
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier: xFQen5xmFWAq2GFXetlzFeuTICXLdNHNzirvSe6/Lj0=
Subject key identifier: EA:38:AF:05:9B:9D:36:7A:BA:A5:00:12:A6:79:F7:AD:EE:1C:C5:21
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial: 1F2C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number: 1E98
Signing time: Fri 04 Sep 2026 16:02:24 +0000
Manifest this update: Fri 04 Sep 2026 16:02:24 +0000
Manifest next update: Fri 11 Sep 2026 16:02:24 +0000
Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: YYNbuRa3M8Rgntv0EXb0xlUDItshpmKmhCXMOwQrgHU=)
2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
3: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
4: 807395488FDD11F195BE82A73211F970.roa (hash: BU7K+VvzWJLMxSs9elkeme33blAxmlXtFe8kkWOD/8A=)
5: CD420BBC86EF11F19E006003A7EE528E.roa (hash: prjxQAidgmq4bIL41IJPb4DemAHY/2tYmvyzka4GluM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7980 (0x1f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Validity
Not Before: Sep 4 16:02:24 2026 GMT
Not After : Sep 11 16:02:24 2026 GMT
Subject: CN=6a9aeb90-d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:c4:05:98:0b:bc:1d:bd:21:80:15:08:40:
36:bd:ca:50:3f:18:f5:9f:0e:c0:fc:b2:64:d5:32:
5c:e0:78:7b:4b:2a:ab:eb:15:85:ad:45:b0:17:41:
af:21:74:32:c2:a9:f0:04:04:b1:03:15:90:c3:2c:
31:78:c0:e8:bc:0b:ea:c3:20:81:66:85:a4:45:c8:
3b:54:93:64:5f:15:12:72:d0:4f:33:7e:36:3e:ae:
2f:90:a7:8b:9d:7a:4c:e5:f4:0a:bd:42:4b:bf:34:
76:86:c8:23:eb:37:07:8f:a3:a0:02:15:f6:0d:d1:
6d:e8:64:4d:31:ba:45:15:0c:fb:bc:2a:1f:53:ef:
bc:81:3a:46:9f:20:47:55:89:44:81:0d:51:69:83:
a6:30:9a:ad:f3:47:ef:d6:e7:39:f4:2c:46:4d:14:
06:96:1a:aa:f1:a2:88:6d:2e:ef:fc:eb:6a:eb:d0:
f3:f9:3b:14:60:68:87:72:03:a0:9c:c0:f5:5d:9a:
8f:fe:f7:f0:c3:61:a0:7f:73:99:73:27:f4:8d:d3:
3b:c7:54:36:aa:3c:df:65:82:42:a5:62:fe:ef:5e:
ac:54:7c:c1:38:12:6a:6c:73:f8:31:e6:ad:b9:1a:
da:c0:29:67:27:b7:81:83:d0:b8:53:33:5c:fa:3c:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:38:AF:05:9B:9D:36:7A:BA:A5:00:12:A6:79:F7:AD:EE:1C:C5:21
X509v3 Authority Key Identifier:
keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:f8:a6:4e:02:82:ad:f7:30:f9:77:62:fa:a2:5c:38:c6:2e:
42:9d:e5:eb:e8:a9:04:51:ed:70:02:04:da:4a:68:5e:c5:57:
06:62:8a:d3:13:be:d3:eb:ec:b9:c2:36:e9:af:f9:26:3e:a6:
fd:ff:0d:70:d2:b6:2c:ed:15:db:14:4e:6c:7c:69:49:b1:81:
d9:33:61:30:2c:81:a0:73:42:44:ba:54:61:ec:72:39:c4:6f:
f2:d9:fd:3e:d7:19:c4:c5:31:6c:90:2f:4e:61:2c:a1:07:0a:
55:a9:08:98:5b:56:70:bd:f8:6d:34:8a:05:84:ac:8e:c0:99:
6c:ac:87:bf:cb:87:c6:98:6a:e5:5a:a8:9f:40:26:fc:21:12:
0a:b9:22:97:55:6d:00:ed:e3:66:74:f8:5c:2f:e2:4d:aa:09:
17:73:72:f1:ab:e7:56:9e:37:60:f7:2d:47:5f:9e:b0:e7:4d:
0c:e7:40:07:66:20:98:10:17:26:11:30:e2:df:d5:de:87:08:
3b:a2:6f:d3:94:aa:12:26:0e:cb:a1:f1:74:bf:7b:76:87:a7:
49:3d:0d:55:2e:88:21:92:8e:d8:c3:fa:f1:ad:d9:f9:19:4c:
d4:23:83:6f:6e:cd:cf:e6:88:8d:63:84:d6:e3:78:96:2e:0c:
24:f8:46:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx
NzA3N0U2MzIwHhcNMjYwOTA0MTYwMjI0WhcNMjYwOTExMTYwMjI0WjAYMRYwFAYD
VQQDEw02YTlhZWI5MC1kNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8KrEBZgLvB29IYAVCEA2vcpQPxj1nw7A/LJk1TJc4Hh7Syqr6xWFrUWwF0Gv
IXQywqnwBASxAxWQwywxeMDovAvqwyCBZoWkRcg7VJNkXxUSctBPM342Pq4vkKeL
nXpM5fQKvUJLvzR2hsgj6zcHj6OgAhX2DdFt6GRNMbpFFQz7vCofU++8gTpGnyBH
VYlEgQ1RaYOmMJqt80fv1uc59CxGTRQGlhqq8aKIbS7v/Otq69Dz+TsUYGiHcgOg
nMD1XZqP/vfww2Ggf3OZcyf0jdM7x1Q2qjzfZYJCpWL+716sVHzBOBJqbHP4Meat
uRrawClnJ7eBg9C4UzNc+jyWSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOo4rwWb
nTZ6uqUAEqZ5963uHMUhMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1
MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf
QlJVbi1sTTlSNmtYQjM1akkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMfimTgKCrfcw+Xdi+qJcOMYuQp3l6+ipBFHtcAIE2kpoXsVXBmKK0xO+0+vs
ucI26a/5Jj6m/f8NcNK2LO0V2xRObHxpSbGB2TNhMCyBoHNCRLpUYexyOcRv8tn9
PtcZxMUxbJAvTmEsoQcKVakImFtWcL34bTSKBYSsjsCZbKyHv8uHxphq5Vqon0Am
/CESCrkil1VtAO3jZnT4XC/iTaoJF3Ny8avnVp43YPctR1+esOdNDOdAB2YgmBAX
JhEw4t/V3ocIO6Jv05SqEiYOy6HxdL97doenST0NVS6IIZKO2MP68a3Z+RlM1COD
b27Nz+aIjWOE1uN4li4MJPhG4g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:18:12 2026 by rpki-client