
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json)
Hash identifier: xKA8s7uHwObhnjpnoOJfz11vDDYVBtqlv8JqHkWYvLo=
Subject key identifier: DB:50:D2:27:7B:A2:B0:3A:1C:44:61:19:8D:36:34:A8:77:78:28:9D
Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
Manifest number: FA
Signing time: Fri 25 Sep 2026 06:19:12 +0000
Manifest this update: Fri 25 Sep 2026 06:19:11 +0000
Manifest next update: Fri 02 Oct 2026 06:19:11 +0000
Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: jZmpSqJi4F9wgHPooeUg5Vjp9hVeCQyNLkMXSkbP6aY=)
2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: ff9Hb3p8NVhNbBeRoRPoSLLnHieGzUbHBlT6U/ikvfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Validity
Not Before: Sep 25 06:19:11 2026 GMT
Not After : Oct 2 06:19:11 2026 GMT
Subject: CN=6ab6125f-1327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:7d:05:3d:14:93:ff:f3:fa:f4:eb:b8:68:
e6:a7:69:c3:3e:00:81:a3:40:2d:ca:54:ce:ca:5c:
01:e3:b9:15:27:3d:f0:69:bc:7a:f7:60:81:45:3a:
b8:42:a5:ec:a8:80:c2:b7:9f:51:47:f8:8c:4c:44:
83:99:36:90:36:f4:0a:e2:5f:ec:8c:c0:f6:3e:ac:
6c:de:92:f9:ea:dc:61:d8:e0:8e:6e:29:57:44:31:
ac:9e:5c:50:84:17:14:79:82:3c:f2:53:54:a7:99:
da:ea:0c:a2:3e:f0:74:ac:50:5e:91:4f:5b:62:e6:
ca:c9:81:19:24:59:60:07:0f:35:df:7e:f7:45:92:
4a:b6:84:63:b7:d1:bf:0a:6e:c6:27:87:0b:6e:5e:
a0:a4:7a:d6:44:61:2b:50:13:6d:3f:34:3b:53:ad:
dd:27:b8:0a:17:e6:92:61:25:2f:d5:80:22:7d:52:
d3:d1:01:01:37:14:98:b2:d1:2d:cb:fb:e8:cc:eb:
c5:7a:79:4a:19:07:8e:aa:32:ca:8d:bd:c4:94:f8:
e3:41:cd:0b:04:94:47:25:39:18:da:bb:49:6e:1d:
95:86:43:03:f3:1e:ea:21:0f:dd:c7:e8:b5:6d:46:
62:3a:61:07:72:76:d4:c1:99:7c:fa:19:06:2a:de:
05:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:D2:27:7B:A2:B0:3A:1C:44:61:19:8D:36:34:A8:77:78:28:9D
X509v3 Authority Key Identifier:
keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ac:f6:e4:64:f7:2e:c4:be:ac:a2:2d:9f:0f:d2:f7:c4:eb:
03:5b:08:f7:7d:92:9b:f9:ae:4f:08:77:26:74:2a:ca:fc:7d:
1c:2b:94:41:ce:d0:ab:97:56:b9:76:85:f9:af:3d:c0:8e:30:
8a:00:70:19:e3:e8:ab:0c:35:ba:be:8a:57:ba:a0:c7:81:c8:
67:8f:a6:94:35:d0:b8:9c:0c:54:07:49:34:8e:1c:d0:40:96:
57:c2:b0:d9:f5:b8:f7:5f:cf:fa:9b:82:f3:7d:79:72:7d:d1:
71:1a:b4:c5:6c:9c:bc:87:23:ea:1d:10:53:f4:f3:98:5c:4f:
b2:25:f2:1d:4d:09:72:0a:26:54:9e:62:bb:6b:d8:fd:9c:8c:
48:00:9d:eb:c0:8d:63:ea:2b:4d:e3:8b:34:06:ac:66:ff:17:
d1:68:6a:d0:b3:4d:3f:a7:a0:0e:ee:57:5e:b0:43:1a:b5:d6:
cd:d0:34:c8:01:ab:eb:30:d9:09:cb:99:14:5c:3d:4c:5c:24:
79:db:b4:78:27:ce:b9:cf:c5:6e:90:5a:1e:91:90:2f:a4:35:
98:f0:f2:fb:f1:f1:d3:20:63:2f:ba:76:8b:7f:19:85:1c:12:
c1:1a:6a:b5:9d:9d:59:84:c7:48:64:fd:3f:45:a5:4d:ea:99:
bb:9a:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:01:10 2026 by rpki-client