
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: e3E4JW+7EexDcUfsTjILjDJ3gR38/qKYFXQK+FP9xDA=
Subject key identifier: 74:58:84:D2:A2:68:E6:99:40:BF:6A:52:93:4B:86:6D:46:DC:1D:7B
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0DAC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0D84
Signing time: Thu 02 Jul 2026 18:06:47 +0000
Manifest this update: Thu 02 Jul 2026 18:06:47 +0000
Manifest next update: Thu 09 Jul 2026 18:06:47 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: Wy1lwmIZe61InaYV85gY/auxW52NW88bQntdyNcEaEQ=)
2: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: gV/ga6pNiDEaMqYwxdpiqSmurLeCeq3zgA8Tgp7bxMk=)
3: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DV3D2ua6Pzkyk7Fv2P62LJuR1RPZf+ZsaSUj29nvkgY=)
4: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: iChi/qFc6Xw/AVMPU0nsV/Vuxz3VAje7MWNsU7y29RI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 18:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3500 (0xdac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Jul 2 18:06:47 2026 GMT
Not After : Jul 9 18:06:47 2026 GMT
Subject: CN=6a46a8b7-da8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:c3:06:65:2a:61:fe:67:d5:e9:4e:78:23:
cc:a4:5f:58:f8:01:98:82:4b:e7:9b:41:ee:33:d9:
c7:90:66:b1:70:3e:0e:c4:60:d3:cc:bc:a3:31:10:
c6:98:40:79:6e:23:32:71:e1:52:3e:47:c1:7d:da:
0a:19:55:3b:86:b1:4f:34:da:22:23:f8:69:45:d8:
d7:aa:ca:7a:b8:40:92:87:7f:1e:46:c3:05:ff:89:
20:f8:21:ee:7c:82:6e:c7:a8:3a:4d:46:97:21:ef:
3d:88:c3:bd:8c:ae:5f:d3:30:ba:ad:21:6e:22:d0:
72:99:7a:ab:40:01:ba:f8:de:48:ce:75:d8:b6:6a:
4a:06:7d:e6:c7:23:0b:23:98:61:55:0d:0e:8c:d0:
cc:3f:73:e8:b5:ba:10:6c:d0:fd:6f:53:df:35:37:
85:de:56:44:d3:79:76:9b:5a:79:48:1f:c2:20:78:
eb:78:03:f3:5f:99:c5:f9:5a:61:af:ca:3a:b7:b3:
8d:b0:13:b3:3e:41:50:f7:10:97:2d:dc:da:d2:f1:
55:dd:c7:cc:e7:78:c6:c0:f6:e2:9c:6b:cc:db:4b:
9d:2a:5a:74:6e:94:9a:78:cf:3a:e9:8c:2a:f6:8c:
4c:68:de:13:e3:f4:ed:28:d9:ed:7f:a9:17:c7:c9:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:84:D2:A2:68:E6:99:40:BF:6A:52:93:4B:86:6D:46:DC:1D:7B
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:ad:bc:77:b0:e5:b1:80:18:59:92:86:f8:7e:63:dd:9b:90:
aa:1f:3a:ee:8b:e2:43:ca:e7:24:f1:35:ab:22:ca:cd:85:7a:
c4:24:a0:cd:85:b2:08:d2:bc:26:63:df:76:87:30:5d:7a:4c:
41:04:2b:88:26:29:4c:3c:76:d7:c8:ef:c8:e9:4f:6e:d2:da:
60:69:d5:fe:05:f8:63:a5:0a:6a:15:2f:ee:54:69:73:2d:29:
ae:62:79:88:35:51:af:58:3a:7d:52:63:fb:44:5f:a9:4d:58:
95:53:15:e0:37:26:85:8e:0e:ca:af:5b:33:ad:6d:71:a3:77:
35:5a:de:c7:96:ed:9e:1b:90:d0:9d:ab:11:62:b3:bf:af:7b:
e7:01:25:06:b1:4b:da:e4:52:f1:fa:75:49:6a:73:3c:da:70:
ec:0d:6f:ae:76:72:63:12:96:5a:4c:6e:af:a7:dc:b7:3b:13:
e1:15:22:33:dd:0e:22:41:22:3c:ff:b5:39:f4:ef:de:11:a0:
49:d8:b5:4a:26:6c:b9:d9:e1:f1:93:5b:2a:26:c7:46:58:65:
fd:e5:06:b6:25:bd:b8:4d:27:ab:90:41:71:20:49:c2:4d:ee:
84:97:bb:6b:09:ed:ab:a1:c5:55:7f:d0:f9:94:1a:7b:a4:24:
58:ee:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:28:17 2026 by rpki-client