
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json)
Hash identifier: aOBiiNMX+6T0wkx5Hh30D3Q6W5O2A4x3Hm6y3vXfj10=
Subject key identifier: BE:BD:C8:2B:BA:CD:8C:27:13:74:D9:FC:AD:8E:36:45:FA:A1:61:EF
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial: 0E7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
Manifest number: 0E71
Signing time: Fri 24 Jul 2026 17:59:01 +0000
Manifest this update: Fri 24 Jul 2026 17:59:01 +0000
Manifest next update: Fri 31 Jul 2026 17:59:01 +0000
Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: l23DGRX1MyQCenPUEOxyzwECEgHIDshMXSfQahuBDoQ=)
2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: VGnQoHLbOR6gGAIMZ8u2WkXS8JnY0rPW7LfuTtXGg8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 17:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3706 (0xe7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Validity
Not Before: Jul 24 17:59:01 2026 GMT
Not After : Jul 31 17:59:01 2026 GMT
Subject: CN=6a63a7e5-ba7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:da:1c:bd:ad:53:60:77:01:40:b2:a3:95:
39:2f:b4:2d:f9:7c:3c:75:0f:dc:ae:5d:82:ce:9a:
8a:ef:87:47:b6:66:d1:61:44:6c:0f:84:dd:e6:17:
ad:71:18:0e:e3:65:d8:2f:89:91:81:cd:4b:9f:cc:
f1:94:b8:da:b4:35:0b:02:0a:ff:f4:61:a6:44:15:
5f:b1:97:38:98:c4:b6:77:8a:4f:b4:ea:93:49:41:
41:02:f8:6d:26:d6:3e:94:87:6e:26:4d:f1:90:2f:
07:f6:72:a1:a9:4c:38:43:d6:b0:47:96:6a:51:ad:
7e:b2:bb:af:b2:76:af:f3:a0:cc:49:3c:0e:37:59:
c8:b9:1e:21:1c:e7:90:8e:e2:2d:8e:e4:33:cc:fe:
fb:e1:c7:ce:f7:68:69:d5:b2:8a:2b:51:ec:12:ea:
54:f6:6e:b0:3f:b0:87:61:55:72:4b:b5:4f:10:3a:
a7:db:13:4e:e0:81:a7:9d:df:bf:65:e6:72:d5:19:
62:40:73:79:6e:c2:96:58:b1:27:74:59:8b:d7:4f:
79:b2:71:8d:be:87:8d:4e:01:68:bc:b2:c2:4f:84:
b2:0d:70:88:b9:f1:b7:91:b5:43:c4:e9:62:5c:3d:
8f:59:6f:07:6f:32:49:15:b0:7c:54:52:12:72:29:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BD:C8:2B:BA:CD:8C:27:13:74:D9:FC:AD:8E:36:45:FA:A1:61:EF
X509v3 Authority Key Identifier:
keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:65:62:fd:bf:1b:ec:44:bf:ab:61:a7:af:a5:04:b0:07:8b:
64:ab:5d:e5:2a:25:f3:9b:c6:f1:e1:b3:ac:81:08:c4:ff:d2:
dc:28:57:ad:75:ce:67:3a:e3:16:7a:5d:9e:f6:f4:63:b5:00:
ee:c3:52:47:f7:78:a5:24:12:ec:e3:93:9b:92:06:e4:7c:af:
18:41:44:a4:c6:b2:21:2f:51:18:ab:90:eb:6a:b5:7b:03:6e:
6e:0f:1c:37:59:c6:1e:64:62:8b:1c:bc:4d:02:d4:5c:29:70:
d1:6c:2f:cc:09:b5:93:2c:0c:ba:50:e3:60:9e:c0:e9:c4:8c:
c0:e1:4e:03:4e:59:18:73:07:fa:dd:d0:71:0d:54:f1:ae:9d:
9e:04:96:69:37:b5:d3:d4:f1:ce:19:b4:64:0b:ee:7f:c7:ab:
cc:c6:fb:b7:e0:00:a6:3d:29:5b:5b:c1:ed:c6:e7:84:1b:91:
ce:3f:e5:d7:f2:1c:87:05:8e:a5:bf:db:48:dd:2d:78:b7:dc:
e9:b4:3f:44:79:93:fb:0a:09:d7:d7:00:54:ad:7d:54:57:7d:
94:a9:82:1f:9a:0e:13:81:00:b1:82:e2:e8:7d:ee:53:f3:35:
6d:5b:09:6e:d2:83:c3:10:41:1d:ec:2e:d5:3a:08:52:a3:dd:
5d:17:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:21 2026 by rpki-client