
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier: 5/Vro8LRl2NUkfQIqgZfia5r3yXCuDfmBC7gX2tJWRo=
Subject key identifier: 6F:39:12:D5:5D:51:56:45:04:39:66:AE:0D:84:52:76:38:16:CB:29
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial: 1EF7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number: 1E65
Signing time: Thu 04 Jun 2026 16:04:43 +0000
Manifest this update: Thu 04 Jun 2026 16:04:42 +0000
Manifest next update: Thu 11 Jun 2026 16:04:42 +0000
Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: dptyuBlJIuJTFoX5x0ac5dTiG071gemPLBnJkyjSOtM=)
2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
3: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
4: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
5: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 16:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7927 (0x1ef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Validity
Not Before: Jun 4 16:04:42 2026 GMT
Not After : Jun 11 16:04:42 2026 GMT
Subject: CN=6a21a21b-c0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:3a:cb:80:37:f0:b6:d3:76:81:59:05:6d:
ea:96:77:48:ac:59:75:74:7e:ec:73:56:95:d6:2a:
52:3b:5e:a9:06:ed:6c:40:ef:71:58:52:e0:2e:63:
e5:75:8e:05:18:e3:08:aa:55:7d:6a:90:84:ab:11:
d5:8a:61:5d:88:cd:e7:80:4e:10:c3:cd:85:a8:5e:
c4:4d:f4:10:bf:59:4d:63:f9:b2:2b:b4:25:12:7b:
d0:37:39:72:ac:68:38:97:54:dc:f0:0b:eb:46:17:
a5:f7:81:92:21:c0:3d:28:52:3d:51:a4:4c:98:96:
82:4b:9b:95:6f:48:df:e5:95:e8:ed:cd:21:41:65:
0b:b6:38:42:18:35:21:9a:6c:ad:de:8d:a3:dc:17:
74:a9:10:52:18:7f:b4:20:41:4c:4e:4b:cb:5b:ab:
01:37:87:20:15:fe:0b:d9:fd:78:eb:26:58:80:52:
81:ee:e9:ac:08:9a:66:f8:56:93:75:32:89:ac:a5:
eb:3a:30:31:78:4d:e6:ef:d7:21:43:f7:34:7b:75:
29:13:25:1a:d3:98:e1:03:a4:37:7b:b7:3e:c1:17:
ae:cb:d8:7e:d1:e7:3b:af:b2:f0:1d:3e:43:a0:ca:
f1:78:2d:ff:35:26:ea:3a:19:b4:cb:8e:38:ef:8a:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:12:D5:5D:51:56:45:04:39:66:AE:0D:84:52:76:38:16:CB:29
X509v3 Authority Key Identifier:
keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:2f:ad:f9:b3:af:60:1b:9e:00:ff:81:2b:a7:5f:93:dd:c2:
0e:4a:a3:57:3c:62:bb:61:f7:4c:1c:ed:0a:4c:12:97:4c:3c:
f5:07:aa:89:2b:fd:fe:52:f9:00:8c:fe:9f:a4:a0:cb:3c:a6:
ee:cb:a3:90:7b:13:df:5e:c6:1f:b9:de:b0:cc:6f:73:d6:c6:
60:be:27:1c:0f:28:e1:93:89:8f:78:80:11:44:1f:3b:ce:5e:
21:7e:11:05:fd:73:f8:e3:e9:34:d0:d2:3c:5c:9c:16:87:b5:
d0:f2:c8:2c:26:a1:28:73:14:61:35:87:55:aa:93:64:48:06:
ee:49:e4:c5:a3:93:0e:77:53:8a:a7:a2:ab:8e:e4:f2:ef:31:
de:b0:55:ae:3d:9a:18:57:3d:31:06:a9:c5:e8:01:e1:bb:85:
65:0a:83:64:41:54:2b:52:be:7e:ee:3e:1b:e7:d1:33:fe:68:
ad:a3:2d:0b:f8:63:82:10:31:f5:4e:a5:a4:60:ae:e6:98:aa:
3e:2a:22:37:9c:85:da:b8:cc:34:39:26:ad:af:15:26:24:b9:
a6:d1:55:e8:a3:8c:ea:b4:2f:9e:f7:7e:ca:da:d2:9c:ef:78:
1b:38:44:86:6e:83:fd:e9:2f:03:15:2a:fa:e8:d1:76:9c:34:
26:fc:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:08 2026 by rpki-client