
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json)
Hash identifier: 03YCT4Yn3dYmO9CYSaWCyq7yNQCIpYFEoG7ftHAwvPE=
Subject key identifier: E0:99:20:11:FE:88:4A:A1:85:8F:8A:24:39:F8:B9:74:F9:D8:D3:DD
Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Certificate serial: 1CC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
Manifest number: 1CB5
Signing time: Wed 22 Jul 2026 16:15:52 +0000
Manifest this update: Wed 22 Jul 2026 16:15:51 +0000
Manifest next update: Wed 29 Jul 2026 16:15:51 +0000
Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: J2ZJAoWM/tuwbjMHj6RsdA7wABf9YnY/VA3NEhsieMM=)
2: 65D82706BACE11F0AAEC4611C4F9AE02.roa (hash: sqvmzo0nBMsekrGisDm87YPLKEUsc2Q0u1zWWfR7WgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl
rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7365 (0x1cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23FE, serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B
Validity
Not Before: Jul 22 16:15:51 2026 GMT
Not After : Jul 29 16:15:51 2026 GMT
Subject: CN=6a60ecb7-de20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:6c:8a:6c:d8:c0:9f:fa:f5:3a:b3:52:18:
8f:fc:34:ff:a6:a3:49:2d:29:4a:15:74:29:64:c6:
90:a4:ca:12:8d:cf:99:f2:4a:ef:89:46:31:6d:ab:
cf:c5:79:0d:be:df:70:cd:cc:37:07:0a:a3:02:02:
40:fa:c5:cd:fa:b0:a0:ae:22:b1:cb:85:72:b3:88:
7e:72:af:cb:91:87:70:27:e2:a4:df:56:9e:4f:80:
24:84:08:3f:50:a8:e6:6b:1a:a1:4b:46:75:52:2c:
da:d3:b1:4d:4a:a5:9c:14:cc:34:0b:80:b8:7d:6d:
87:70:68:10:36:98:5b:97:2d:bd:71:69:1c:b2:ba:
9a:98:f8:c4:a9:8a:68:d2:df:66:a8:96:4c:85:cc:
49:b6:80:9d:a6:9b:8d:f2:4b:4e:58:2a:dd:90:58:
5c:58:49:bd:e6:63:ef:56:75:be:e1:ba:79:e1:2a:
e0:4e:8a:6c:1e:e5:c7:2b:ea:c1:a2:cd:32:e1:e0:
10:f4:62:46:de:4c:c9:40:7a:2f:af:e0:dd:06:32:
dc:59:10:e2:6c:88:5b:ac:2a:e3:bd:1a:80:2c:8e:
c3:17:92:dc:50:8c:76:03:9a:f0:cb:fe:1b:10:76:
81:db:fd:62:4d:b3:48:e7:a7:18:a7:a5:14:70:ce:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:20:11:FE:88:4A:A1:85:8F:8A:24:39:F8:B9:74:F9:D8:D3:DD
X509v3 Authority Key Identifier:
keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:6c:1c:23:fd:38:c7:de:d5:50:ef:08:8f:e6:e3:d8:6b:75:
b1:e9:ee:38:ab:6c:3a:dd:42:6a:d6:b3:a1:86:e2:39:23:8c:
2c:4b:4f:93:7f:0d:0f:85:09:2c:a5:e5:e8:0d:16:3a:1e:49:
9d:d5:bc:ce:56:90:81:ae:30:86:8c:c1:e2:e8:d3:46:03:c3:
79:d8:f4:bb:29:23:52:81:95:4e:b0:2d:50:c4:64:76:62:e3:
e1:6d:a5:1b:0e:c8:3a:e3:d5:5f:e8:e3:88:49:50:54:3d:73:
32:f4:7f:d8:6f:ab:e7:bb:3e:5c:d0:eb:23:bc:11:3b:eb:56:
99:af:b9:77:c9:82:af:50:8e:08:2e:78:3c:37:92:3f:ad:cc:
8a:88:a5:8f:85:e7:a9:85:25:3d:af:a7:0e:87:3e:22:0c:a8:
c7:e5:8a:ed:ae:56:bb:a5:1f:59:ee:4e:5c:f9:a2:47:16:1c:
11:5a:ac:08:e0:81:ba:c1:c3:9a:dc:e1:03:99:f1:b5:ed:38:
57:e1:75:1b:c9:59:88:b6:26:2a:75:51:61:51:a7:4c:83:50:
9b:38:60:64:ac:35:11:de:5a:37:39:f3:b1:4c:be:f7:d8:97:
f8:96:26:5d:81:20:e3:ea:69:12:c6:4e:ce:1c:38:4b:41:57:
52:28:d8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:22 2026 by rpki-client