
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier: 98CftGcsHxVE+NPhJW+/dwMZrfxxJz69pCBbrk7zGRo=
Subject key identifier: 24:23:B5:2C:07:97:DA:7C:8D:05:B1:55:AE:0D:19:61:96:FB:B4:F5
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number: DE
Signing time: Mon 20 Jul 2026 20:51:03 +0000
Manifest this update: Mon 20 Jul 2026 20:51:02 +0000
Manifest next update: Mon 27 Jul 2026 20:51:02 +0000
Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: BqZe/ABfmN1OPdJ+Ckw5+dzENh947rqrXKHfdquoXpE=)
2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: NPJSodbwWKPxaxqcL20NVvStl+UOM4gI9IHpj1XGIKY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Validity
Not Before: Jul 20 20:51:02 2026 GMT
Not After : Jul 27 20:51:02 2026 GMT
Subject: CN=6a5e8a37-3d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:fc:51:81:37:2e:1c:0f:8e:70:01:b2:a6:
fa:ee:f0:f3:c7:b2:cf:9c:03:0a:79:8b:f1:9e:24:
91:23:7d:b5:5d:fa:e1:0a:db:6d:e3:5b:4a:27:00:
c0:f8:91:85:19:22:64:a6:c4:f4:a1:4c:2c:28:86:
55:c0:4f:53:8d:3e:7f:6d:87:53:b1:e5:60:dc:f9:
31:77:f1:2c:9b:9f:02:8b:7f:42:2e:63:c2:e0:d8:
f8:d3:b2:39:4c:6c:dd:d2:a5:b8:87:dc:e2:98:2e:
8b:e7:67:b4:f8:8a:ec:ef:fa:e2:b7:92:4b:3b:5b:
c9:4d:e7:75:68:89:4f:eb:4f:c2:18:f5:e0:e5:31:
b9:72:53:11:3a:e7:48:4b:51:4c:f4:37:7a:78:38:
f1:57:b3:31:17:a2:59:29:da:97:5a:7b:52:46:36:
16:9d:de:5c:76:cd:bb:6c:ae:af:29:e2:7f:14:a2:
99:b6:48:7a:6c:89:1a:ea:a2:be:89:3d:15:64:e8:
6b:32:0b:2f:b8:b9:9f:87:95:b5:a1:d7:75:8e:eb:
74:41:cb:37:69:f5:0c:53:82:db:c2:f4:0a:bb:6b:
17:b2:be:27:fd:1c:0b:23:a1:da:0c:5e:4f:70:f3:
64:de:9c:26:95:ba:7c:80:1d:4c:df:0b:17:23:45:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:B5:2C:07:97:DA:7C:8D:05:B1:55:AE:0D:19:61:96:FB:B4:F5
X509v3 Authority Key Identifier:
keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:1b:b2:db:65:ec:89:b2:fc:c9:d5:f0:ec:d5:d4:b7:2d:ef:
15:bd:e7:ed:ed:62:8a:e4:61:4e:de:73:35:ef:33:c2:ba:76:
42:5c:82:c6:f8:df:39:bc:17:80:2f:dd:be:91:e8:41:43:02:
3a:88:7d:c0:ae:c6:23:3d:cb:1e:28:3a:84:e6:df:49:d6:86:
88:29:67:5a:09:d2:d4:56:09:d5:bf:39:40:7b:1e:24:f6:3e:
03:5a:2b:3e:e8:45:a2:5d:54:7d:39:f2:8a:8e:69:7a:16:c5:
2d:97:c3:75:ed:8c:0d:65:a4:9e:e2:86:d2:c1:68:48:6c:a9:
14:44:2c:80:c2:77:fb:c4:c1:05:e3:f1:ed:f0:46:bf:b6:5a:
6b:fd:d9:8a:69:b0:53:b7:48:f2:f7:ef:9d:76:45:e0:15:a4:
f3:d9:07:a3:e7:e8:44:07:cb:5a:51:55:c7:5c:c8:2d:1d:6a:
49:5f:58:dc:c1:8a:7b:fd:3b:ed:34:3c:e7:34:45:74:22:65:
7a:4d:2b:ad:b0:02:62:46:5b:a0:17:86:f9:a1:ce:20:4f:99:
04:a2:3d:e2:fa:8b:9f:07:87:10:6a:0b:61:b4:14:58:eb:7a:
ab:25:69:75:4d:ad:79:c4:2f:7c:bb:ca:82:60:69:5d:df:78:
9d:f9:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:29 2026 by rpki-client