
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
File: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft (raw, json)
Hash identifier: R5tbUkscfMiLkziM07W4l8NeK2Tgy0SvdLEIkuEkQg4=
Subject key identifier: 2A:68:89:D6:E8:83:84:66:57:28:C4:31:38:76:AA:9A:EA:13:D9:7B
Authority key identifier: E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
Certificate issuer: /CN=A91E3441/serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
Manifest number: 87
Signing time: Sun 27 Sep 2026 08:08:51 +0000
Manifest this update: Sun 27 Sep 2026 08:08:51 +0000
Manifest next update: Sun 04 Oct 2026 08:08:51 +0000
Files and hashes: 1: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl (hash: 8H+Fb66ln73KlH8c6wbyK6sfDPSNLdUcl1VvLMooXvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3441, serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Validity
Not Before: Sep 27 08:08:51 2026 GMT
Not After : Oct 4 08:08:51 2026 GMT
Subject: CN=6ab8cf13-3550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:4a:de:9b:2b:48:72:51:87:96:7b:a7:69:
ae:6e:e7:85:9d:97:cc:b1:19:23:c7:8b:fb:ff:10:
0c:56:ab:ca:f2:d2:42:43:9d:50:2f:8e:15:a4:23:
96:87:cc:cb:82:ed:fa:f6:05:16:56:b8:10:46:1f:
d9:01:50:7e:e7:af:97:3a:df:71:a9:5c:2e:e9:c4:
7a:5f:aa:22:54:0f:84:5e:5b:35:f2:62:33:0c:6d:
59:2d:27:63:06:01:be:cc:36:da:26:04:8f:33:28:
9e:6b:12:d2:4e:24:42:3a:75:94:52:cf:6c:c1:b9:
eb:c1:17:9f:82:76:c9:b0:00:7e:68:d3:db:2b:ed:
20:aa:1f:ae:50:13:e8:dc:94:39:92:70:ce:56:72:
bf:f8:22:7c:4d:c8:ea:a6:ad:75:65:d2:a7:41:b2:
d9:fe:4a:4d:bc:f7:f2:49:a7:0f:b6:82:21:90:9b:
df:4e:7a:ea:d5:f9:cc:22:3d:dc:21:e7:e5:87:92:
9a:46:56:07:69:6c:5b:03:f8:2a:25:34:65:19:c6:
e9:75:69:f8:7f:69:6c:76:8a:8e:81:b5:99:e6:f8:
9c:d5:d1:c1:a4:ad:d2:b5:c8:ac:ea:a7:00:b0:40:
f8:da:36:56:b0:ee:a8:9a:26:a7:d2:52:ca:13:7b:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:89:D6:E8:83:84:66:57:28:C4:31:38:76:AA:9A:EA:13:D9:7B
X509v3 Authority Key Identifier:
keyid:E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:60:37:2c:79:09:ad:fb:07:36:be:a3:3b:33:89:4d:bd:3a:
df:83:5a:bc:61:d2:c2:56:d7:84:e0:1b:8f:b5:cd:76:db:c3:
60:a0:cc:5e:ef:ab:fe:05:5a:7c:53:1c:83:d8:8d:ab:fc:ad:
e4:f4:f4:77:41:97:9f:41:19:2f:44:6e:0e:c3:67:4d:54:be:
4f:41:3d:58:d2:15:5d:95:d5:3a:89:1c:f4:0f:1e:47:7b:be:
47:e7:0f:b7:5d:a7:7e:ef:89:bd:df:33:38:35:e4:d5:73:a4:
5b:3e:df:18:36:c8:96:31:a4:5d:a5:f9:91:a5:44:22:84:d5:
fd:ab:5e:98:9e:31:b7:77:e8:e8:cb:51:5e:47:2c:9d:7e:ff:
7c:17:ac:3f:a6:34:63:4a:bc:cf:39:ad:3f:31:54:8c:ef:28:
73:56:19:09:a5:36:8d:57:83:68:25:3c:7c:85:87:ea:69:df:
df:f5:86:7b:f9:df:59:56:76:fd:da:73:13:8d:c4:9f:ab:d3:
f2:72:b5:9b:bb:23:89:8a:c2:41:0c:78:5b:94:f1:99:ab:67:
0e:14:2d:06:0f:f4:21:ea:4b:93:b0:13:26:c8:98:45:3e:22:
91:11:87:19:0b:6f:2a:d5:32:26:7a:e5:3b:57:22:6b:55:75:
6b:54:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:19:35 2026 by rpki-client