
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier: pSMcZVrUn6xTNMncW+ceNru/0ziBr6IJ3n02Cqb/oHo=
Subject key identifier: 94:0C:A6:BE:1A:2C:EA:BE:0E:1A:AA:B6:DA:92:FC:7D:93:AC:C4:BF
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 05B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number: 05A4
Signing time: Thu 08 Oct 2026 23:21:51 +0000
Manifest this update: Thu 08 Oct 2026 23:21:51 +0000
Manifest next update: Thu 15 Oct 2026 23:21:51 +0000
Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: o38VQtLYuWTHX1jRhzv558j0KHDbEh0i2dBlXjwH9gU=)
2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=)
3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 23:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: Oct 8 23:21:51 2026 GMT
Not After : Oct 15 23:21:51 2026 GMT
Subject: CN=6ac8258f-53ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:72:d0:2d:99:98:08:33:91:4c:12:11:39:
9f:f0:56:b1:0a:5b:6e:83:f0:c4:b4:16:22:69:56:
b5:9c:fb:97:0d:32:42:3b:67:70:17:d1:c6:a7:8d:
78:e4:08:d2:8f:f0:76:ae:be:06:b2:59:bf:cf:4a:
5f:6e:dd:2a:b7:57:87:dd:d2:0e:be:74:72:90:0f:
40:3f:62:90:8e:96:c1:9e:bf:2f:dc:35:da:ff:79:
cc:9b:3b:c0:b5:68:de:0a:c5:26:16:cb:d1:71:27:
af:a5:07:1e:6d:f8:58:73:9a:9a:bc:2e:68:dd:db:
4f:a1:f5:dd:f6:95:14:06:bd:38:c0:6e:38:89:6a:
55:27:e9:07:5a:0c:fd:f8:b7:db:1d:32:a0:ea:20:
c9:ce:c4:5f:75:e4:b6:79:af:6d:29:6b:69:18:5d:
cc:d7:61:14:eb:71:06:e0:f3:cb:7d:91:1e:72:f5:
3b:e3:b3:9f:c3:21:4d:30:9f:11:e7:bd:be:79:cb:
cc:d4:fa:23:7f:e6:79:e4:63:01:32:31:98:bd:1d:
2d:6b:0d:5e:5a:8e:ec:56:64:97:be:f1:49:6c:6e:
03:81:64:44:41:07:df:81:9b:bb:88:28:44:38:87:
ab:0a:14:9e:91:19:3a:c7:d7:58:36:4e:18:ae:63:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0C:A6:BE:1A:2C:EA:BE:0E:1A:AA:B6:DA:92:FC:7D:93:AC:C4:BF
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:91:db:dd:d8:ea:e8:34:69:3a:b5:db:7f:f2:84:64:10:34:
0e:63:1c:f5:f5:34:e0:d3:a8:21:1b:74:00:4b:6a:33:33:9f:
77:56:2c:2e:3c:f9:0a:8d:36:42:7e:30:a3:67:2d:52:9d:ae:
3c:31:19:d6:67:be:e0:3c:59:9f:09:96:b7:b9:ab:92:ea:94:
fa:73:8e:e9:ed:a0:a0:0d:ea:29:bd:75:bf:5d:c2:d2:6a:9f:
85:58:fe:75:b8:6b:d8:30:27:3e:77:2b:b0:f1:2d:08:f3:43:
c2:51:b7:63:c8:80:e1:7d:cb:c2:de:93:b5:88:6d:28:b9:52:
15:92:28:ff:2a:3b:a0:00:e5:aa:59:ac:bc:23:cc:43:15:01:
f2:0a:d3:6f:e4:8c:96:9d:64:ee:50:39:e5:df:bb:dc:e3:7b:
8c:a4:43:e2:15:b4:1c:2e:e9:1a:13:de:13:59:78:d4:1c:0d:
bb:7d:df:6d:f7:18:18:be:78:48:39:a9:0f:f3:6a:4c:0d:72:
51:e0:4b:5d:80:e1:b7:d2:e6:49:cc:ca:cd:a2:25:37:8a:d5:
0b:d3:00:7e:f3:ff:64:b9:f3:1c:1e:b2:25:8b:20:2a:cb:a3:
56:ee:87:37:f8:17:5e:ad:14:f1:8e:4b:1b:8a:57:32:f8:4a:
d1:87:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:33:57 2026 by rpki-client