
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json)
Hash identifier: cv8AVL5gqZmbxWdlcbRCclJhu4UP/NMVL4VGqHbUudI=
Subject key identifier: 1F:9A:DF:9D:55:69:7E:E3:CF:F0:8D:D9:17:C8:15:13:B6:99:1F:67
Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
Certificate serial: 3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
Manifest number: 3A
Signing time: Thu 23 Jul 2026 10:37:17 +0000
Manifest this update: Thu 23 Jul 2026 10:37:16 +0000
Manifest next update: Thu 30 Jul 2026 10:37:16 +0000
Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: nl6P1YmfkoE29V5KU+5wonpzVeDFDREXRzna/s0mtzw=)
2: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=)
3: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl
rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
Validity
Not Before: Jul 23 10:37:16 2026 GMT
Not After : Jul 30 10:37:16 2026 GMT
Subject: CN=6a61eedd-b71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:96:4a:a7:e3:8d:7e:8d:10:ba:32:52:59:
93:43:8e:1a:36:0e:93:28:11:a3:14:1a:96:54:e4:
61:cf:34:52:31:7d:77:0f:a9:93:d5:8a:00:f2:f2:
57:70:cb:7e:b6:4b:8f:b9:e1:f6:da:ed:34:d7:d5:
d2:9a:71:28:5f:01:ae:20:f4:30:ac:91:db:82:d5:
10:88:37:c2:7c:b0:17:5d:e4:32:ba:44:30:7c:75:
2f:53:ac:a8:98:b6:b7:74:12:37:41:e5:6d:bd:df:
da:4f:93:60:80:86:7a:95:b4:e2:ab:e9:60:fb:cf:
e3:ac:ec:ad:c4:12:f0:d3:83:91:6b:69:fe:a4:2a:
c7:06:52:9d:f8:dd:ae:4d:c9:55:dc:80:9a:21:68:
95:a1:42:1e:9e:8e:66:2d:a4:77:34:f9:c8:4b:99:
0e:9a:bc:69:b8:98:7b:10:3b:92:17:8d:47:d3:9c:
f6:3f:c5:54:22:e5:64:77:75:76:81:37:9b:c1:95:
49:5f:23:ae:80:97:ca:a8:cf:89:2c:4c:41:bb:5f:
66:0a:c3:91:38:3e:0c:83:d4:7e:da:8f:5a:c7:e2:
ec:eb:e4:12:b0:a9:67:de:60:c3:77:c2:66:b7:57:
16:8d:c3:1e:59:27:aa:06:b8:e7:c5:e4:5d:7f:a1:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:DF:9D:55:69:7E:E3:CF:F0:8D:D9:17:C8:15:13:B6:99:1F:67
X509v3 Authority Key Identifier:
keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3c:d9:86:16:63:4d:57:c3:aa:1d:db:64:90:01:33:fb:42:
c4:ce:4e:79:13:34:46:54:21:03:0b:da:1c:4e:5a:2a:6c:9a:
6a:60:22:37:a5:ae:38:07:03:7a:3c:62:39:22:a2:b2:1b:9a:
cf:70:c9:8c:b1:be:ed:c5:5f:17:b0:35:55:ee:24:7f:3b:17:
c7:d3:55:db:29:9a:3d:e7:d6:1d:1d:3c:df:fd:1d:d8:3a:88:
ea:47:41:18:a3:8e:4c:fc:20:c7:e5:5b:fd:4b:48:66:0f:28:
c3:b7:6a:55:9c:0b:8d:87:31:5d:67:13:f6:0e:53:ed:e7:13:
52:6c:74:17:6d:52:8e:1f:c6:67:51:9f:69:2f:66:da:c7:c3:
a2:c7:8f:26:86:1d:4f:05:70:ec:1e:db:ef:37:93:48:6a:a0:
c8:65:78:c0:8c:ac:e7:70:6f:0c:0d:0d:c4:6e:28:91:24:37:
33:d2:b5:bb:3a:65:5c:95:b9:4d:c4:c2:12:37:63:b7:ae:5a:
1c:a6:28:7d:28:01:06:2b:3e:84:c1:b6:1c:46:b7:ff:20:31:
e5:fa:bc:b9:48:47:f9:00:55:ff:8f:ee:9b:bd:bb:3a:4a:c0:
e5:48:be:81:38:3e:e6:59:b9:fa:e4:66:49:39:92:cb:a6:55:
25:66:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:05 2026 by rpki-client