
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json)
Hash identifier: BTMr9YeOLDwgkGuwEejJc7YYPvvZdcLNNvNJlyC9MdA=
Subject key identifier: F7:19:DC:7E:6F:AF:AD:75:CF:5C:D4:6A:5D:F8:F7:4C:E1:E9:68:A6
Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Certificate serial: 022A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
Manifest number: 0225
Signing time: Wed 23 Sep 2026 02:39:15 +0000
Manifest this update: Wed 23 Sep 2026 02:39:14 +0000
Manifest next update: Wed 30 Sep 2026 02:39:14 +0000
Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: rTvWuDQyWqknjgviQbg3qDMFsyhgagsRm0TtPCON6gM=)
2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:39:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Validity
Not Before: Sep 23 02:39:14 2026 GMT
Not After : Sep 30 02:39:14 2026 GMT
Subject: CN=6ab33bd3-c100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:da:6c:f2:d4:61:6f:2f:a4:d7:bb:c3:3c:
ce:8d:ad:e4:71:7e:82:10:e2:d6:25:8c:35:db:da:
4d:c3:2b:bc:ba:06:3c:9f:fb:5d:30:ef:a4:bd:39:
15:aa:f1:33:4d:62:ed:83:b0:80:15:35:59:eb:c8:
0d:d8:a8:c2:f2:88:40:7a:87:92:50:e0:51:47:d9:
68:7c:af:6d:b1:eb:8d:4e:58:21:88:5d:87:f1:da:
0a:4a:37:31:7d:ff:bd:d7:b6:fb:bf:f8:28:14:7d:
7d:8d:a4:aa:6b:28:cc:58:3a:ee:3d:91:13:73:4c:
d7:31:55:a2:96:dc:42:0a:c5:1c:da:c4:06:a9:3d:
da:c3:7d:48:f9:7d:cf:4c:d0:0a:92:37:a7:1e:cf:
e3:7a:73:e7:59:41:85:6e:64:f8:d3:c3:7a:9c:fc:
b9:d2:ad:39:80:a6:0b:34:1a:b4:05:ea:95:65:76:
f7:68:f5:9a:88:07:1f:2c:88:ec:67:ac:9a:f6:80:
66:5d:35:eb:47:59:49:e9:fb:64:d2:4c:30:ab:31:
c9:f9:98:31:5b:5e:82:95:ea:f0:91:11:65:28:0d:
2c:11:e6:39:b7:0c:d4:21:01:f5:e3:53:73:86:81:
c3:19:70:dd:6d:3a:24:ed:1b:20:0e:a9:7a:7d:31:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:19:DC:7E:6F:AF:AD:75:CF:5C:D4:6A:5D:F8:F7:4C:E1:E9:68:A6
X509v3 Authority Key Identifier:
keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:3a:92:e3:00:bd:58:cf:94:03:70:c4:26:6b:c2:5f:e8:43:
ae:df:15:46:c1:08:af:8c:66:88:2e:ae:18:d4:78:98:ac:3c:
e1:0a:a9:f3:fa:ea:b4:55:a0:91:d1:3d:f6:9c:cc:35:a4:f3:
bd:20:0c:10:0e:e0:2c:dd:ca:b7:a7:1e:f5:51:2d:02:49:d2:
65:b2:7c:ec:28:93:47:f5:99:e3:f5:2c:f1:d4:66:fc:22:3d:
60:fb:3a:fe:66:dd:e2:8b:c4:ca:19:e7:62:d3:4e:19:f6:df:
d3:54:38:83:b5:bb:4d:99:d0:3c:5a:49:17:3c:a5:8d:a9:3b:
33:cc:43:c6:8a:44:be:ba:04:9f:3f:53:e3:c7:0c:d2:dd:e5:
f8:c1:37:cc:7a:62:cf:a2:68:67:3f:44:11:34:dc:b2:31:b8:
58:18:1b:a6:6f:48:0c:6e:69:60:d9:e2:ce:2b:ee:a6:75:47:
8c:19:df:2a:d0:b3:4e:e7:e0:3d:dc:e3:3a:7b:28:2e:cc:17:
67:81:80:30:12:b2:a5:77:90:bc:e3:14:4e:3f:44:29:f7:b4:
02:8a:84:df:5b:7c:74:1a:2d:ae:9a:c6:66:6a:d1:1d:28:02:
e8:a9:55:73:67:49:fa:a5:70:07:6d:7e:11:5a:92:05:5c:fa:
0e:15:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:53:54 2026 by rpki-client