
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier: 2ErMVFEc0joCYPCJDlYpHq8HAr0rhvGUMEjwQxAfY08=
Subject key identifier: 75:19:E8:E9:7A:94:96:3D:26:52:7F:47:EF:75:74:F9:2D:0A:C5:96
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial: 0D2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number: 0CFE
Signing time: Sat 04 Apr 2026 18:05:42 +0000
Manifest this update: Sat 04 Apr 2026 18:05:42 +0000
Manifest next update: Sat 11 Apr 2026 18:05:42 +0000
Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: Oh+xJgdOU+9kMKpEo9liBBKfVZBcmhS+8d83YZEYEbM=)
2: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: FMrV9a339leH9QraYW+j9/idX+LpdB6y6EvY3B6c48k=)
3: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: Dw3nMUxEhyHX5ev98aRNWPLfcsu+JByGF2YmsWZl+nQ=)
4: E26173CE050611EAA0470B49C4F9AE02.roa (hash: T7ng/FvE1eGQwu1xpjITgzXCh8uTK8CfKE7hPSXoFdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3370 (0xd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Validity
Not Before: Apr 4 18:05:42 2026 GMT
Not After : Apr 11 18:05:42 2026 GMT
Subject: CN=69d152f6-f7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:8b:30:32:3f:65:18:c7:23:67:cc:29:bd:
62:91:e4:97:4c:a2:04:8b:cf:02:0c:8a:01:08:31:
32:b5:f6:74:95:e7:dc:52:3f:a9:ec:95:93:7a:1e:
dc:da:5c:2d:93:78:f1:67:7f:e4:54:20:28:4c:e4:
fa:f6:98:09:f0:c3:23:0d:8e:19:fb:5f:4a:c8:89:
1b:30:89:47:b8:4e:d2:92:6d:79:c6:39:4e:61:ab:
61:fb:e0:76:62:82:80:5a:ae:ca:e7:ad:78:44:af:
46:54:49:ee:02:f7:40:22:65:0b:35:09:c0:41:49:
00:ba:6a:89:ae:d5:b1:ae:99:df:78:cd:1e:60:d8:
3e:20:d4:7e:98:d6:a9:46:34:84:e9:2a:d2:ea:99:
a8:62:73:af:b6:58:17:97:5f:b9:b5:72:b2:be:53:
af:ec:77:90:67:5c:c2:61:74:8c:06:1b:29:77:75:
ff:3f:fb:f4:a1:b2:44:ff:ba:35:9b:19:84:a3:c5:
06:99:40:13:5c:9b:cb:da:58:83:8e:6e:29:2e:26:
f2:be:bd:ec:63:c8:1f:99:9d:bf:83:8a:bd:20:3f:
2c:dd:67:06:63:8b:23:b7:c4:cc:78:99:ab:65:f5:
b4:26:90:0d:a6:21:98:13:02:b1:54:e4:26:25:39:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:E8:E9:7A:94:96:3D:26:52:7F:47:EF:75:74:F9:2D:0A:C5:96
X509v3 Authority Key Identifier:
keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d8:b0:80:a1:af:97:b4:99:b0:a6:26:6f:ba:ed:03:8b:ad:
fd:33:ab:82:d6:e9:60:72:d9:37:7c:26:9e:a5:3c:d7:8b:17:
23:1b:bd:fc:f6:5c:ba:8f:f5:7f:c0:ca:82:d1:a9:50:9a:aa:
d8:06:b1:f9:1b:11:31:28:80:2e:94:1d:9b:b8:f0:5a:44:18:
81:17:f4:bf:f6:bb:36:0c:c2:db:0d:ab:6b:4b:ac:6d:71:1f:
51:a6:3f:61:51:f4:f7:6b:2d:3e:70:b5:14:7d:6f:aa:19:98:
54:0d:45:23:19:07:4f:c1:0a:d9:78:8d:12:1d:6f:56:65:2c:
85:f2:ab:71:4d:87:12:ce:3d:3b:cc:2a:08:f7:db:79:79:b9:
87:e2:af:3e:6c:8e:88:96:85:f7:87:93:73:c7:0e:0c:5b:f3:
0e:2f:5f:d1:fa:07:fc:0c:e1:ca:44:0a:ca:e1:94:69:75:bd:
df:2f:48:14:d1:e8:82:a2:d4:f9:17:11:f9:85:c8:c7:b1:a1:
cf:ca:7f:93:58:b4:e8:4c:ad:40:2e:f2:48:66:57:59:95:d6:
f2:41:c7:e8:d5:d5:60:88:ed:d6:55:b5:b4:b8:05:8f:62:53:
30:fd:4e:0b:20:86:cf:00:94:fb:18:4d:43:ef:3a:9e:c4:e8:
ae:5f:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:25 2026 by rpki-client