
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File: X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier: 0vg3WcAPBHcu7swuhybb7zFfSlswoVyCkTwRBt1pANk=
Subject key identifier: 5D:16:A5:B7:88:1D:96:F1:E9:7F:CC:89:8E:39:90:1C:1F:28:41:88
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial: 1F0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number: 1E7C
Signing time: Mon 20 Jul 2026 16:10:24 +0000
Manifest this update: Mon 20 Jul 2026 16:10:24 +0000
Manifest next update: Mon 27 Jul 2026 16:10:24 +0000
Files and hashes: 1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: pefo9whawpbJTFRj+uV4N1tc/N0qwClfAz4eUGc4n/A=)
2: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
3: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E=)
4: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: srVyFBKN0Q9HWcfKgMQOmFLq/c+Rn8Jh5edzm7vxdco=)
5: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7950 (0x1f0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Validity
Not Before: Jul 20 16:10:24 2026 GMT
Not After : Jul 27 16:10:24 2026 GMT
Subject: CN=6a5e4870-f3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:ea:a2:25:05:aa:49:17:1d:31:97:45:d3:
b7:17:72:86:35:13:42:70:43:8c:01:31:34:19:dc:
98:23:ad:63:42:26:1e:65:0b:ea:89:f9:68:45:38:
01:09:c4:11:4d:3f:10:61:fc:2c:56:cc:12:55:0f:
d0:00:18:e9:78:7b:58:76:b2:3e:dc:6d:c0:31:22:
82:f1:52:aa:7b:83:20:69:99:47:f7:f6:24:55:88:
68:2c:42:b4:a0:a3:a6:c5:53:47:6c:97:0f:98:74:
b4:39:1a:84:b1:34:cd:f4:e5:10:76:eb:f6:ad:68:
28:55:8f:03:2c:a8:7e:6c:3a:7e:3a:72:e9:e8:73:
f5:d5:18:0b:53:e2:63:68:26:4d:98:5d:2a:bf:71:
8e:2f:11:4a:06:90:78:25:ba:71:93:69:0e:4c:85:
0f:ce:7f:2e:74:7f:76:0a:07:43:4e:f4:e1:d7:ad:
5d:a1:8d:75:76:ed:05:a8:57:ac:58:9e:70:f8:66:
61:a3:18:05:44:81:3f:64:d0:61:30:5c:f6:ea:1c:
19:26:64:06:86:b1:7e:25:8a:e2:25:ce:56:f2:31:
bd:d4:47:44:2a:54:f1:e6:f6:68:a3:c2:05:2a:07:
da:f2:9b:19:50:86:05:3a:36:56:3b:61:8f:91:aa:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:A5:B7:88:1D:96:F1:E9:7F:CC:89:8E:39:90:1C:1F:28:41:88
X509v3 Authority Key Identifier:
keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:69:9b:32:f2:ae:72:c0:0f:f2:bb:0e:67:02:58:b1:e2:63:
2c:3a:8b:8b:ec:10:a5:e1:ae:42:74:d0:92:ef:0d:f9:e7:01:
50:43:0b:64:71:9f:60:9c:48:7e:e9:82:bb:18:ab:68:88:89:
f5:9e:e4:c2:a2:60:94:2a:86:a9:b1:44:aa:2f:6a:85:d8:2a:
4d:83:18:41:28:58:88:de:f6:95:59:52:a9:6c:2f:80:29:8f:
3e:01:c8:c7:31:d3:54:8c:75:25:37:44:62:01:53:6f:c5:58:
77:e3:e0:38:bd:c5:31:f2:a0:d2:5c:99:d2:b9:c8:c6:37:60:
dd:51:a9:ff:10:3b:77:f2:14:e6:1f:9e:8d:37:95:1c:dd:5d:
f6:ee:34:b5:13:6c:2e:42:a9:0c:04:b6:1d:d2:a3:bd:a2:b8:
0c:14:bd:9b:66:33:76:74:4a:83:b2:80:0b:58:bf:45:7e:2d:
f3:f7:77:19:cf:0b:be:f8:31:6f:30:d1:89:1f:48:f6:5d:9c:
1a:76:f2:38:82:9a:ab:0d:5c:a8:07:bf:d1:fd:7d:6c:7f:f3:
a1:8a:9d:93:e3:dd:b5:cd:48:30:fb:16:0a:7b:34:25:04:d3:
b9:88:f4:fd:3a:56:15:e1:7e:72:b1:22:08:c3:e0:1e:2f:7a:
de:62:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:55:40 2026 by rpki-client