d:c3:e0:23:f0:47:f2:13:c2:de:24:
64:f9:0d:67:6c:1a:c0:e2:eb:65:72:15:64:ff:12:
a5:8f:47:49:69:81:47:c6:24:93:f8:60:75:42:96:
65:4d:2f:27:b7:35:46:02:18:53:be:b3:06:58:9e:
e6:f2:67:41:1b:f1:68:87:ca:d8:64:94:14:06:a4:
34:22:d1:f0:e3:63:7b:c0:71:b0:83:96:4f:96:6b:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:5B:17:BD:9F:2C:BB:48:9B:6E:5C:37:C8:07:72:53:5D:B7:3F
X509v3 Authority Key Identifier:
keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b3:7a:db:6e:bb:38:8b:95:4e:62:40:d4:c5:df:d1:cb:59:
4a:7f:59:3b:a6:b8:e6:39:30:9d:d0:3e:00:c1:84:7e:72:13:
3d:8b:0f:f6:87:94:af:a2:fb:ea:d1:d7:27:b7:4f:30:cf:61:
7d:5d:fb:34:4d:d7:ab:f0:31:6f:39:53:d6:cc:c4:30:8a:8d:
cf:7c:b8:b5:e3:64:bf:f6:64:9e:93:e1:1b:db:75:40:ff:de:
48:8f:06:1c:84:06:74:29:20:99:a2:43:ac:a9:66:f7:5c:3b:
99:b4:7a:d2:d0:62:80:f8:66:b4:db:64:9e:4b:b1:49:96:b5:
02:e1:49:2c:a8:58:65:6c:c0:78:2d:33:12:62:3e:0e:7a:c8:
56:eb:c4:d3:e9:de:df:70:2e:b6:56:64:91:fa:09:02:be:a3:
b7:8a:9a:0d:fe:d4:e3:23:31:73:79:6f:0f:22:cc:5d:9f:fa:
9a:ff:ac:72:e1:1e:df:63:10:e7:b0:cf:66:a7:5a:6d:30:38:
5d:e8:25:02:b2:7a:db:fb:ff:9e:cc:a4:e2:59:38:69:6a:1a:
6e:3e:3f:7f:42:2f:ef:5d:5f:04:29:1c:d5:ab:b2:23:71:0b:
71:3c:0e:2e:7e:78:90:9c:c5:39:46:b0:64:4b:bc:47:a3:5c:
08:83:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:40:11 2026 by rpki-client