
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json)
Hash identifier: jpIAdCg/1b5+vCoV01M9lJrgKn2ETe8Mz0zUiIz6dHA=
Subject key identifier: 51:57:CF:FB:1B:4A:92:10:07:54:18:61:C0:F9:F7:C0:1F:7C:D2:D4
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
Manifest number: FC
Signing time: Fri 25 Sep 2026 06:19:46 +0000
Manifest this update: Fri 25 Sep 2026 06:19:45 +0000
Manifest next update: Fri 02 Oct 2026 06:19:45 +0000
Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: MQu47c3Rst/58qnHZejs0/YDAwJ6vTQR9lBtPio7BrA=)
2: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=)
3: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Validity
Not Before: Sep 25 06:19:45 2026 GMT
Not After : Oct 2 06:19:45 2026 GMT
Subject: CN=6ab61282-6b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:68:82:36:41:14:ae:6d:97:26:20:29:e3:e5:
36:e1:29:81:b3:4d:70:3b:6b:33:26:6d:8e:49:65:
31:c1:9f:90:a6:21:16:63:9f:85:61:55:8a:4b:a2:
fc:b8:db:19:de:5d:88:42:39:13:53:de:3f:7a:86:
1c:d5:0e:93:03:69:2d:20:8b:9e:05:3e:db:2f:21:
28:0e:9f:79:4a:41:df:72:13:84:7c:73:bd:a1:b4:
44:d1:fd:bb:96:6f:15:1b:a4:2c:38:98:57:0e:e5:
6b:98:fe:59:60:c8:59:10:72:6d:42:d3:57:b8:ca:
a1:c8:4f:0c:ce:01:3b:fb:f0:91:99:2d:59:31:30:
7f:38:93:53:05:71:55:8d:1a:37:f9:4c:0d:10:87:
ec:62:17:7e:98:e8:c9:e0:c1:58:a2:15:75:7f:e2:
2d:5a:01:e9:b8:f3:cc:38:ff:85:83:b1:2a:0d:d3:
ff:50:21:dc:7c:e5:ca:ed:83:b0:60:57:18:97:1b:
2a:ae:0d:6c:bb:f0:44:41:1e:72:14:77:5f:82:3c:
90:c1:ad:90:db:2e:75:6d:27:9f:01:92:38:dc:46:
25:8c:48:34:a9:94:4f:56:64:0e:77:38:85:f9:67:
22:b4:43:e5:bf:a2:21:8d:30:6c:d7:4d:b2:6a:cc:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:57:CF:FB:1B:4A:92:10:07:54:18:61:C0:F9:F7:C0:1F:7C:D2:D4
X509v3 Authority Key Identifier:
keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:cb:93:d4:c0:a9:37:3d:f8:f9:f5:3a:33:1c:81:8f:e3:62:
4d:df:af:c4:ca:2d:dd:38:dd:f1:ce:8d:b9:f5:b4:4d:88:c5:
cb:83:60:5a:67:a5:ec:e6:2f:26:59:b7:f3:17:83:d5:c0:70:
f8:17:a6:13:c1:e7:dc:67:42:5a:f6:43:e8:40:31:ba:cc:d3:
03:9f:eb:8f:51:f2:66:95:64:b9:9a:99:20:fe:00:ca:5c:52:
25:7e:98:a2:a7:5c:c3:9b:68:69:11:65:c7:df:58:77:a0:a6:
f1:73:fb:2a:59:7c:88:46:ad:bb:ce:2d:b9:2b:59:75:0c:cb:
47:b0:23:7d:63:42:31:c6:8b:f8:98:f9:d7:77:68:83:c6:36:
27:6d:60:44:00:d7:f7:d3:13:a9:91:89:06:f8:b8:f0:ef:9a:
33:15:62:78:be:92:d9:21:2b:1e:3b:fe:7c:62:a4:10:f9:71:
08:52:89:39:29:05:1c:c8:09:33:01:db:30:85:2b:e6:2d:51:
93:85:04:c3:33:07:4c:fd:82:27:9e:a7:0e:7a:fd:77:1e:5f:
5b:67:2e:b7:1c:d4:09:82:c3:25:e1:15:65:5e:05:2f:e9:dc:
81:60:73:e8:16:c7:3d:12:6e:de:10:30:a8:5b:24:f5:f0:2a:
11:51:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:04:07 2026 by rpki-client