
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
File: 4hHNheByVQ4z5MyGpj-8360dNTI.mft (raw, json)
Hash identifier: tl8YGMPWi8jJLiqmUakNkq2HCtlhlcAiRt0l9pe8hV8=
Subject key identifier: 7B:70:95:2C:08:95:31:B2:23:6E:06:F2:7D:D4:09:FA:CD:2A:E1:BF
Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
Certificate issuer: /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Certificate serial: 092C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
Manifest number: 0914
Signing time: Sat 26 Sep 2026 20:23:32 +0000
Manifest this update: Sat 26 Sep 2026 20:23:32 +0000
Manifest next update: Sat 03 Oct 2026 20:23:32 +0000
Files and hashes: 1: 4hHNheByVQ4z5MyGpj-8360dNTI.crl (hash: BkXSkkJYWAwfQ2cAUzQX4T1+FZVs3k3muOLpK4Y00vQ=)
2: 0694DE925E7011F18D994AD5147AAC22.roa (hash: 1VTps7TMblVtTtQQmFdN1wLLHWYElV09OvYdQPb9W90=)
3: 57BDB7A85E7011F1A73FCCD7147AAC22.roa (hash: D1vi/CU/2Qa3UAwk8ROF6/81kLEg5XQ0HrFSPG7aFBg=)
4: CEDD71FAE48811F09BEEC367446F56BC.roa (hash: v+w6FMXM2xR0r2SO7jbmxEeAiii0dpp5GEOdFjQ8hTM=)
5: 624086E2E99611EA930A5B74C4F9AE02.roa (hash: gGjRkko3vUXG2uHIO8NHVPfpIWdSndydd5tBp7Lr7bM=)
6: AF3304C65E6F11F18B912BC3147AAC22.roa (hash: mugZ6N0u6WAwoUu9/alz8CzePymZa9nygy/+jo0Dw6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Validity
Not Before: Sep 26 20:23:32 2026 GMT
Not After : Oct 3 20:23:32 2026 GMT
Subject: CN=6ab829c4-19d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:37:69:ed:d6:bf:36:17:a7:ad:25:e6:64:
5b:d2:93:b2:d8:31:c9:59:dd:59:9b:e7:fb:30:52:
b2:5f:ee:77:a5:88:b6:86:a3:4c:b4:db:80:2a:a0:
77:67:79:8f:d3:2d:b0:f1:d1:d7:f0:03:6f:70:dc:
e5:38:1d:01:ea:dd:4e:17:0f:51:c5:6e:fd:02:14:
53:b8:f8:2e:75:76:f7:d7:74:a8:e3:4e:88:84:49:
e9:fb:e3:f4:1d:9d:72:96:1d:10:ad:51:05:0d:64:
7c:2c:4a:12:26:e6:f4:04:4c:9c:69:a4:5c:d1:bc:
2f:87:da:84:99:23:4f:a0:cc:46:c3:a6:fe:7b:ab:
16:8b:f5:45:3b:e9:af:bd:a9:16:37:57:9b:07:8a:
3d:39:80:9b:d8:34:01:c1:bb:97:b2:19:a3:5a:0c:
7d:a6:84:4b:71:5c:40:df:6d:1f:2e:72:02:ad:30:
0c:42:4d:b3:7a:f6:e6:48:99:9f:b6:c3:d6:be:a1:
d7:07:b9:03:c2:60:a2:6d:da:f3:8a:1f:90:f9:5b:
15:8b:09:f5:9d:21:3d:93:48:7f:ef:a2:0a:e0:b3:
5a:3c:75:e8:c3:0c:73:fe:5e:6a:78:83:c0:28:ca:
43:d7:52:52:62:13:f8:c9:9f:9c:50:c3:5a:cd:80:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:95:2C:08:95:31:B2:23:6E:06:F2:7D:D4:09:FA:CD:2A:E1:BF
X509v3 Authority Key Identifier:
keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:99:85:a7:f2:81:37:79:17:c0:cf:c2:a4:d5:93:ec:da:98:
ff:7c:c0:70:80:31:ba:94:e4:c6:7b:ee:6c:f0:3c:af:b2:92:
4c:99:ca:2f:8e:d0:18:8a:47:3c:f0:af:e0:35:23:44:13:09:
c4:e0:75:30:a3:c5:da:0f:12:79:58:6b:c5:16:fc:a2:2f:63:
be:4c:e2:2a:54:cd:a8:c5:69:26:a9:4d:e3:4e:28:5f:c2:c6:
95:b5:a1:84:57:79:09:e6:0d:a8:f6:3c:1e:c7:52:20:d6:37:
92:32:9c:0e:cc:9c:e0:ec:ce:c9:57:45:8a:61:8f:34:ca:ad:
59:10:9c:a8:f8:9c:8d:2b:02:ad:86:bb:ef:72:b7:29:06:f6:
5d:ea:8d:b4:a9:5f:27:26:94:af:c8:18:43:bb:30:26:ef:31:
b9:1e:1e:cc:de:f7:02:e2:7e:d5:62:c0:d1:aa:03:ca:15:5b:
32:7e:71:20:91:be:51:49:b5:3a:97:c0:37:7d:a1:ec:90:a5:
b7:4a:ed:72:fb:52:ec:c1:0d:5c:4d:6c:dd:2b:9d:a1:ef:21:
c7:44:ce:b8:21:79:b5:00:cc:36:31:77:84:b4:e7:55:74:19:
32:eb:a3:4b:58:5e:f9:a9:11:f5:e6:3a:72:75:dc:16:4d:a9:
3a:cf:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:58:43 2026 by rpki-client