
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier: bjNtj6Zc820ULgypgWowejgmWcZ/laZNTnkTfCrIYF8=
Subject key identifier: 4C:78:7E:1B:55:B9:67:58:64:EB:69:BE:B1:DE:9F:FD:B4:3E:60:51
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial: 1ED2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number: 1E40
Signing time: Tue 24 Mar 2026 16:01:13 +0000
Manifest this update: Tue 24 Mar 2026 16:01:12 +0000
Manifest next update: Tue 31 Mar 2026 16:01:12 +0000
Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: XlTi1W2wIbj9J03x20GOXexr+/e4sZfFrjpvXbn0hq0=)
2: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
5: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7890 (0x1ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Validity
Not Before: Mar 24 16:01:12 2026 GMT
Not After : Mar 31 16:01:12 2026 GMT
Subject: CN=69c2b549-285a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:4e:2d:ea:63:9c:ee:2c:ab:ea:aa:a8:bf:
ee:7e:57:eb:b7:21:26:5f:9b:62:7e:0d:c4:c2:3c:
e9:ee:65:34:77:ed:d2:0d:a0:e8:98:58:de:ad:44:
96:35:b8:20:3c:1f:cf:9a:bb:7c:e7:91:51:50:4e:
e4:db:02:83:1e:be:7d:a2:99:4c:7d:3f:ae:eb:3d:
c9:0f:3f:cf:be:61:23:fd:1d:27:dd:e8:e0:8f:63:
7d:c8:b6:7b:3b:d7:41:e7:fe:f8:89:a6:57:94:c7:
0b:ed:8e:09:57:f8:6e:be:f8:46:7f:b9:76:a9:ed:
40:fb:72:25:54:0c:91:85:4f:f3:d8:73:1c:3e:bb:
bb:ac:f0:8c:60:37:b2:33:5a:ec:cb:81:54:b8:9d:
bc:07:17:77:54:48:cb:81:b8:2c:90:81:e9:94:b0:
ee:ed:c5:0a:22:86:ef:8d:d6:f4:bd:00:bc:c1:26:
ff:62:64:d6:91:af:78:f7:de:7e:2d:64:2f:dd:e9:
99:55:89:b7:ee:6c:9a:e8:1a:8c:59:1a:14:d6:94:
df:9a:d6:be:6f:63:d4:c0:42:f8:74:78:a6:af:b3:
bd:94:20:e8:f8:96:cd:c9:79:22:4e:3d:c1:02:4f:
1c:17:27:7a:1b:e6:26:88:d4:80:ce:28:1d:40:4f:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:7E:1B:55:B9:67:58:64:EB:69:BE:B1:DE:9F:FD:B4:3E:60:51
X509v3 Authority Key Identifier:
keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b3:07:5a:2a:bb:c9:ec:6b:ca:8c:c5:53:89:1b:63:d2:b0:
cf:78:10:1b:33:47:79:c0:c9:51:89:7a:db:df:41:21:f5:84:
b1:f2:ed:7a:e4:4a:7e:cf:34:d3:04:e6:df:86:da:10:72:ed:
f0:7f:d5:51:b7:c7:f1:df:04:d6:79:8b:02:2b:ba:68:93:81:
95:85:60:a7:1c:1f:ef:6e:c8:29:62:8e:a7:85:4b:ca:a5:b0:
0b:fe:e7:fb:fa:fd:61:23:9f:b2:07:6d:24:61:95:60:50:d7:
4b:4b:e1:e3:39:26:e4:49:9f:47:d7:b2:e3:ae:4e:a5:dc:86:
87:a5:5c:98:cc:ba:6c:75:e9:1f:c6:e3:00:e8:9a:e9:ad:02:
f3:63:e2:79:23:47:08:bb:60:e8:fa:4c:f0:fd:1c:8a:42:28:
77:2e:22:3d:0b:18:72:07:bd:76:47:d3:89:55:a0:97:d5:a8:
cc:4c:31:2f:ad:bf:d1:39:52:21:6d:e6:95:66:3e:10:50:14:
72:ba:00:3e:c2:eb:7b:9e:10:c6:da:db:2a:08:b7:4c:54:0a:
fb:bb:e4:57:51:26:30:f6:67:57:ec:86:aa:e0:98:10:b3:35:
9e:1c:88:5b:21:e7:b1:af:bf:36:ad:ff:6a:2a:23:73:e7:56:
95:d8:24:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx
NzA3N0U2MzIwHhcNMjYwMzI0MTYwMTEyWhcNMjYwMzMxMTYwMTEyWjAYMRYwFAYD
VQQDEw02OWMyYjU0OS0yODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0VOLepjnO4sq+qqqL/uflfrtyEmX5tifg3Ewjzp7mU0d+3SDaDomFjerUSW
NbggPB/Pmrt855FRUE7k2wKDHr59oplMfT+u6z3JDz/PvmEj/R0n3ejgj2N9yLZ7
O9dB5/74iaZXlMcL7Y4JV/huvvhGf7l2qe1A+3IlVAyRhU/z2HMcPru7rPCMYDey
M1rsy4FUuJ28Bxd3VEjLgbgskIHplLDu7cUKIobvjdb0vQC8wSb/YmTWka94995+
LWQv3emZVYm37mya6BqMWRoU1pTfmta+b2PUwEL4dHimr7O9lCDo+JbNyXkiTj3B
Ak8cFyd6G+YmiNSAzigdQE9/eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEx4fhtV
uWdYZOtpvrHen/20PmBRMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1
MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf
QlJVbi1sTTlSNmtYQjM1akkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADrMHWiq7yexryozFU4kbY9Kwz3gQGzNHecDJUYl6299BIfWEsfLteuRKfs80
0wTm34baEHLt8H/VUbfH8d8E1nmLAiu6aJOBlYVgpxwf727IKWKOp4VLyqWwC/7n
+/r9YSOfsgdtJGGVYFDXS0vh4zkm5EmfR9ey465OpdyGh6VcmMy6bHXpH8bjAOia
6a0C82PieSNHCLtg6PpM8P0cikIody4iPQsYcge9dkfTiVWgl9WozEwxL62/0TlS
IW3mlWY+EFAUcroAPsLre54QxtrbKgi3TFQK+7vkV1EmMPZnV+yGquCYELM1nhyI
WyHnsa+/Nq3/aiojc+dWldgkHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:51 2026 by rpki-client