
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json)
Hash identifier: 0y/aejK7R1270Lx7ZvAt07h9Tcf1d/rIng1waLnn/8c=
Subject key identifier: 9F:25:44:CA:08:99:14:27:55:5B:5D:03:4B:80:6C:6D:A4:45:68:54
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0E7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
Manifest number: 0E58
Signing time: Wed 22 Jul 2026 17:59:14 +0000
Manifest this update: Wed 22 Jul 2026 17:59:13 +0000
Manifest next update: Wed 29 Jul 2026 17:59:13 +0000
Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: QG/qSqPAKQ6MvKkYXq1WZ/XeBAAQjsCuoleE9fxVK/c=)
2: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: qBZYKamMj/oDU4E6eK9pTMccppq/DCgF8vxu2spcuiw=)
3: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: GBvJaOYF1545b8b+gOGrGQUjqqr8+5hiMjlmvxSFrPM=)
4: 4F599628760C11F18FF6B7DA7BA30FBC.roa (hash: qrjAmGL+wM7q5SL8VbUSegzxoXxN5gRAjZ0bSQalEXI=)
5: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: nJEq5dcjdbygkdzbWZ20NZb/kFcLm8+8wcWhp21gyU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3708 (0xe7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Jul 22 17:59:13 2026 GMT
Not After : Jul 29 17:59:13 2026 GMT
Subject: CN=6a6104f2-d78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:21:ef:5d:e2:34:cf:08:7f:46:61:a6:2a:
74:d3:43:5f:4f:fd:ab:9a:16:aa:00:93:34:9a:00:
98:a1:3d:78:d1:b7:8d:8a:7e:25:01:20:00:94:14:
1a:85:e8:0f:c7:7d:a6:93:28:14:04:93:32:c9:2b:
8c:42:56:61:6e:b9:c9:65:ff:f3:b3:7f:6c:3d:e0:
6a:31:3e:f0:d1:d3:72:42:60:77:4f:2b:42:0a:30:
1b:44:34:ff:91:6a:b4:c1:22:c3:c7:6d:20:17:b8:
0f:29:03:fd:3c:18:d7:28:ec:52:33:f0:da:bb:95:
88:3f:f9:68:82:b1:7c:34:1c:2b:09:a9:dd:d2:84:
6f:d6:0f:51:83:07:1a:d0:91:f4:76:78:0f:d1:1c:
b1:61:01:f6:1a:ea:44:be:c2:bd:97:d9:b9:25:f2:
a8:da:42:44:41:80:7c:dc:31:ee:36:dc:62:57:24:
09:cd:a3:d2:a2:b0:5c:e7:03:e3:37:d5:aa:86:c1:
b4:fe:91:55:8f:16:f5:ea:fa:89:f0:4b:60:8c:2b:
a4:7e:3b:af:e5:6f:07:51:94:82:fd:df:17:6b:ab:
8a:43:7a:b2:a0:0c:90:fb:90:4a:53:2f:ae:23:92:
b0:91:f2:f5:0c:93:db:3a:9d:1a:3e:c9:e7:88:12:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:25:44:CA:08:99:14:27:55:5B:5D:03:4B:80:6C:6D:A4:45:68:54
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:00:e8:b1:d2:08:d5:7f:ff:12:21:89:9a:80:5a:d9:27:1e:
ba:33:16:0b:96:2b:39:30:0d:8b:50:ce:58:1c:59:61:c7:49:
68:02:0e:d0:b9:75:1b:f5:56:f3:2f:06:7a:dc:9e:c6:42:43:
b5:73:bc:b6:9e:64:7b:4c:98:3b:e8:19:c1:b3:c4:ed:eb:9b:
e4:05:12:ec:a1:18:bd:6b:fe:e5:c2:a3:1c:32:c0:65:96:72:
29:c4:11:2e:cc:7d:e6:4b:80:a3:9a:3f:7d:3d:f3:19:18:f9:
ca:45:61:1e:37:0a:bb:1e:81:ec:3d:ba:22:e4:76:4e:59:62:
79:6a:39:7d:86:a9:fd:94:25:a1:4b:6b:78:56:44:3f:17:eb:
a3:9a:f1:b9:72:1a:21:f7:5e:d3:1c:8d:30:ba:94:f3:c3:60:
aa:d5:d7:de:0c:90:57:69:3b:c7:3c:89:4d:81:b1:45:17:cd:
82:b1:99:90:84:a7:62:a3:d4:33:0f:10:d0:ad:b7:01:84:d8:
e5:25:26:26:2a:2c:f0:a2:07:21:fb:e7:56:78:a2:62:2c:23:
14:63:7b:01:9d:6c:5f:d2:66:01:9e:e2:18:e4:2f:0b:bb:5f:
0c:5d:d9:fd:2e:00:ab:92:dd:e9:15:94:68:c2:eb:ad:8d:50:
c9:b3:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:34 2026 by rpki-client