
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json)
Hash identifier: K8BqWQlfQdsT5KolzXSh4QdphaagP6c7j5nfcUjxo88=
Subject key identifier: 86:32:8F:12:F8:66:DD:C8:94:6C:4D:D4:4A:27:4D:34:F1:03:A3:2C
Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
Manifest number: 0190
Signing time: Fri 25 Sep 2026 04:29:12 +0000
Manifest this update: Fri 25 Sep 2026 04:29:12 +0000
Manifest next update: Fri 02 Oct 2026 04:29:12 +0000
Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: jqPVac4XfZo5mRAfEbgFOtAyaKqEuwv47jDVWYijWkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Validity
Not Before: Sep 25 04:29:12 2026 GMT
Not After : Oct 2 04:29:12 2026 GMT
Subject: CN=6ab5f898-f4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:5f:37:5e:de:ab:8c:cd:96:dc:40:db:a8:
0b:84:0a:db:bc:73:06:81:e9:4f:5a:16:d8:4e:ee:
48:4a:fa:93:bf:08:08:84:e1:0b:13:40:4b:fc:7f:
5a:c6:85:9f:80:6e:28:d9:5e:1d:b8:70:e4:7b:e3:
53:9b:c6:a4:5d:26:21:6c:d6:35:ec:f9:9b:ab:69:
57:32:97:14:8b:fc:ef:1a:0b:a2:f6:c8:20:3f:75:
d4:cc:ff:1f:2e:0a:c6:96:33:7d:84:f9:4d:5e:05:
9e:6e:35:d3:31:50:6b:85:10:4e:63:af:80:80:37:
32:f9:3a:19:8d:85:1f:92:8d:82:66:a1:6c:80:d2:
29:d3:8e:a8:63:08:88:43:b9:f0:e4:c2:33:94:47:
d5:4d:a9:81:a9:bf:f6:6f:2b:de:f1:8f:6d:a2:d1:
c0:f9:45:23:b8:b6:26:90:90:4b:db:41:f6:5b:c0:
23:4c:b7:3e:49:71:b6:1b:11:0f:cd:ff:d1:2c:95:
12:70:02:68:d7:4c:ca:f6:67:93:81:ac:7e:4b:1e:
c9:b5:d0:32:7e:e2:de:30:45:ee:28:ab:6b:6b:8e:
ef:20:9e:e6:82:79:13:d7:36:81:54:98:88:83:9d:
c8:9c:d2:c5:f8:3d:e7:56:3c:ed:7e:8e:59:7f:bd:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:32:8F:12:F8:66:DD:C8:94:6C:4D:D4:4A:27:4D:34:F1:03:A3:2C
X509v3 Authority Key Identifier:
keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6d:a2:b9:dc:ab:ec:33:dd:65:2e:d3:0d:69:d2:61:b6:d5:
95:0d:2d:32:a2:1c:e1:5e:15:14:6f:79:00:31:44:e4:76:18:
da:d5:85:c5:83:85:5e:b9:e6:df:22:e3:e8:2a:3f:30:e9:1e:
af:8c:39:6b:88:42:5e:d5:43:a9:e1:9d:3d:a8:98:b1:10:85:
87:96:08:77:ee:8b:78:9e:51:b9:52:f2:c7:96:17:f8:f0:75:
ff:d1:bb:f4:19:c7:12:b3:6f:03:0a:1d:fe:b0:74:cd:33:36:
45:bc:4b:a9:aa:0c:dd:f3:d5:08:8a:46:c2:f5:86:d0:94:c5:
9a:4c:a2:ea:50:9b:77:60:f0:cf:40:9b:d1:0d:e9:ac:75:b8:
08:da:be:95:b2:0d:b8:a0:e5:44:33:76:5d:45:85:e8:9b:e4:
41:54:7f:68:da:ea:f4:72:e5:e2:5d:ba:ab:13:b8:82:0c:47:
1b:83:9f:27:e7:25:70:ca:71:c6:62:7e:93:b1:80:45:91:fa:
54:40:44:20:45:b7:a8:7b:0e:6b:a3:ad:f1:6f:6e:20:80:16:
ac:ac:4f:a4:42:da:af:b9:04:bb:ba:f1:d8:08:77:33:92:c2:
fc:0b:8b:1a:6c:7c:e4:45:5c:fb:a4:2f:02:80:0e:74:9e:da:
85:30:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:38:02 2026 by rpki-client