
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
File: u4g-aByWIiVDBg6XnT6Chuq2iok.mft (raw, json)
Hash identifier: 1DF6IIFYMpILDPjKE1uqmsmlUH1YGknjS2oj5MDSFyI=
Subject key identifier: DC:34:24:01:BD:AE:3A:AD:BC:B0:D9:6D:A6:CF:2B:54:94:55:F3:DD
Authority key identifier: BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89
Certificate issuer: /CN=A91A4413/serialNumber=BB883E681C96222543060E979D3E8286EAB68A89
Certificate serial: 0320
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
Manifest number: 0319
Signing time: Thu 23 Jul 2026 02:04:13 +0000
Manifest this update: Thu 23 Jul 2026 02:04:13 +0000
Manifest next update: Thu 30 Jul 2026 02:04:13 +0000
Files and hashes: 1: u4g-aByWIiVDBg6XnT6Chuq2iok.crl (hash: /UYish2O1MtZkJ5Va0A4/4VTxA4sO+AsnzyD7ucUg/g=)
2: 3D3C7DC8236A11ED8018D62BC4F9AE02.roa (hash: iZfZicmhqss0Lz5XfZ7ejBxdqVyeViGkC/dW7dNv6es=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl
rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 800 (0x320)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4413, serialNumber=BB883E681C96222543060E979D3E8286EAB68A89
Validity
Not Before: Jul 23 02:04:13 2026 GMT
Not After : Jul 30 02:04:13 2026 GMT
Subject: CN=6a61769d-4bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:6c:c1:63:d8:e4:f4:44:a1:a7:c9:3d:5f:
65:58:54:59:73:c7:56:0d:8c:1c:7f:15:93:18:ae:
a9:a6:8b:e3:89:f8:0c:9e:fe:e1:b0:f3:15:e7:e5:
c5:e7:56:9e:44:bc:05:0b:d3:f5:d5:5a:b7:1a:80:
e0:7b:e7:96:1f:1e:cc:fd:a9:1c:d9:45:e9:a6:48:
9a:d1:37:b6:7e:f2:c4:24:48:a4:4b:63:5b:09:70:
12:13:df:95:e4:ad:27:29:1d:d1:c3:fe:f4:65:6b:
89:34:d0:ef:f8:f8:70:2a:fd:94:52:84:85:eb:a5:
b5:0b:14:ee:bc:fb:47:37:5a:73:05:18:96:92:d6:
3a:7c:33:06:77:97:99:94:41:52:b1:f0:ef:46:b1:
1b:c3:2d:64:63:cb:f5:de:df:ce:51:8e:bc:d2:a1:
1b:59:bd:c6:f0:c2:39:7e:c3:a4:6f:14:08:8c:df:
f1:41:9d:1e:f3:ec:40:50:ce:66:89:cc:e5:cd:4d:
fa:70:ec:80:25:82:50:2c:ea:ae:40:9c:76:dd:f4:
f0:5d:22:13:72:36:fb:f7:c1:16:c6:ea:6b:76:5e:
47:9e:d9:8b:19:07:8e:e4:b3:55:81:6b:86:87:be:
95:2f:4b:15:e9:6a:95:f4:66:7c:2d:28:20:8c:78:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:24:01:BD:AE:3A:AD:BC:B0:D9:6D:A6:CF:2B:54:94:55:F3:DD
X509v3 Authority Key Identifier:
keyid:BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:d5:6d:e4:88:d2:aa:1c:15:30:0c:53:35:14:c2:ef:07:41:
91:8f:55:10:49:3f:dc:70:c9:6d:17:91:52:22:61:4b:1d:d1:
11:4e:75:32:fe:11:7b:2a:f8:9f:2e:79:ec:81:01:db:a9:c2:
2a:61:dc:13:cb:2f:93:9b:6a:0c:19:78:3d:07:5d:5d:aa:10:
c1:68:b4:42:5a:f6:c2:30:28:20:02:a9:ed:13:ce:48:0c:7a:
4b:e9:fd:bb:3b:cf:77:bb:38:c9:24:0e:ae:1c:7a:1d:e0:5c:
7a:ae:82:91:ca:16:d1:fc:6a:5f:85:58:35:78:c5:0a:9f:7d:
46:ca:12:b4:e9:bc:02:20:5a:61:98:34:02:fb:9e:fb:9a:88:
cc:a6:5f:27:0e:32:27:1a:bc:5b:ee:33:7b:fa:4b:26:9c:b8:
51:63:8f:35:1a:41:59:9f:cd:25:62:2d:5a:49:41:7a:eb:4c:
af:df:1b:be:4b:a7:d3:78:43:9f:3a:bc:fe:30:90:c6:72:90:
d9:2d:0e:a3:03:09:31:a2:21:38:8f:c7:64:6e:02:32:2b:69:
67:4c:01:ab:f8:6a:9e:84:32:28:4d:06:48:00:3b:49:e0:f4:
41:eb:7f:1d:94:2d:9c:83:9f:08:91:01:ea:d1:b6:85:12:4a:
c6:ab:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:28 2026 by rpki-client