
$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json)
Hash identifier: oUaVqQFOSi7xbfqB49oxRlUwS/RvgPvwtuZnnse+PVg=
Subject key identifier: 3E:04:64:FE:A7:4A:D6:C2:A2:08:11:98:DD:D6:56:9F:E4:86:93:6F
Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Certificate serial: 1FC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
Manifest number: 1FB5
Signing time: Wed 22 Jul 2026 16:04:24 +0000
Manifest this update: Wed 22 Jul 2026 16:04:24 +0000
Manifest next update: Wed 29 Jul 2026 16:04:24 +0000
Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: V1Qm/TOFQ+PWuAU5w1bcIte5PhD+jg05yLc6vA8JQxc=)
2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: uDJZMcFCbLQlSQcLSBZkCu6SX9omctyPQYO3XpjloA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8129 (0x1fc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Validity
Not Before: Jul 22 16:04:24 2026 GMT
Not After : Jul 29 16:04:24 2026 GMT
Subject: CN=6a60ea08-712e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:ba:94:cf:63:a9:a4:0c:b6:fe:b7:0e:d5:
80:21:65:ef:77:4c:c8:95:6a:77:20:80:60:df:fe:
f6:52:13:c0:92:91:c2:b5:f3:81:c0:56:d8:fe:8a:
9d:72:b9:48:9b:65:9f:38:9b:73:f7:fd:72:43:a8:
22:b3:14:43:0b:95:f5:13:09:c1:06:f7:1d:50:70:
46:04:44:85:dd:89:99:e0:c4:2b:1a:86:0c:ca:76:
70:d6:d6:fe:fa:a7:25:da:5c:5c:34:4b:15:f0:e4:
79:52:27:cf:72:d8:97:67:47:1b:8d:85:50:aa:2e:
00:b9:cb:37:0a:02:60:12:81:89:58:f5:a4:ef:b1:
3e:ba:e9:7d:1f:66:3a:25:c4:b7:d2:d4:85:cb:10:
d5:16:3e:2f:d3:d9:c5:72:1c:57:63:e6:b8:c2:0a:
16:9c:24:47:ca:78:6a:a0:47:ee:a7:4f:2f:34:a3:
1e:ed:47:f5:e1:6e:28:1a:47:b9:35:17:98:fa:cc:
5c:c8:e2:17:89:c9:6d:21:38:3e:a8:d9:2b:c9:2b:
8e:fb:03:55:57:82:4d:b9:89:0e:f6:1e:37:3b:e9:
04:9e:7b:19:de:ee:37:df:33:99:21:59:e6:65:dd:
3e:b0:dd:45:51:b9:52:cb:51:7b:e5:2c:dd:35:ab:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:64:FE:A7:4A:D6:C2:A2:08:11:98:DD:D6:56:9F:E4:86:93:6F
X509v3 Authority Key Identifier:
keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:e8:77:0d:86:51:c4:06:88:ab:57:2a:7c:6e:c4:77:76:
d4:44:29:13:bd:32:f7:12:29:e3:90:13:71:4d:87:64:33:c8:
87:5d:35:ce:c2:ab:3d:bb:36:30:89:b0:54:5b:9b:7f:c3:eb:
4b:83:03:7b:61:b5:19:09:4d:e8:04:33:0a:c6:ee:08:87:06:
29:e1:68:87:36:9e:97:75:96:0f:4c:e0:e1:79:05:4d:25:e7:
59:85:35:33:38:c9:68:d8:5f:c6:f9:73:e1:f8:9f:5a:90:77:
b8:be:0f:6f:61:0b:82:dd:a1:e1:a0:20:9b:c5:11:98:01:be:
07:ab:67:44:42:72:5e:76:4e:06:6f:b0:41:38:97:f6:8e:ed:
f4:12:9c:28:f5:79:4a:b5:ac:38:66:5d:16:f8:c7:db:14:14:
f8:53:c9:42:04:d5:29:78:1c:79:9a:13:25:11:f1:2f:21:6a:
b8:cb:31:73:26:65:8a:80:40:6a:56:e7:cc:73:af:c7:bd:10:
2c:1d:7f:86:af:41:de:c5:b0:68:00:0a:7e:ae:c7:25:c0:6e:
b5:53:2c:5d:a2:16:57:e8:df:7c:83:a4:fc:4c:6c:fb:ff:4a:
b4:12:17:75:48:c8:4b:c2:62:22:14:1f:b2:c5:72:db:e5:cd:
eb:bd:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:53 2026 by rpki-client