
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: y+FGih9OXO+zY2eWXwTPOW1372tNvY2TYnfTpOZdZEs=
Subject key identifier: 33:87:29:07:4F:ED:BF:B2:D7:B2:EA:76:D6:86:67:29:D7:C1:DC:AD
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0DC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0D9C
Signing time: Tue 18 Aug 2026 18:12:13 +0000
Manifest this update: Tue 18 Aug 2026 18:12:13 +0000
Manifest next update: Tue 25 Aug 2026 18:12:13 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: tAe7xCbPPAJf94cRr0LWK3qXEYPqlKlx4R0tuF4Ya7U=)
2: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: iChi/qFc6Xw/AVMPU0nsV/Vuxz3VAje7MWNsU7y29RI=)
3: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: gV/ga6pNiDEaMqYwxdpiqSmurLeCeq3zgA8Tgp7bxMk=)
4: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DV3D2ua6Pzkyk7Fv2P62LJuR1RPZf+ZsaSUj29nvkgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3524 (0xdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Aug 18 18:12:13 2026 GMT
Not After : Aug 25 18:12:13 2026 GMT
Subject: CN=6a84a07d-9862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:1a:6a:f7:15:05:dc:d6:20:9c:26:bc:17:
7f:4a:ad:9b:9d:a6:6a:c1:e3:60:c4:86:8b:9b:08:
54:85:11:37:59:8b:c2:9b:62:18:32:a4:ed:eb:eb:
72:79:3e:82:9a:ff:8a:ab:79:d2:3b:fd:fb:d1:a1:
fb:ae:62:28:cf:38:73:e1:8e:51:26:ac:3e:99:ce:
71:f7:35:c4:60:3e:a8:1c:12:9f:70:27:b1:3e:b5:
86:99:52:08:a8:94:43:cf:64:83:80:ab:91:3f:40:
2b:70:aa:6e:9d:c8:d9:f6:cb:b0:21:50:ec:28:11:
da:44:8b:ad:b1:1f:55:fd:0d:e0:5b:70:cc:50:db:
e5:9d:96:09:da:8f:fa:92:fe:d9:bc:22:1c:1b:f2:
df:1b:b9:9e:c7:88:9c:73:5a:2a:8f:ad:f9:b3:93:
28:b8:e5:3c:f0:b0:f3:17:ce:de:68:c3:75:a5:78:
65:37:1d:d1:00:fe:e9:cc:93:ee:9b:2a:34:9c:fa:
78:7a:1f:fe:ed:28:ec:29:df:27:4f:f8:9e:ed:ca:
a0:93:9f:e3:f8:de:f4:ac:2c:51:a4:a7:db:ee:25:
e4:0b:54:a3:a7:f2:96:09:38:84:9c:4c:80:90:58:
35:2a:61:6f:48:c1:37:ab:05:aa:04:ed:78:de:a0:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:87:29:07:4F:ED:BF:B2:D7:B2:EA:76:D6:86:67:29:D7:C1:DC:AD
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:b2:ac:16:54:f4:85:fa:45:c8:c5:f1:03:33:e0:50:d6:05:
c3:91:05:4b:3d:a8:62:7f:0b:51:f8:54:fa:49:9d:dd:7b:d7:
14:ba:51:7c:af:9c:35:ac:9f:cf:2b:e2:7c:7f:81:ae:52:98:
1e:9d:8d:94:b8:7d:a4:07:db:07:3b:21:90:52:bd:32:a6:0e:
39:9c:f7:a5:f2:dd:50:66:d2:58:f2:e4:c2:00:93:f4:3b:4e:
cc:9d:4c:df:e5:ff:e8:f3:54:f6:17:87:7d:66:1d:4a:ca:14:
b4:e9:1b:72:00:74:72:d3:19:f0:75:2b:fd:21:28:15:5e:91:
5c:90:6e:52:b9:66:37:45:86:13:cc:4a:03:d2:8f:4a:a9:e6:
36:c9:ba:da:51:36:28:a4:8a:b8:a0:9e:de:0a:ba:b8:f1:eb:
5e:69:5e:59:30:17:11:11:23:13:e2:69:d4:63:30:fb:d9:8e:
5a:84:21:8d:21:70:7d:6b:08:01:67:c7:ce:44:f2:43:20:8c:
02:5d:92:17:b9:95:eb:b7:dd:7c:ef:5d:2a:ea:35:a8:9c:dc:
50:7f:f4:51:b9:00:1c:8d:fc:64:fd:c4:b3:5a:5b:a7:5b:c5:
95:a7:ed:60:2d:c8:ce:5f:12:84:c5:d7:cd:0b:9a:ea:77:1e:
d1:2c:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:46 2026 by rpki-client