
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier: Yrh9zi4GPBDvlFyHe76xVwLn4pxKz2C9Ns3+D9ICeXs=
Subject key identifier: 1D:38:46:1E:C8:C9:D9:B4:9E:25:DD:7F:AF:21:27:87:70:80:2B:E1
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number: C1
Signing time: Thu 23 Jul 2026 08:46:11 +0000
Manifest this update: Thu 23 Jul 2026 08:46:10 +0000
Manifest next update: Thu 30 Jul 2026 08:46:10 +0000
Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: ihMkJ8/YxE4AyPGm71wMBmz+1k8mhLoNdor92Ua+Ki8=)
2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: Jul 23 08:46:10 2026 GMT
Not After : Jul 30 08:46:10 2026 GMT
Subject: CN=6a61d4d2-c658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:0b:25:82:eb:65:65:e0:50:73:b7:c6:55:
7e:56:ec:5d:88:3d:96:ce:18:e0:58:ca:92:e2:be:
1a:74:d5:f4:92:76:9e:3b:12:4f:6e:07:5d:fa:3b:
ae:5d:68:c2:e8:a2:9a:c5:ed:29:14:30:1f:7a:35:
81:30:a6:39:3e:93:c2:eb:ab:1a:75:3f:ad:db:da:
7a:fd:ad:2d:8d:8d:61:b6:2f:d2:23:6c:6d:55:a4:
2d:14:00:8c:5c:d8:2e:99:f0:d1:57:cb:57:64:77:
8f:92:fc:d4:28:fc:3d:d3:e8:49:4c:cb:96:c8:ae:
ed:89:b9:a5:ab:a7:1b:f8:1d:f0:ce:35:f6:78:ec:
88:04:41:a1:9d:a8:61:aa:38:7c:09:6a:fb:ad:42:
32:fe:17:f6:9c:7f:25:3f:f2:97:5d:1d:07:f4:e6:
48:ff:92:f8:8a:90:fb:62:a3:d8:53:31:69:f7:49:
8e:0c:69:c2:c3:76:84:e0:0a:cc:1b:06:7e:90:1d:
24:d7:d3:b9:a1:10:f5:72:c5:c7:ed:c0:bd:3a:6e:
a9:f4:d0:dd:eb:80:77:f6:84:ef:cd:97:bd:93:2e:
2e:a0:48:0d:07:1f:16:0d:4c:fc:09:c7:96:7b:07:
95:c0:d7:d9:75:4a:ec:56:98:10:92:87:d7:90:5a:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:38:46:1E:C8:C9:D9:B4:9E:25:DD:7F:AF:21:27:87:70:80:2B:E1
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:87:ba:f6:c9:84:89:a1:ca:4c:1e:0a:cc:80:d3:43:8e:a3:
af:8d:e4:38:02:da:b5:0f:17:cc:64:53:4b:33:e3:93:b7:97:
17:f4:6f:70:21:2d:de:d0:de:6f:98:d9:54:74:55:75:ab:3f:
d4:c1:ad:75:40:8a:f2:fd:a9:49:d1:39:da:11:89:cc:cc:98:
84:3f:95:24:6f:b4:80:21:a4:fe:94:da:75:b2:c2:9f:6c:b6:
6f:3f:c0:27:9f:df:bf:c5:8e:72:3f:ef:ed:26:c0:06:8d:49:
03:c0:3c:00:96:58:7c:40:c2:44:2d:73:48:82:91:fb:ca:64:
e5:bd:ae:c4:20:e1:2b:7d:ff:b3:b1:1b:2b:b7:3d:d6:2a:9a:
4c:30:cf:9d:90:49:1e:f9:6e:89:9b:cc:93:1a:6d:84:1c:6a:
70:f8:73:44:2e:2d:4f:00:85:20:d9:ac:54:11:1d:dc:2e:16:
79:75:07:10:5a:fc:b0:ba:2d:15:10:47:73:57:8e:f0:93:14:
d6:db:cb:57:b5:25:8b:a0:a3:e9:4d:aa:ac:2a:0b:6c:6d:9c:
52:87:bd:48:76:bc:96:5a:e2:49:10:a7:d6:df:7e:60:66:b6:
5a:f4:79:c2:4d:0d:f9:1b:ee:45:e8:3b:37:70:98:dd:85:97:
f2:c8:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:12 2026 by rpki-client