
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier: KzHP5sRaua39swx66ZeLyZ1HbxjGXdyyQO0kcd1iKuc=
Subject key identifier: 36:C6:3D:B2:14:2D:8E:6E:63:91:E2:C1:BB:12:AA:EA:72:23:74:91
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 0954
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number: 08C9
Signing time: Sat 14 Nov 2026 20:37:00 +0000
Manifest this update: Sat 14 Nov 2026 20:36:59 +0000
Manifest next update: Sat 21 Nov 2026 20:36:59 +0000
Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: b/L/r3IV3R3fvhhGH+P3DslCORSeRYh1fIkGxarFuM0=)
2: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
3: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
4: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
5: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
6: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
7: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
8: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
9: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
11: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 20:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Nov 14 20:36:59 2026 GMT
Not After : Nov 21 20:36:59 2026 GMT
Subject: CN=6af8c66c-9374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:a9:9d:24:97:bc:0c:df:29:fd:07:9f:b4:
92:8a:bc:57:d1:c5:91:cb:9e:20:06:54:b5:e3:ff:
60:59:1f:d1:6a:77:bf:81:39:b1:e2:2a:65:d0:00:
59:7f:5c:81:db:ce:14:91:e8:91:5b:39:cb:c9:9a:
e7:af:92:e9:46:e6:05:14:ae:88:ea:01:f1:cc:65:
a6:5f:f7:ce:72:48:91:bc:1d:ff:eb:83:e6:73:d1:
a8:f0:16:b4:7b:b1:2a:09:b3:e2:df:cf:5a:37:f8:
42:a3:fc:9a:79:57:54:ca:77:b3:b9:da:ce:f4:32:
39:01:eb:5b:8e:29:a0:f1:be:8c:d6:a0:7d:0b:fe:
4a:42:97:fa:f5:0e:03:86:81:f4:f9:9f:71:b1:33:
3e:c3:de:d6:e6:23:49:5d:c2:8a:cb:ae:aa:37:cf:
17:46:62:e2:bc:19:28:56:17:c3:50:77:77:06:bc:
a4:9d:5c:a2:26:94:14:3b:3b:a7:63:35:21:c2:d3:
a7:cd:46:3b:45:ca:61:62:37:36:8c:f2:88:2b:8b:
37:f2:47:1a:f0:bc:2e:20:d9:84:b9:02:d4:4e:9f:
6e:da:2f:6f:53:01:23:6b:44:a3:77:ed:83:01:02:
98:25:b9:f9:9e:36:4a:e8:92:8b:36:22:66:d0:6f:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:3D:B2:14:2D:8E:6E:63:91:E2:C1:BB:12:AA:EA:72:23:74:91
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:24:2f:63:c6:8e:ba:e7:14:98:47:4b:f3:f0:b2:a4:6d:69:
6b:41:21:d5:73:76:14:46:c7:e3:d9:2c:8b:c4:19:83:7e:6e:
60:7e:80:c2:96:bf:9a:79:76:46:88:5b:5f:3f:2c:54:40:aa:
a7:49:8c:4b:2a:a4:39:28:0e:65:1e:bc:7f:01:2a:b3:3c:2f:
bd:79:c9:06:83:4e:10:be:a9:02:00:4b:1e:0f:6b:e4:9c:4d:
66:8e:ae:48:00:ce:48:9d:d1:04:5e:6a:67:d3:8e:9e:4d:b1:
00:27:8c:97:9f:7a:bd:b0:4a:95:1f:e3:ed:1a:b1:0e:c5:b7:
ae:0b:ad:79:67:2d:9d:95:ad:f5:97:59:fe:b9:7d:ee:cd:b2:
66:a5:47:10:d3:7f:c3:52:e4:6c:37:20:15:52:70:aa:43:de:
98:86:a3:c9:ed:62:58:8b:ab:b8:cf:3a:d1:03:23:d8:64:8a:
7c:d5:74:63:6d:55:4f:65:51:60:1f:6e:b1:74:c4:3c:cd:b7:
dd:b5:87:53:ff:ee:1c:eb:6e:c7:db:83:73:66:d7:6f:95:4b:
e1:42:3a:9f:bc:0a:17:c5:5b:9b:04:91:dd:a4:d1:b5:b2:49:
ff:cc:4c:a5:6a:9b:1d:91:f4:5e:35:79:01:d1:82:89:59:e6:
4a:74:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:33:54 2026 by rpki-client