
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
File: E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json)
Hash identifier: FvYLfNpsv0WH0GKSGwq5djiCrxw/hSsUu7zzfCGw/yk=
Subject key identifier: 2F:E4:FF:A5:FE:54:5E:83:B3:DC:B9:2E:06:E3:BF:2D:24:FC:51:7E
Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Certificate serial: 0566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
Manifest number: 0558
Signing time: Tue 18 Aug 2026 23:45:33 +0000
Manifest this update: Tue 18 Aug 2026 23:45:33 +0000
Manifest next update: Tue 25 Aug 2026 23:45:33 +0000
Files and hashes: 1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: becirthWr3+UwyKsldPFGouqgRBuQwVuZP9awhs0GUg=)
2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: WwWxfFD/dPYIxRDdqsnPJ+69G/DDJejm40kyxhZPiqQ=)
3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: hag+MUbq2Bfcf/v0P/fLMJSbYbpkOhegxdRU84PbHuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 23:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E
Validity
Not Before: Aug 18 23:45:33 2026 GMT
Not After : Aug 25 23:45:33 2026 GMT
Subject: CN=6a84ee9d-7eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:bf:6e:49:71:5f:57:85:87:61:2a:94:87:
25:81:fa:de:4c:a1:41:30:4a:cb:8a:eb:bd:27:03:
f8:bf:37:c3:18:b9:c6:d6:df:85:4b:f7:8f:91:c9:
6c:c6:03:2f:d4:66:9a:84:6c:60:07:f1:b0:81:99:
8d:c4:ec:65:12:35:6d:e6:1a:7b:71:d1:63:39:17:
61:99:eb:10:19:23:d2:44:38:16:77:65:84:e2:e9:
4b:74:01:05:81:10:7e:e4:36:27:da:3f:33:9a:68:
55:ab:7f:0a:d9:2f:77:c9:53:ac:77:5e:ac:98:9d:
69:bd:06:52:a4:40:42:89:d9:b8:83:80:6e:59:75:
da:c3:c2:76:7e:f7:15:49:67:bf:cd:cd:7e:ff:f6:
a1:bf:af:b1:f1:21:0c:2b:ce:3c:be:25:54:f5:b7:
66:3a:f6:8a:e2:e9:41:84:84:a3:e9:65:26:d9:56:
89:a7:e2:ff:47:56:34:4c:6e:d8:a0:23:07:b6:89:
88:4c:cd:b8:55:d9:e3:63:be:fd:6d:e9:dc:93:2d:
5c:2b:27:aa:8a:a0:87:da:27:49:30:e9:21:ff:bc:
58:16:d7:15:1f:8f:91:eb:41:61:b1:2c:17:72:81:
7b:0c:eb:b3:d5:23:8c:8e:d7:87:f4:14:87:25:8d:
d9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E4:FF:A5:FE:54:5E:83:B3:DC:B9:2E:06:E3:BF:2D:24:FC:51:7E
X509v3 Authority Key Identifier:
keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a7:d7:24:44:88:ba:0d:7e:d3:8b:fe:ef:a0:c0:fd:04:fc:
04:fa:e8:fd:8a:b7:54:d9:9c:d9:40:0e:f9:e9:f5:0b:84:6f:
1e:f7:20:46:d3:28:75:52:99:cc:08:c3:75:9b:de:51:20:d2:
66:4a:fc:7b:65:7d:e2:07:98:7d:73:7c:cb:d5:e8:39:2d:7a:
1b:be:8d:cf:8e:d4:07:1b:cc:c3:15:90:79:04:5e:dc:cc:47:
26:6f:89:01:3e:8c:e6:ca:59:f4:95:ba:ff:2c:ee:8f:e7:5f:
06:6e:49:30:e1:d7:82:28:9d:ee:8c:a8:ef:63:dc:a3:19:99:
68:3e:e0:d4:25:81:39:05:e9:90:6d:3c:9d:94:dd:22:a7:c5:
d4:64:26:dc:5e:e3:65:77:47:e5:ab:e4:a2:a1:11:15:34:6e:
34:a8:30:2e:32:b6:71:40:e1:f1:e9:21:c4:40:92:7c:5c:01:
89:9a:06:16:b0:b1:38:b8:d7:d5:19:6e:76:c0:c5:49:20:72:
d3:d0:ed:3f:23:e4:4c:2d:e7:c5:fa:6c:07:48:26:3e:a4:c1:
76:5e:c5:bd:f6:74:d1:cb:65:96:fb:95:f9:ac:89:fd:49:e2:
b4:ca:ae:d3:99:37:ab:ec:65:fb:9a:c5:32:94:77:65:3c:ec:
07:1c:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:47:59 2026 by rpki-client