
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier: TLAgzHTBUXwTzZoA5c2X3xPuy7kGQHfMf48LqSyQf0M=
Subject key identifier: 6E:E8:FF:CD:01:D3:2D:85:A7:7B:D0:79:7F:F4:8A:95:80:72:65:32
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial: 0465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number: 045D
Signing time: Thu 23 Jul 2026 01:03:26 +0000
Manifest this update: Thu 23 Jul 2026 01:03:26 +0000
Manifest next update: Thu 30 Jul 2026 01:03:26 +0000
Files and hashes: 1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: 1KbFDfgCwFgCpI2O5bZoFLVl7bmZHQSN8iAf+HaIA/s=)
2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: OiBvrzdUg3NqY/AvkOcWY8IElMaVk3LH+da3dKWzBQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Validity
Not Before: Jul 23 01:03:26 2026 GMT
Not After : Jul 30 01:03:26 2026 GMT
Subject: CN=6a61685e-b737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:06:e0:51:b9:39:46:d9:cd:12:84:ee:ed:
92:54:d0:70:9b:f9:39:a0:0b:81:5f:26:d8:53:52:
d1:3e:0e:6f:88:01:4b:49:ab:39:b5:ab:59:99:f9:
54:d3:49:c9:99:e1:10:54:d4:1c:d4:5d:87:80:2a:
57:4d:b9:ec:22:77:c1:ac:96:c9:05:6d:4c:58:47:
e9:5e:d3:d5:91:13:a1:3c:d8:32:a8:8e:cd:c0:5d:
51:48:4e:2b:00:a8:10:0d:45:38:1b:0f:5f:7c:99:
05:b4:b7:e9:fd:bc:92:a4:ab:df:75:91:e8:39:33:
e9:8f:81:bd:aa:8d:c3:8f:40:48:cf:58:6f:d8:4a:
ec:ab:1d:1e:12:4e:4c:ee:bf:c9:bb:99:fd:f3:b4:
01:bd:8d:d8:9f:8b:aa:4f:99:18:28:a0:d0:53:c1:
8c:3b:4b:fe:62:d8:f6:5e:87:09:c3:90:9d:a1:76:
82:d1:e4:4c:d9:7b:b0:90:9f:90:a5:3e:6e:40:bd:
65:c4:22:8b:5c:34:5d:3a:3d:ac:27:b1:79:68:04:
04:02:ae:94:40:aa:71:38:b2:aa:70:a9:37:24:f0:
ce:92:39:d1:2c:9c:87:98:04:32:13:3d:32:25:ee:
56:77:65:14:18:a9:95:76:8f:ce:d7:66:61:33:17:
5b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:FF:CD:01:D3:2D:85:A7:7B:D0:79:7F:F4:8A:95:80:72:65:32
X509v3 Authority Key Identifier:
keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:f6:08:2a:7f:ab:25:f1:61:05:69:34:16:58:c7:14:6f:ac:
2a:f9:1a:36:fd:e3:4c:d3:90:e7:6b:d2:7e:c0:c7:5d:69:ee:
23:7f:fb:d1:f3:69:39:9d:64:61:9b:7e:5e:0e:07:3a:ea:c4:
a0:64:66:dc:47:87:85:69:d5:26:b1:3c:c4:43:8d:36:f3:ca:
13:5c:ef:ae:b1:41:45:ff:2c:36:dc:37:7b:39:fd:5b:bd:e5:
d7:ca:9d:38:7b:35:c1:9d:59:10:79:8d:50:d2:6f:f9:1d:55:
47:d8:8b:12:81:a6:1a:60:fc:a2:a6:09:fc:25:1f:ea:bb:78:
ba:e8:e9:cf:71:32:be:5e:2f:4b:c6:38:e8:4c:88:aa:9e:60:
8e:e3:4e:64:ff:3f:4b:b3:d0:e0:73:e3:be:2b:66:25:98:db:
ff:90:74:bd:80:8e:ae:17:a6:ec:56:da:17:38:7e:fb:1a:77:
e7:bc:7a:a1:8e:fc:b4:13:ad:da:f7:07:d0:bf:76:03:cd:c0:
5d:2b:01:64:8a:0c:76:3a:ea:93:7f:83:c8:1e:56:85:35:34:
2e:fb:09:b6:91:bc:72:2c:e9:8c:58:41:20:8f:0a:78:90:bf:
05:c7:4f:96:d3:b8:e5:99:73:5c:71:a1:29:14:1d:9a:e0:0f:
fa:90:ef:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:14 2026 by rpki-client