
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier: +NoF2MaAJEmU7bscTQm3H5I18nXuonLyiGTbNZtZpEo=
Subject key identifier: D8:FB:1E:65:B1:F4:18:04:A2:13:8F:FD:12:F6:EF:E6:1E:9B:93:72
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number: A4
Signing time: Fri 25 Sep 2026 07:22:13 +0000
Manifest this update: Fri 25 Sep 2026 07:22:13 +0000
Manifest next update: Fri 02 Oct 2026 07:22:13 +0000
Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: 0CgOhH6mPVuHLPrcseW/w9/cXA+6WSs5aH5UytVYgKY=)
2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=)
3: eR8yiPj_HfPocgIKe4Lfgud2LQ4.asa (hash: GkxPfUymF1yghLhW8uwGshrG1gg+jszt03IX72KcUQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Validity
Not Before: Sep 25 07:22:13 2026 GMT
Not After : Oct 2 07:22:13 2026 GMT
Subject: CN=6ab62125-fa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:96:62:e6:4b:b4:3a:c3:a3:9f:92:5d:1d:
74:0d:72:f5:df:66:6a:01:a2:8e:95:c1:26:ef:50:
9e:8d:c0:a8:2d:f4:ed:64:35:88:1e:db:64:bb:15:
22:e2:8c:c2:39:08:03:83:88:c7:fd:6b:02:97:f1:
42:b5:e1:fb:09:5e:87:01:d4:19:e2:0a:64:09:94:
34:85:c6:c6:e8:1a:91:1a:99:35:02:18:48:70:fa:
45:25:09:df:36:b3:04:3e:84:82:2b:a3:13:84:5c:
54:92:6b:1c:2b:df:3d:a5:48:78:d7:24:31:d6:7c:
6e:ce:33:ea:75:ca:60:b2:51:46:93:a1:e0:e0:5d:
23:ef:28:85:34:2b:82:00:eb:fe:ac:82:32:54:0e:
68:3a:a5:6f:d7:1d:6a:a9:6d:27:b8:b1:87:4d:94:
bf:b7:21:0a:c3:ad:de:6e:10:b2:96:a3:ff:66:93:
22:a6:7c:52:f3:d5:3e:e1:83:5d:c9:00:ea:cc:bd:
8a:57:eb:ec:2e:e4:cc:ec:0f:4a:b3:6e:af:03:9f:
2b:91:4a:c5:8b:de:f9:69:3e:bd:41:76:f1:9f:59:
6b:d8:43:f4:97:7a:8c:1c:d7:35:9c:cd:0f:be:0b:
5c:99:18:06:b1:1c:03:2b:61:95:d9:db:23:3d:8d:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FB:1E:65:B1:F4:18:04:A2:13:8F:FD:12:F6:EF:E6:1E:9B:93:72
X509v3 Authority Key Identifier:
keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2b:bd:6d:d7:5d:43:16:7e:45:a3:29:f1:17:47:21:d9:e9:
95:d9:e1:a4:bc:00:9f:57:a4:6f:65:f6:f8:ef:93:91:8d:92:
f0:7f:c1:71:26:74:54:ce:c4:4d:67:57:2a:e8:6d:50:3e:5a:
9b:9d:59:6e:0f:51:16:29:fe:e3:17:14:39:60:62:12:d3:12:
1d:20:83:1b:40:25:a7:ad:a6:4a:20:ea:68:c9:1d:f2:23:07:
12:b5:7d:48:b4:c3:bf:4a:34:ef:d7:21:e8:ba:aa:91:00:16:
89:18:03:cb:64:45:4c:95:1e:8a:02:f2:cb:19:f5:c9:03:50:
01:08:a6:a6:0d:bf:ea:1a:66:36:4c:cb:26:71:ae:a8:68:56:
84:13:0a:64:ed:14:ee:72:4f:27:38:e7:b6:c4:2d:70:03:fd:
65:04:50:97:bf:50:81:25:dc:b3:54:97:6c:d5:6a:5b:50:7f:
c9:f6:52:d6:c9:79:ea:b4:7b:bf:e7:6b:55:13:22:85:d0:c3:
70:ba:aa:63:86:9b:8d:f9:da:5b:60:62:4a:42:06:a4:be:c7:
aa:44:f3:54:c4:9d:4e:59:ee:d7:c9:30:fe:58:94:e2:aa:55:
6b:46:e3:7f:66:14:77:0b:20:37:04:15:5b:0b:0c:ba:b4:0d:
95:e1:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:45:45 2026 by rpki-client