
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier: NGLgXwFFSDfb8pn8IvdXGi+G9RrI+6bm1lELau3JZlc=
Subject key identifier: 2E:86:FC:D5:6C:D0:4A:86:87:1E:6E:0E:14:F1:0D:B5:19:08:EE:26
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 0919
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number: 088E
Signing time: Wed 22 Jul 2026 21:25:07 +0000
Manifest this update: Wed 22 Jul 2026 21:25:07 +0000
Manifest next update: Wed 29 Jul 2026 21:25:07 +0000
Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 4oayaH132cMPu6Lz63bv3CrTiWQ8aLQ77SQIImPI0Ms=)
2: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
3: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
4: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
5: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
6: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
7: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
8: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
9: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
10: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
11: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Jul 22 21:25:07 2026 GMT
Not After : Jul 29 21:25:07 2026 GMT
Subject: CN=6a613533-fb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:fc:0b:46:5f:37:dc:bb:2b:08:66:df:ce:
0e:0e:d4:3b:25:59:1d:0c:78:71:bd:ff:54:ba:88:
fd:01:4c:37:89:9b:28:ff:f8:ce:b3:82:63:46:48:
7e:54:5e:e8:68:76:42:a3:46:62:da:2a:df:13:2f:
d8:f6:83:0c:d7:e2:80:9e:18:b0:0f:07:8b:44:bb:
25:75:28:d0:8d:ba:ff:b0:8f:81:f7:69:86:43:ad:
36:8f:de:04:46:5d:0a:bb:93:df:f0:6a:02:79:ac:
f1:99:09:bb:2a:16:53:31:5a:4f:85:a2:62:19:8c:
ae:e7:48:2a:dc:8f:ad:7b:a1:16:e9:65:90:47:ad:
10:03:27:6f:cb:b1:a9:98:3e:c8:0d:73:09:4f:f6:
bc:b7:53:5e:3c:d7:9f:10:2d:4b:4e:23:11:07:32:
d2:8c:9d:be:bf:7d:de:99:fd:69:11:8f:78:87:07:
50:51:90:33:89:b5:ae:a0:a1:3a:15:1d:63:e5:cc:
a5:23:97:a7:1b:8d:4e:7b:ab:73:49:88:07:d8:cf:
cd:ae:d1:1c:25:7e:ce:46:e1:ef:5a:cf:f6:51:4c:
bd:9d:94:c7:b9:6e:83:04:a4:0a:c9:de:4f:5b:3d:
95:be:98:1e:1b:64:03:8a:bd:b8:b1:80:6c:fb:19:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:86:FC:D5:6C:D0:4A:86:87:1E:6E:0E:14:F1:0D:B5:19:08:EE:26
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:3d:0f:1d:61:f1:eb:2b:ad:81:b6:18:c8:16:10:df:72:
77:58:0d:45:db:01:ad:c7:a7:1a:70:9f:76:3f:06:5d:98:3a:
40:f8:ad:60:11:3c:a0:7a:cf:b2:39:d7:17:46:9c:36:9a:08:
75:a0:1d:74:b8:20:eb:fe:f6:fc:c6:12:4c:fe:fc:83:1c:8a:
1c:6c:56:1c:03:ce:1a:14:9f:f1:7a:b3:33:de:04:23:24:cb:
16:16:20:37:fd:47:02:c3:26:38:51:cf:f4:bf:71:20:9b:84:
f2:61:c1:ea:1b:c7:4b:c1:97:63:89:6a:3d:ee:06:4f:cb:e4:
a8:36:af:42:7a:46:73:1b:7f:70:3b:fb:18:87:d0:b0:84:aa:
cf:cf:2b:88:4b:e6:90:8e:42:04:fc:3b:be:43:8b:f9:d7:62:
6b:dc:21:0c:8e:a3:81:ee:38:20:15:93:4d:6d:07:ab:e2:bc:
2b:94:bd:c1:3b:02:6d:1b:73:8c:e6:5d:05:39:2d:03:2c:f3:
7b:05:d4:6a:a0:df:38:a5:63:bb:8d:d9:71:02:46:13:07:c5:
71:7a:da:f2:c9:fd:ca:8d:30:3f:0c:fb:db:0a:8a:f0:98:a9:
96:8b:9a:c6:d0:71:45:83:86:f5:73:d0:3c:37:f5:93:24:33:
81:48:c1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:31 2026 by rpki-client