
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier: t94HY0X2YDkeJQC/hFmdGmJs4I+6ahp6jOcs17MDL10=
Subject key identifier: D7:89:67:5B:F4:FE:BE:85:05:6D:F0:83:8C:F1:2D:23:F7:E9:01:7E
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial: 1EE0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number: 1E4E
Signing time: Mon 20 Apr 2026 16:02:44 +0000
Manifest this update: Mon 20 Apr 2026 16:02:43 +0000
Manifest next update: Mon 27 Apr 2026 16:02:43 +0000
Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: VyzfaYYbCxHuCrqIohXE3DwYeGvKNiK2XparkYNUEnU=)
2: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
3: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
4: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 16:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7904 (0x1ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Validity
Not Before: Apr 20 16:02:43 2026 GMT
Not After : Apr 27 16:02:43 2026 GMT
Subject: CN=69e64e23-b5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:1d:6f:fb:b2:24:c3:32:d7:73:fa:e7:d6:
f1:35:f2:5e:90:f2:f7:cd:d6:31:df:50:d6:4a:ed:
fe:b7:d8:09:0d:ce:c1:ef:d8:14:ce:c6:be:38:61:
e8:5b:c1:41:6b:93:8c:8d:74:a0:f6:ce:6a:c1:3e:
3a:79:1f:68:3f:e9:5c:dd:9f:e2:8a:a6:c3:d3:55:
ea:f9:15:3b:3b:67:e1:ba:fa:db:41:b5:41:92:c3:
16:ca:0f:03:40:3f:78:63:93:29:f6:71:77:5a:cb:
2f:4d:6c:8a:52:0f:40:df:5e:39:08:e3:48:e0:97:
14:e7:11:07:51:12:67:b1:af:66:4b:16:ce:5e:6d:
db:35:93:39:8d:c5:3b:22:d6:da:b6:92:40:85:19:
01:eb:b2:3c:65:d9:5e:77:98:6d:4e:cd:a2:df:cd:
a2:33:14:4e:c0:49:9f:5a:85:df:9b:ee:43:1b:af:
aa:03:6f:14:75:27:28:74:17:f9:c0:1a:e1:3b:06:
b9:a4:16:b2:be:7b:9d:9d:b7:49:9f:5b:15:f4:ba:
dd:da:5b:24:24:91:01:64:03:33:44:04:3b:37:80:
d8:a5:f2:49:ea:f8:6d:84:bd:34:ff:fa:51:d8:c5:
0d:f0:28:98:8d:f2:d6:37:89:b5:63:fb:2f:08:b5:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:67:5B:F4:FE:BE:85:05:6D:F0:83:8C:F1:2D:23:F7:E9:01:7E
X509v3 Authority Key Identifier:
keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d7:b0:be:ba:ce:90:48:3b:42:a1:a9:6f:6f:68:7f:ab:1b:
44:51:45:90:7c:71:b8:75:ca:d1:29:7d:b2:72:71:7e:c5:e9:
53:24:18:02:6a:65:17:e6:48:f8:08:f4:6a:1f:2b:61:f6:54:
6c:03:23:8e:b2:ee:47:5a:16:0b:69:66:f3:74:18:dd:b3:95:
23:f3:ce:35:ee:a0:df:d5:d6:59:44:d2:f8:fe:1d:6a:d1:b5:
f1:37:f5:ec:b2:7b:b5:3f:4a:1a:46:34:6e:12:78:1b:be:90:
4a:4b:06:90:36:58:ec:02:74:91:9d:03:32:ef:80:a9:62:8a:
d1:54:08:0b:28:6d:fc:01:7e:39:b6:3c:1b:d8:e5:33:0f:bd:
ee:e2:3e:77:96:2a:f5:c9:a5:a9:b7:82:68:ab:1e:ca:9b:f4:
46:69:38:b4:31:b1:80:35:51:b1:93:fa:ee:c8:ca:2f:4b:10:
8d:90:89:36:6e:fa:a1:64:18:0c:1e:94:96:c5:70:72:bb:86:
59:89:43:d5:3a:0d:a1:64:40:f3:b7:da:90:8a:e5:97:69:e3:
8c:e3:35:0e:97:6c:b7:a2:2f:e3:d4:d0:68:b7:ce:3a:fe:26:
42:2e:1b:a4:66:d3:ce:32:27:4d:72:14:9b:fb:ff:8b:b1:6d:
a4:ef:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:33:53 2026 by rpki-client