
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: NrFqEsAjeVCDsGBe7finAiM9CsbS+0N7wFaGNKZqQVM=
Subject key identifier: 83:A2:42:4A:4A:EA:86:9B:CE:16:BA:15:57:05:A0:B8:A3:AA:B6:D5
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 02DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 02D4
Signing time: Tue 29 Sep 2026 01:29:56 +0000
Manifest this update: Tue 29 Sep 2026 01:29:55 +0000
Manifest next update: Tue 06 Oct 2026 01:29:55 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: s1XYsfHBzm7/wxbtm7nhj5PA42thO7MB9+I6d8tmviE=)
2: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=)
3: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 01:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Sep 29 01:29:55 2026 GMT
Not After : Oct 6 01:29:55 2026 GMT
Subject: CN=6abb1494-1b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:fe:42:e6:3c:ad:0f:09:ab:23:91:88:58:
78:fd:33:e0:b8:e1:3f:a6:5f:a4:60:e5:92:88:94:
76:9a:a7:e1:2e:ad:95:11:82:a7:30:28:e2:01:c8:
2e:dc:fe:df:65:69:1c:85:d5:4e:08:84:91:b7:4b:
c6:76:da:22:13:9b:fd:78:df:4d:ca:98:62:a3:a1:
57:ad:df:b9:fd:36:0c:2a:13:f9:fc:b9:14:34:7f:
14:da:f4:e2:d1:06:fb:90:fa:90:4c:7a:da:30:f7:
47:41:08:b5:aa:65:20:04:10:7c:7c:e9:eb:7c:f7:
b1:73:a7:d2:4b:17:51:d7:34:b3:8b:8f:87:f5:44:
c7:15:31:99:05:ec:5f:3e:3f:92:f8:79:fe:de:d9:
27:b6:57:a4:20:34:be:1c:62:18:33:21:4f:26:ad:
f9:bb:f5:be:61:48:ff:18:8d:b9:5b:bd:fc:13:85:
f6:6d:83:a5:2a:55:05:99:c8:36:3f:7e:99:19:91:
80:4b:8d:41:dd:28:f0:d0:b8:2d:98:bc:80:75:c5:
dd:12:82:09:bc:46:ae:89:70:22:e6:05:22:26:02:
4d:40:7b:db:20:41:9b:a0:d8:45:3c:8e:57:e7:1c:
7d:ff:0b:31:3d:34:c2:0b:37:70:b0:b3:20:fa:38:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A2:42:4A:4A:EA:86:9B:CE:16:BA:15:57:05:A0:B8:A3:AA:B6:D5
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f4:10:fc:6c:8f:1d:08:07:6f:fc:03:25:79:0f:fa:68:ad:
a0:8c:73:b9:1c:c7:16:87:33:6a:0d:4a:4b:86:c2:83:8f:32:
07:cf:39:94:29:11:8a:9e:e6:cb:56:d5:91:e3:94:9f:d2:29:
98:4c:bb:ee:50:17:26:04:55:d8:b4:79:8c:8e:97:f6:a8:44:
bb:9d:97:a4:b5:a0:ad:0f:47:d8:8c:75:35:56:7d:43:64:76:
3c:6a:a5:12:92:76:5f:9c:32:f8:ea:a0:23:22:1c:de:fa:35:
f9:ad:93:93:64:af:59:8c:53:af:e6:71:3b:f1:d1:73:e9:b1:
70:5a:ba:e2:45:12:1d:f6:71:c4:51:f1:8c:1b:c4:d6:0b:36:
e1:cd:25:c5:82:d0:ad:df:d2:c6:9e:71:c3:95:79:8e:41:6b:
2c:78:9e:f6:9d:67:e3:13:41:d8:50:5a:a1:96:5d:c1:67:87:
dc:29:47:b5:1a:f0:a5:8e:b5:09:4e:d4:bc:50:48:23:ce:f6:
9a:87:b0:2d:5c:20:ec:b5:48:78:14:30:35:cb:7a:51:f0:84:
02:d6:c9:4a:5e:80:6c:61:e5:8f:91:87:d9:05:f8:e2:60:46:
1f:c3:86:fc:13:ce:76:66:f9:e4:03:61:4d:ae:84:66:63:aa:
44:d5:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:56:20 2026 by rpki-client