
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: lnElBYeYvlfj8KeSeSrzO9tksZ6IQYiDRBIhMh/lKPk=
Subject key identifier: A2:C5:2D:82:C4:EE:CF:41:F1:C7:D2:DC:43:BE:32:43:C4:7E:AE:D4
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 02B1
Signing time: Thu 23 Jul 2026 02:29:39 +0000
Manifest this update: Thu 23 Jul 2026 02:29:38 +0000
Manifest next update: Thu 30 Jul 2026 02:29:38 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: lCi8lTH/6nNeHhciW69An1NTt5pFbh+xGEeo0DyaIn4=)
2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=)
3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Jul 23 02:29:38 2026 GMT
Not After : Jul 30 02:29:38 2026 GMT
Subject: CN=6a617c92-5683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:34:fe:3c:6a:9e:f1:8b:68:75:47:d9:94:
b5:26:09:49:46:76:47:63:ee:77:8e:e2:9a:3f:22:
8c:4b:5c:e1:61:56:c2:50:ac:23:c1:13:26:ae:b5:
85:48:dd:b9:86:51:29:b3:53:ad:ac:93:ef:e2:4b:
9c:c9:36:0b:03:49:d2:e8:8e:3f:73:2a:e4:f8:d3:
a9:fd:78:47:3d:8b:eb:c9:ec:e9:a6:63:2a:c8:84:
9f:a8:cc:3b:91:30:43:a8:e3:d7:55:f3:ea:0f:55:
f9:b5:85:96:fe:f9:a8:1c:64:1c:05:8a:9f:5d:67:
c0:54:1a:3f:7a:44:ac:fb:76:7c:05:79:34:e8:90:
ae:87:d0:19:bf:7a:6d:85:ba:43:aa:47:ea:db:46:
e6:ce:cb:84:83:f2:b1:08:b3:b6:28:87:77:cf:80:
a7:d1:48:ff:03:ea:ff:20:76:f6:a7:92:9e:a8:c5:
a2:e9:01:c0:70:43:08:63:5f:6f:bc:4e:28:08:49:
1e:15:69:1f:c1:10:3f:13:a5:5f:ee:76:43:2f:d1:
ae:a9:55:da:c9:0a:f0:4a:c5:4c:07:c5:af:5e:36:
a7:a5:34:3e:d9:c0:5b:0a:e2:84:46:c4:f0:d5:f6:
65:d2:0c:84:a9:71:c4:83:14:4a:7b:fe:8d:12:44:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:2D:82:C4:EE:CF:41:F1:C7:D2:DC:43:BE:32:43:C4:7E:AE:D4
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6c:0e:0c:33:69:15:c4:33:a2:f8:b7:ce:4a:58:3e:72:a5:
77:a2:b4:ea:65:dd:81:fa:7c:af:47:bb:b0:2d:99:d3:79:0a:
d1:dd:f3:1c:f7:36:43:17:79:dd:6f:13:4c:ec:f4:c4:e8:be:
b2:04:67:cd:5b:ee:e6:c5:c8:80:fa:11:2c:98:55:54:f5:55:
c1:66:5a:12:60:06:3e:26:1f:ae:c2:3d:ec:61:50:58:89:d4:
1c:e6:e8:20:6b:b1:33:2a:4e:ee:38:48:ee:a2:e5:db:74:7e:
b6:9a:8f:50:f7:c7:3e:4b:7e:00:9f:ae:2e:ac:1a:c8:d9:ad:
31:a6:20:ab:1e:1e:74:57:6a:fe:4e:32:36:88:02:35:ae:9f:
43:0f:ba:5e:29:a4:25:38:5f:d8:42:ef:d1:b9:32:a4:f4:a4:
79:73:e2:c3:57:46:fa:cc:64:51:d1:9c:03:14:7e:88:0e:96:
4c:3a:78:d6:48:e0:f7:44:31:5f:d7:4a:ab:dd:7d:67:47:ae:
f8:5b:23:f8:77:80:1f:b1:64:80:92:a5:c6:c2:ea:3e:f6:42:
25:ea:62:ac:84:1e:bc:05:bc:36:0f:20:82:24:0c:f6:ea:4b:
7d:3e:50:11:bb:8f:6b:76:a3:97:0a:aa:ca:47:8b:5a:7b:50:
1d:6b:14:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:06:10 2026 by rpki-client