
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier: 0SWaWtfXEAXjI/FwNejbdAlVYvJ0Ic5EA0kbfooZWr8=
Subject key identifier: D1:CD:9D:B0:D8:9A:2B:9A:79:9C:25:FD:ED:9D:F9:72:AA:8A:45:BC
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0AE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number: 0AC7
Signing time: Thu 24 Sep 2026 19:24:22 +0000
Manifest this update: Thu 24 Sep 2026 19:24:21 +0000
Manifest next update: Thu 01 Oct 2026 19:24:21 +0000
Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: 2yqwhFQxEFrnowkQmayTxB2N7g5cWGqMGAQ3/ZjzKWg=)
2: D520BC1A7F2511F193FF4ECD8AA30FBC.roa (hash: cYVs4UtWMOUgw+pmidHUQjILVWpjgcEIdNe72N7OhlM=)
3: 2ACA766C751511F18829B6FC70A30FBC.roa (hash: fC6Nc+Jtk1WvyemJtWNOUp/N1CwROSxHeCpLb+/dGnY=)
4: D61FACAC7F2511F193FF4ECD8AA30FBC.roa (hash: Jy4Oj/aitMJWrPnGk37BzvM5yrFoetv9y1SnJ11uK70=)
5: 0A5A5A8C868611F1834D6ADF67A30FBC.roa (hash: EnnfgpQNdSPaqBnvSKsk/cfhTzDdzQOYchOp4FDnxR8=)
6: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: Vj7o88kIi1gzoKZrYduw49KYBvPlvY9XiAyKSejHJoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2788 (0xae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Sep 24 19:24:21 2026 GMT
Not After : Oct 1 19:24:21 2026 GMT
Subject: CN=6ab578e6-f25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:35:57:f1:98:5d:b7:2a:6a:55:de:8d:04:
2d:ce:69:f8:86:f3:a5:db:14:10:ee:6f:cc:4c:cb:
e0:df:fe:9e:a9:77:4d:8e:ec:27:12:e9:6c:de:ef:
54:32:88:8a:28:aa:2e:2e:42:34:9a:53:db:af:fc:
c1:b0:ea:f3:fd:b9:4e:e1:80:4f:47:10:92:17:ea:
90:47:1b:dc:bc:36:7e:ee:c2:90:1b:11:f9:9d:27:
2e:3e:ed:4e:7e:fa:3d:b4:db:cd:83:73:2c:44:6f:
91:0c:12:5b:8d:f6:bf:6b:69:87:0d:e8:d5:94:28:
07:72:0c:bb:82:84:5f:19:02:3b:5f:c5:eb:c2:e3:
6d:3c:7c:0c:0b:8b:06:d4:ea:14:02:01:59:b0:f0:
4e:21:50:44:e9:cc:23:13:4c:37:b7:da:58:93:0f:
39:b6:61:a1:38:b9:96:fb:e8:d0:6b:69:77:a1:a1:
6b:b5:b2:28:94:e1:11:0c:4a:11:99:c4:d4:eb:e2:
6f:9c:f1:90:d5:1f:d6:db:3e:2c:98:58:d0:21:99:
79:47:60:d3:8c:b7:ad:b2:e1:d1:79:ba:5b:11:06:
ab:8d:71:d1:0e:eb:8d:05:36:77:1f:ed:e4:e4:7d:
00:77:a0:9b:51:09:5e:a9:cd:8c:b5:68:3d:0c:f1:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CD:9D:B0:D8:9A:2B:9A:79:9C:25:FD:ED:9D:F9:72:AA:8A:45:BC
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:41:c7:5a:02:1f:9f:98:bf:28:22:a4:99:10:2c:32:37:ac:
65:a1:86:d5:1f:85:10:9a:3d:ac:e4:af:30:83:a6:39:9c:15:
df:e6:39:08:31:98:e2:dc:4c:84:d1:a6:03:27:d5:cb:9d:18:
ae:e5:d4:b3:d6:54:15:cc:79:cb:70:78:73:b4:8e:6b:99:73:
f2:45:f3:3d:87:fd:1c:9a:a8:d1:14:c3:24:76:a5:c6:6e:d7:
aa:06:99:54:6a:b8:26:28:2c:ce:b4:ac:ac:97:08:f8:2c:cd:
8a:84:38:85:f7:d1:b3:a7:ed:a0:56:c3:42:fa:9d:d9:13:2e:
c9:47:12:7b:9e:ba:53:73:36:a9:f0:d0:8f:8d:25:9f:77:7c:
51:84:2c:ca:bf:76:da:20:f3:2e:26:01:f2:94:ae:d7:aa:4b:
05:82:70:25:e8:73:ca:1a:0a:25:1b:58:db:4f:63:0b:9b:33:
a2:fa:d9:a4:bc:15:e0:6c:dd:5f:d6:6a:3d:cd:55:4a:98:13:
1d:40:d3:34:81:0c:a1:27:a6:21:38:df:9b:93:f0:32:44:3e:
28:0a:92:c9:30:3c:74:70:8c:66:89:47:f9:98:e6:47:d8:4e:
22:67:a6:e2:02:db:99:d5:74:d6:85:fb:9d:55:85:c9:ca:49:
42:5e:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:45:01 2026 by rpki-client