
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier: HYoGcn6YLoEGor7RGRzeA9vsXHGqMcMb9rhbgp+jORc=
Subject key identifier: 16:CC:B5:E8:12:F9:91:2E:B2:5A:8C:19:82:58:33:9D:BD:0C:A8:66
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number: 0251
Signing time: Thu 23 Jul 2026 03:29:43 +0000
Manifest this update: Thu 23 Jul 2026 03:29:43 +0000
Manifest next update: Thu 30 Jul 2026 03:29:43 +0000
Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: PXaFtyzTOyAuxrrPI+1IWYC4NXzMdorpkDmQkphYtUY=)
2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: 9ETu4UCRD2ZBbdrYTYmy+B4SALk6WyjDYk0Dd6dJYMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Validity
Not Before: Jul 23 03:29:43 2026 GMT
Not After : Jul 30 03:29:43 2026 GMT
Subject: CN=6a618aa7-d5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:5c:77:ce:cf:c1:a5:c9:8c:7c:b7:8a:34:
43:80:3a:41:96:14:75:02:92:60:39:48:c8:e3:6d:
08:9b:32:e0:08:97:38:e6:c6:4d:bc:75:6c:d1:f7:
3e:88:95:12:af:41:e2:d8:89:72:95:87:66:be:f0:
aa:06:e5:bd:0f:b9:b6:67:53:4b:80:1f:19:3b:08:
04:f0:82:e5:a9:46:2f:57:50:3d:71:28:2e:d6:fe:
67:1d:d4:06:62:05:fe:ce:40:ab:f1:7b:98:78:04:
fc:9d:22:25:e6:02:be:70:3c:1e:07:6f:13:99:87:
7f:f6:df:ec:dc:fe:ad:43:8c:18:b4:ce:29:ac:cf:
eb:44:4a:14:fb:ca:7f:51:a5:00:fc:1b:0e:e6:fa:
91:6a:ca:9e:9f:4e:27:60:fb:ab:a3:a5:e8:30:4e:
32:72:ec:5a:83:70:3e:f4:1c:28:44:a1:92:1a:58:
99:2a:ac:53:b3:0a:71:c4:f9:6c:d9:f0:3b:a1:15:
72:b6:49:1e:ce:f3:f8:51:6c:69:d3:6b:70:2d:dc:
fc:82:3e:de:6f:2e:10:c2:31:d0:35:46:e1:c5:de:
45:e3:b9:21:87:cb:dc:72:b2:21:27:e2:ff:84:90:
3e:35:76:09:e6:dc:ba:1a:6e:ef:c9:60:08:d2:f3:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CC:B5:E8:12:F9:91:2E:B2:5A:8C:19:82:58:33:9D:BD:0C:A8:66
X509v3 Authority Key Identifier:
keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:88:96:45:26:01:ff:e5:94:7a:4b:29:5d:4a:70:13:21:2e:
c6:c5:ba:58:e4:95:03:b4:5a:23:42:5e:b2:a4:c1:2b:2c:eb:
72:1e:8c:f0:f3:f1:34:a3:f3:60:26:60:6b:69:81:63:76:20:
2b:6c:67:bc:4f:ea:d2:42:49:00:88:82:f8:45:c9:79:75:81:
d4:4f:df:1f:8e:17:3c:5c:9f:2f:e2:6e:f9:8e:4b:2d:3e:d5:
db:43:17:3a:bc:c3:3a:ee:52:38:90:df:94:99:fc:21:1b:21:
95:64:fb:6a:26:13:8e:01:66:72:9a:7d:40:5a:82:2e:de:d4:
2f:25:f0:a4:12:99:ff:b1:42:7b:11:be:2f:1f:67:22:db:88:
a1:aa:6a:a7:15:d7:a2:5c:29:89:87:d8:a4:68:2b:14:a1:a4:
f1:e1:17:87:69:02:1f:a5:63:1b:dc:e0:1e:34:e7:8c:b9:ac:
dc:8d:17:93:de:9b:c9:dd:44:08:9f:59:9e:87:f4:a1:72:e5:
b0:80:cb:d8:73:c1:58:16:d6:a2:12:4b:e5:71:5a:4d:4f:f2:
16:a8:3a:25:90:7f:cd:34:03:19:ed:cf:87:e9:c3:ec:88:e4:
cf:8b:d0:36:52:3b:4c:76:99:14:5e:d7:91:9f:87:1d:2d:5c:
ec:a0:c1:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD
MzY1NTREQUUwHhcNMjYwNzIzMDMyOTQzWhcNMjYwNzMwMDMyOTQzWjAYMRYwFAYD
VQQDEw02YTYxOGFhNy1kNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjFcd87PwaXJjHy3ijRDgDpBlhR1ApJgOUjI420ImzLgCJc45sZNvHVs0fc+
iJUSr0Hi2IlylYdmvvCqBuW9D7m2Z1NLgB8ZOwgE8ILlqUYvV1A9cSgu1v5nHdQG
YgX+zkCr8XuYeAT8nSIl5gK+cDweB28TmYd/9t/s3P6tQ4wYtM4prM/rREoU+8p/
UaUA/BsO5vqRasqen04nYPuro6XoME4ycuxag3A+9BwoRKGSGliZKqxTswpxxPls
2fA7oRVytkkezvP4UWxp02twLdz8gj7eby4QwjHQNUbhxd5F47khh8vccrIhJ+L/
hJA+NXYJ5ty6Gm7vyWAI0vN4NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbMtegS
+ZEuslqMGYJYM529DKhmMB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB
Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n
TlJjMVBzZ0w0eEREWlZUYTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFYiWRSYB/+WUekspXUpwEyEuxsW6WOSVA7RaI0JesqTBKyzrch6M8PPxNKPz
YCZga2mBY3YgK2xnvE/q0kJJAIiC+EXJeXWB1E/fH44XPFyfL+Ju+Y5LLT7V20MX
OrzDOu5SOJDflJn8IRshlWT7aiYTjgFmcpp9QFqCLt7ULyXwpBKZ/7FCexG+Lx9n
ItuIoapqpxXXolwpiYfYpGgrFKGk8eEXh2kCH6VjG9zgHjTnjLms3I0Xk96byd1E
CJ9Znof0oXLlsIDL2HPBWBbWohJL5XFaTU/yFqg6JZB/zTQDGe3Ph+nD7Ijkz4vQ
NlI7THaZFF7XkZ+HHS1c7KDBKw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:29 2026 by rpki-client