
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json)
Hash identifier: 4nSqR1c7VoVHdmmv0Koq2egGpi+LyrkVFo/2U5MFNvw=
Subject key identifier: 23:3D:20:AF:AB:B4:CC:1A:71:98:F7:9C:18:4D:AD:48:5E:0F:3F:B7
Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
Manifest number: 5B
Signing time: Fri 25 Sep 2026 08:18:35 +0000
Manifest this update: Fri 25 Sep 2026 08:18:34 +0000
Manifest next update: Fri 02 Oct 2026 08:18:34 +0000
Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: WufqVcPZSm9k3N1Xmy9q8+C8wD2iKw89gdWWCJqaciA=)
2: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=)
3: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl
rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7
Validity
Not Before: Sep 25 08:18:34 2026 GMT
Not After : Oct 2 08:18:34 2026 GMT
Subject: CN=6ab62e5b-415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:3d:2a:71:88:9b:02:18:59:39:25:ec:74:
53:8a:be:0c:df:b3:06:4f:f9:01:7f:d6:3f:e9:1d:
c9:9e:db:af:ef:d0:d2:bf:5a:50:13:ac:0d:42:1f:
2e:a6:84:ea:4d:6a:c2:79:89:1c:e3:e5:9a:96:1b:
51:ad:b9:51:15:0c:80:6f:79:0d:83:13:ff:d8:58:
d2:79:db:5f:a8:67:4e:af:6a:bd:9b:23:f9:1f:da:
31:9f:fd:e6:20:fe:ad:78:a8:07:db:ae:a9:95:ff:
bc:0f:b9:8e:0b:3e:4c:3e:fd:71:2c:67:ba:95:e7:
d8:48:2b:22:4b:6c:e5:ae:bf:35:da:74:99:b2:54:
69:3c:85:ea:42:1e:02:ef:54:3c:58:0a:cb:6c:8e:
69:b7:c8:12:b6:1b:bf:38:c1:66:ef:74:8d:40:ee:
eb:72:46:6b:50:12:14:62:b6:5e:a8:94:ef:08:da:
c0:3f:6f:ff:6f:5f:15:09:e4:67:b2:56:79:99:6a:
af:79:9e:ca:9d:1e:e1:5d:49:97:9c:59:62:b8:d7:
42:0a:38:44:cb:68:f2:07:db:bd:eb:a1:a3:8f:78:
71:0a:45:9e:f6:28:f9:84:cf:4d:a5:85:85:28:b1:
f7:35:78:a7:40:2c:0d:46:ac:87:bb:3a:e8:9b:cb:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:20:AF:AB:B4:CC:1A:71:98:F7:9C:18:4D:AD:48:5E:0F:3F:B7
X509v3 Authority Key Identifier:
keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:ee:59:89:fe:52:3e:41:2f:10:0b:c3:73:f8:1d:b9:d3:
24:53:ee:ee:b5:9f:23:e2:e6:96:85:54:6f:82:c5:c8:e1:81:
cf:c9:03:e0:cb:3b:e5:a5:96:25:ba:3c:00:7c:89:51:bb:8c:
26:68:f9:c6:95:c5:00:75:44:db:ba:7f:ed:c6:ed:a6:8d:f3:
80:93:cc:49:3d:c9:69:0c:a6:a2:c8:7b:96:bf:3b:a0:2d:cd:
ac:b0:95:3e:2d:9a:a0:4f:04:41:59:bf:01:18:b2:f0:fd:85:
a3:da:d0:4f:b6:0e:4a:4f:5d:ba:57:f8:c0:23:38:19:08:e1:
6e:64:27:0c:dd:95:d3:f3:e2:fe:2c:c3:50:bb:b8:2f:a6:23:
f5:0c:2f:ae:68:db:77:fe:0e:8b:21:98:b7:b3:fa:92:cb:08:
73:15:fb:3f:2a:1c:53:0b:91:ae:92:68:88:23:cc:09:83:93:
40:7d:14:fb:ac:bc:ca:c5:df:68:a1:70:47:94:f8:c8:d9:39:
2d:cf:7e:e1:ec:0d:b8:47:f0:12:c6:e1:7a:c2:dc:fa:e7:3b:
c6:4a:b6:a3:39:d6:e9:52:8f:9d:e4:8e:13:15:d2:98:63:d5:
9e:ec:ff:84:14:4b:07:b5:4e:9d:4e:2a:03:87:ab:d6:b6:4b:
d2:65:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:41:41 2026 by rpki-client