
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json)
Hash identifier: +37xwbIuC4wLFiMpju2jeMFUyn6MbgZp/Xs2Bk3Q3oI=
Subject key identifier: 15:6C:6A:15:24:BC:00:D2:29:E9:53:DA:16:97:F4:B6:81:08:1A:0E
Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Certificate serial: 1C2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
Manifest number: 1C1A
Signing time: Wed 22 Jul 2026 16:18:17 +0000
Manifest this update: Wed 22 Jul 2026 16:18:17 +0000
Manifest next update: Wed 29 Jul 2026 16:18:17 +0000
Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: G8DaS00LJhyrGmZ3DxAMpOaB0XQkVQC08N3ZKryN53k=)
2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: tA26iTcckJCEwCBsZnY5TWqIbPvv1VTq/Rbk2qWWvAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7210 (0x1c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Validity
Not Before: Jul 22 16:18:17 2026 GMT
Not After : Jul 29 16:18:17 2026 GMT
Subject: CN=6a60ed49-3c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:b2:c1:35:ea:0b:f9:4a:9a:03:f4:f2:09:
82:4a:36:52:7e:7b:d4:c1:c6:db:e6:ff:ef:cc:e7:
07:e3:b5:1d:ca:c9:35:32:ab:5a:a5:0b:77:f5:36:
94:dc:2a:6f:1a:94:0e:7e:b4:7b:92:17:ad:d0:1f:
55:41:df:b1:7e:af:33:10:42:87:65:4b:36:6c:23:
7b:ca:66:af:3a:75:5a:62:8e:18:89:65:69:42:33:
64:81:5a:ec:51:11:06:5a:75:07:62:75:34:02:24:
30:bb:97:f5:93:80:12:b4:df:48:80:29:1c:4f:0f:
2f:82:3c:ae:54:af:31:a4:ab:9b:93:a9:66:44:26:
1a:b4:5b:0c:0e:e4:88:d3:b2:72:f1:30:6b:c9:58:
2c:81:a9:a3:c7:9f:25:ad:5b:c1:1a:2f:9b:54:61:
56:89:f9:57:7a:b9:57:68:75:2c:6d:32:e1:67:55:
c0:18:99:72:0e:8f:f7:41:8a:0c:8b:4f:84:64:16:
cb:24:03:5b:72:af:c3:54:50:b9:8b:69:47:4b:ea:
02:8f:67:3c:0a:27:2d:26:f6:85:af:8b:70:8a:fb:
16:1f:08:40:d3:63:86:2c:90:b3:4c:7c:46:12:cd:
f8:60:db:91:16:1a:28:4e:19:fc:31:a9:64:b3:98:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:6A:15:24:BC:00:D2:29:E9:53:DA:16:97:F4:B6:81:08:1A:0E
X509v3 Authority Key Identifier:
keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:11:75:ce:15:27:75:5e:c8:20:19:4a:f2:c6:e1:e6:66:6f:
fd:70:4b:2e:4e:ba:21:c7:71:28:35:fc:ee:f2:b5:a7:fa:f8:
d1:0c:79:d7:55:b4:14:be:df:ed:5b:ce:40:c6:a4:be:f2:72:
35:f8:0a:43:37:4d:60:33:5e:10:c5:9b:6e:ec:e2:4f:98:da:
96:07:ce:84:71:6b:fc:47:f6:fb:0a:22:ae:97:9e:02:39:a1:
c2:dd:6f:f0:18:2b:75:15:e4:dd:ce:de:80:99:fa:81:d5:c4:
8f:e0:70:73:2d:be:a2:4b:ce:bf:52:1a:99:02:9e:37:23:a0:
41:6a:7b:ea:84:7a:47:d0:09:12:3d:3c:80:c0:90:4d:9b:60:
f1:19:89:22:87:07:51:67:47:d7:40:86:00:2d:40:59:23:19:
65:20:26:d8:f4:64:80:a5:e5:2c:e3:a2:88:0b:4c:c0:a0:0d:
75:24:1f:0b:27:a4:1e:e7:c1:34:ce:13:a5:e8:58:9a:ab:85:
90:5b:82:bb:dd:2e:2e:3c:a5:6d:30:ed:30:0c:90:98:ce:b3:
c6:03:b1:1e:fb:05:68:e0:6a:83:0a:d8:5c:65:06:47:c0:f1:
e2:c3:dc:7f:70:f8:93:ac:26:5d:5a:2e:0d:8f:99:6d:b8:c6:
d8:13:c8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:39 2026 by rpki-client