
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File: E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier: vMDq6qbyn0DsdrraPd70szXWHqLnlsXR5fGkVqPsEUk=
Subject key identifier: AF:FA:AF:EA:B1:0E:29:72:39:35:70:7C:2C:2F:A2:99:5A:21:40:C2
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number: 052A
Signing time: Wed 20 May 2026 23:36:39 +0000
Manifest this update: Wed 20 May 2026 23:36:38 +0000
Manifest next update: Wed 27 May 2026 23:36:38 +0000
Files and hashes: 1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: VVA/A9j/cwvincEbxkuzi/3PpuzvywSAscIdvOK48AA=)
2: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: hag+MUbq2Bfcf/v0P/fLMJSbYbpkOhegxdRU84PbHuI=)
3: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: WwWxfFD/dPYIxRDdqsnPJ+69G/DDJejm40kyxhZPiqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Validity
Not Before: May 20 23:36:38 2026 GMT
Not After : May 27 23:36:38 2026 GMT
Subject: CN=6a0e4586-8ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:7c:6a:24:dd:d5:7c:cd:bd:21:67:bb:9d:
e3:15:15:d2:59:af:df:8c:68:d9:02:3a:5c:e5:9c:
f2:0a:43:64:ce:1e:7f:82:c4:27:6d:72:05:5f:07:
dc:10:8c:21:af:36:54:82:4d:20:04:61:5e:ff:fc:
0e:d1:7c:38:23:b0:5a:c2:a6:88:06:2a:eb:85:26:
83:d4:08:ac:2d:28:e2:c2:1b:0d:2a:a2:4c:02:61:
97:41:f6:ca:32:7c:13:e5:99:ee:f1:0c:83:f4:22:
79:9b:15:a9:c1:54:5a:0c:fa:8a:ef:80:d3:df:d6:
18:06:8a:06:ca:6a:2a:cc:aa:a3:60:49:05:c0:84:
f5:4d:51:6c:29:aa:6f:a9:a6:05:a9:49:a1:7e:1b:
58:d4:cc:bf:bc:92:dc:6f:3b:63:93:30:f6:50:db:
7b:13:54:13:b4:59:77:2f:19:6c:38:6e:26:33:20:
e9:e6:48:7f:5a:b8:5a:0d:40:8f:75:7f:23:24:d7:
8e:c1:9b:23:6f:1f:ca:7a:56:61:c8:f6:e4:4d:d7:
d1:dc:40:69:9e:85:5f:4d:8c:10:2e:72:e0:1a:7c:
62:0d:de:25:e8:2a:81:24:7c:3d:35:eb:51:74:0d:
27:ab:7e:e0:f9:f8:90:05:d3:f9:57:47:d0:26:b0:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:AF:EA:B1:0E:29:72:39:35:70:7C:2C:2F:A2:99:5A:21:40:C2
X509v3 Authority Key Identifier:
keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:89:85:0a:aa:57:2f:3f:f6:f1:09:7a:e2:0d:44:a6:09:71:
a1:02:d6:65:92:1a:67:b8:b7:a9:c2:59:72:d3:ad:f7:60:78:
68:f9:f7:06:85:a9:f9:55:4f:26:d9:8a:74:0e:20:f9:8f:0c:
39:10:93:c8:54:b7:58:6f:a3:de:30:79:0c:15:d5:a4:98:6f:
e5:32:01:ba:a9:88:21:41:92:fb:0c:52:a1:6d:47:16:da:31:
d4:77:d9:96:15:21:97:5d:ed:46:8f:17:cb:83:aa:e7:56:d2:
11:82:52:32:8c:f4:24:66:28:b2:f0:75:70:4e:7d:38:df:1f:
4c:10:c8:94:84:b0:85:19:a4:f4:4e:88:b4:bc:e3:c7:d0:8d:
5d:a8:fe:fe:49:11:2f:bc:3e:aa:d0:80:fe:10:80:d3:d5:f8:
9b:da:1f:98:25:81:b4:7e:bb:1a:ca:ac:37:52:f8:95:9b:d1:
06:fb:24:40:ee:10:d1:1a:07:e6:11:07:7e:bd:e0:63:cf:8d:
05:cf:86:a1:f9:dd:c0:bf:a5:50:2f:a4:66:c4:60:46:6a:69:
5b:67:7f:1f:44:41:fe:54:f7:2c:15:48:15:b4:ca:e9:6f:ed:
3d:3b:43:2e:30:81:b2:1d:0a:22:c7:94:7d:67:df:fc:fc:83:
d3:bf:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:52:04 2026 by rpki-client