
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File: n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier: WOsuQfHeHg7cWp1MAnp+dLRgDm1eyebswJiEE3w7kDA=
Subject key identifier: 54:83:56:4A:E1:38:AF:3E:24:5D:DB:32:DB:E8:88:0A:F0:72:BD:54
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 36E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number: 35AA
Signing time: Wed 22 Jul 2026 14:22:53 +0000
Manifest this update: Wed 22 Jul 2026 14:22:52 +0000
Manifest next update: Wed 29 Jul 2026 14:22:52 +0000
Files and hashes: 1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: lj0D8qOS3dtP1GCi68DzRXi8mIae0gqi3eAiCRGBy4M=)
2: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: n/rtVmTMB1Py5Ik0TDu++khNfNTrCl3b/ICvjZej0xc=)
3: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: bMXbbXDj5RaZ0Ee7YCwgs/7Vdo6yL1uCa/jY5e4Qep0=)
4: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: YuxiT+o6NacPiPMOQ8zhMa/ehrSyMJnmfoAK7JucAN0=)
5: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: Dx8o50rE1OKe1inVw3oUo0yNA4V99kP9sCKq9GKRraw=)
6: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: u97TYLT/BQTtijKwV5M2wT1c0/v/G8Iw+MIW/+UaOhM=)
7: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: hz5gUzbaN7J/VQDJx9BzlgHZ7QvQPcRlAB3rDG9NM3I=)
8: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: ajWPfgyIE3umSCJ2gTUfFCsZjiBnhTSdlnITGNY926s=)
9: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: tim1sMDu0bOwl1syg0MHcvHXmnELHIcAaqZu6XOIY64=)
10: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Pi9bRPgU/hz3+L0wJzzWeCFlpEZjC2aR2BJhIidT0sA=)
11: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: tnQvcL+XlKj1mrWVClsnZNGw7PANVizY98r9YXkQdO4=)
12: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: p//zkhXiOBuBirrvlxHSciakC9fZnELNCSm8Uvn27ZE=)
13: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: qtf7Df2GnJiRrGvanH5s0hEvrPF8g7/kGohVnvp97F4=)
14: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: WVPtgUERZHpgB/DQwz60lkH6Uc54oBG0ERaAVC6IExA=)
15: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: BZKoDF/7kTMYC8p2F7sy+ku+IsTTX9iqMyQIA+SIbiY=)
16: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: folYHW0Gwg29Q/Y88gdrsYlLi/YxqwtkEzwH995b74w=)
17: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: T1/3yr80tQn2wXUoaI6SgP3gcD+G/JWjJxOxFcBZOzQ=)
18: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: B27wh3fEi/hAOB71J/u7lh6WCTRhDeDyoP1VWvu0ryI=)
19: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: lpyjRDEla69ljuEGYEqFeb3N2SUniW4iezq7HN/byZI=)
20: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: 2IvnCeqQ65Zlp2C2lqFnO2zCq+IPSyQ8nLjI5fuUZPA=)
21: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: uu4m5WVb6SU6WZl3ObRQUMqZyoKCwCWL6M6mRfFvoL4=)
22: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: 0+07+O2nWAirNYVLyV1pe7GfKo/vf0ORWGc4yAP010g=)
23: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: tuxt7AAVdlIorySbquWSOc2cd9Lyaw78OSqZYuKb270=)
24: CEC68F44973211E9954F0565C4F9AE02.roa (hash: 9TSvBz+OjIAdBGbstVi1TzZ4VL3DuXLguW4IimNLnXA=)
25: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: pTltMgVWE0zVNXrntrbtBqvZnO3y4UNU+dhd1NyglWY=)
26: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: Bwyx7v9ErsR+mUyY+3+Ype9qNhlTd5XIZgvvVkhOvjQ=)
27: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: wq81aF5SSoAZI/JyoA1vNO3zjZsKt2TkcT5Pso38nSU=)
28: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: /+QRen7Io05J4Xucot84AqX64nbfLZG1ouY7NxOjV3s=)
29: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: lHidmOj5/4kQC0HWnQsBBkm8/7iR9N9wMoSuEzHus1A=)
30: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: xXXKUBvKApT8YVzNPAtueFWn7BnVKJjI5nKq0lyvM4o=)
31: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: hRhJmPw6HJ/CFTNiB4jTfaz2NVHh3MBNmnrOJmVcsDg=)
32: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 9CH9K0zReFPkNUN2+CaNA2ol+J26nnIjRlVx1c5X4ZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14054 (0x36e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 22 14:22:52 2026 GMT
Not After : Jul 29 14:22:52 2026 GMT
Subject: CN=6a60d23d-2ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:73:cf:58:8a:81:3f:47:1b:53:b7:0b:79:2a:
c7:ff:f9:00:57:53:b7:09:44:70:b6:52:b2:a2:60:
04:4b:fb:93:98:ff:03:fc:60:1d:ef:d1:38:ec:a8:
b7:c5:18:88:a2:f2:92:20:e1:4b:9b:8d:a9:66:db:
66:24:06:9e:14:c1:ba:a8:9e:c1:17:16:15:30:85:
8f:57:0d:df:c7:e7:c4:d2:a5:31:65:64:d1:7c:43:
58:be:8a:f2:23:19:01:f1:bf:e0:30:c2:bf:da:23:
cd:9a:e9:54:79:43:f3:c8:09:e6:57:55:3c:fc:3b:
e5:9d:6c:80:54:77:b3:09:b1:a9:b4:46:5b:76:76:
1f:38:db:36:90:7c:ab:41:6d:ce:ef:0b:67:1e:63:
cd:08:4e:13:59:d6:30:74:42:a2:46:6a:a8:a0:f4:
5e:ac:ea:be:87:75:be:d6:75:d7:08:54:77:7e:47:
39:22:fe:f9:8d:f6:0d:ea:63:f6:13:71:52:cc:af:
12:5e:a7:83:d6:c1:02:59:24:8f:8d:8a:ac:48:77:
ad:24:bb:b3:03:4e:5b:65:b1:cc:52:05:8f:01:f0:
ff:79:2a:9f:65:c0:cd:9d:f8:9f:5b:88:56:c5:8e:
2a:56:2d:40:3a:f3:79:9e:23:d2:8c:37:66:36:9d:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:83:56:4A:E1:38:AF:3E:24:5D:DB:32:DB:E8:88:0A:F0:72:BD:54
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:48:7f:14:ee:bf:56:f8:4a:5d:99:c8:6b:f2:12:70:5b:5b:
e6:de:ea:5c:24:2d:b6:62:0c:b6:06:de:30:14:15:8d:9f:e5:
86:c9:a2:06:17:81:8a:fc:0d:b6:85:9d:ee:74:bc:4a:52:96:
8f:aa:63:7d:b5:6d:d9:6b:4d:b0:84:4f:19:54:b2:69:d2:ab:
35:51:76:fd:c9:c3:b7:84:02:ea:32:79:55:88:d8:7c:4d:88:
db:3d:c1:7e:6c:d2:85:f7:89:98:5e:63:89:32:92:90:5a:43:
96:77:fe:7d:18:d2:f4:b3:61:83:24:b6:0e:b4:4c:c1:33:5a:
54:a8:f5:cd:91:0d:cf:81:6c:09:1b:a5:7f:2a:80:b6:37:88:
f5:0c:d8:88:a8:0c:99:ff:91:4c:65:36:1a:13:8f:c7:69:c0:
9e:a8:44:45:4b:58:51:80:ef:c9:ef:70:a1:8f:70:fa:94:a0:
27:bc:0c:d1:be:7a:9d:c2:fe:cc:1c:62:22:a8:64:a1:62:57:
2d:67:82:d8:7e:94:25:ca:4c:c0:c0:ed:06:45:5d:f4:00:ae:
a4:12:e8:39:a5:67:4c:47:a7:60:e5:a9:81:ce:f8:4d:77:8b:
4e:46:ed:c0:79:d7:d1:fc:01:c1:04:83:a0:87:57:b1:59:89:
87:a1:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:55:44 2026 by rpki-client