
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier: 8fvoFg/Ivz73MTzhuqJyotDZL/JH0ZWp5j3syly1Q0g=
Subject key identifier: 41:38:5C:DD:C6:23:BC:59:84:EF:59:37:B2:16:84:2C:20:BF:4E:A4
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number: 9D
Signing time: Mon 11 May 2026 07:30:50 +0000
Manifest this update: Mon 11 May 2026 07:30:50 +0000
Manifest next update: Mon 18 May 2026 07:30:50 +0000
Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: GpQYtkFdd+Rz3dZJ4SB+YP4GUKUWQ4vQ8SL6SPNc0Y4=)
2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: May 11 07:30:50 2026 GMT
Not After : May 18 07:30:50 2026 GMT
Subject: CN=6a0185aa-8996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:87:25:a9:38:c0:04:50:d7:09:10:fb:1d:
e9:9e:2f:eb:db:61:3f:af:0e:fa:84:76:d5:b3:3d:
73:39:64:45:9e:d6:4c:ab:a6:2f:a2:6e:86:a5:77:
9a:dd:aa:41:db:10:08:73:47:fe:c5:ef:46:82:26:
86:9e:fa:58:34:44:fa:6e:08:f8:bf:96:0a:09:dd:
2b:4d:68:35:77:0d:8f:ba:e0:19:44:25:ea:52:aa:
ee:9f:3d:1c:f1:ab:02:d8:70:b5:90:24:99:53:29:
57:40:86:47:2f:72:c5:36:5e:d1:8f:b9:9e:9a:35:
60:b4:2f:d6:23:9f:11:ed:af:aa:6c:34:52:6f:e8:
54:71:cc:01:c4:d2:13:20:aa:22:71:bd:79:ff:1e:
e0:0a:88:e1:27:d9:87:fa:ff:74:c7:ce:1d:2c:2b:
34:0d:3d:15:97:5b:02:72:35:7a:20:e0:23:50:e3:
5d:bf:dc:fb:51:7c:63:59:ae:c0:0b:3b:a8:1b:33:
cf:fd:82:c2:a0:0b:12:97:17:3a:55:66:b9:dd:87:
20:b1:fc:37:0b:ea:3c:ab:1d:80:01:12:27:5f:d5:
b3:b7:26:ae:d0:14:dc:67:08:91:b1:9c:7f:ca:51:
8e:16:da:ea:f8:df:64:a5:99:f5:89:c4:ef:f3:ea:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:38:5C:DD:C6:23:BC:59:84:EF:59:37:B2:16:84:2C:20:BF:4E:A4
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:29:78:fa:d6:0f:d1:2d:31:13:d2:d7:e7:ee:62:73:d0:38:
4e:ee:f8:d8:1f:e4:65:04:1b:0f:04:94:de:65:fe:e3:f4:24:
24:be:b9:08:29:5c:c2:c6:c7:f8:50:af:4f:5f:ef:c6:b2:38:
81:cb:a6:7a:58:9c:0f:c9:9c:20:c8:cf:39:c5:b7:b9:33:99:
56:fd:18:b8:cd:fb:0c:63:20:53:40:b4:fa:83:13:b0:0d:bb:
5a:7a:c7:7b:cf:78:a1:d5:de:b2:16:79:02:26:44:fb:b5:6c:
ad:ca:18:6b:d9:a7:83:c1:3c:c8:67:e1:8c:97:90:8e:64:10:
46:82:39:c6:38:91:55:d1:2c:90:65:05:b6:1a:0b:c2:a9:b2:
ad:9e:27:ea:09:b3:f4:18:05:81:28:68:ed:49:e8:61:df:63:
d3:9e:d7:0e:18:7f:34:0a:3d:29:06:38:f8:6b:79:06:1a:80:
80:15:0c:5c:4a:81:2f:da:a6:c6:29:79:31:89:53:2a:55:f9:
c2:ec:e6:ff:76:1a:70:24:37:78:e9:a9:1d:63:83:8f:b8:89:
73:7a:2d:46:76:b7:64:0b:a8:6b:a4:02:f0:a9:b4:cb:a2:96:
8f:4e:0c:f9:12:c0:0a:ef:89:c4:f8:f9:6d:73:e7:0c:d8:e4:
81:f5:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:57 2026 by rpki-client