
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier: K+PVgKsyPKN6emwm2/W8j846jLg4SBMEmiuPpl3C2Eo=
Subject key identifier: B5:B6:16:6F:B3:80:91:DF:39:AB:92:72:45:57:F0:EC:79:17:97:4A
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number: A8
Signing time: Sat 03 Oct 2026 07:54:41 +0000
Manifest this update: Sat 03 Oct 2026 07:54:40 +0000
Manifest next update: Sat 10 Oct 2026 07:54:40 +0000
Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: MVL2OOYRibTXnpBaPkR+qUfwoQG71wK2eMSpyzi4Wis=)
2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=)
3: eR8yiPj_HfPocgIKe4Lfgud2LQ4.asa (hash: GkxPfUymF1yghLhW8uwGshrG1gg+jszt03IX72KcUQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 07:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Validity
Not Before: Oct 3 07:54:40 2026 GMT
Not After : Oct 10 07:54:40 2026 GMT
Subject: CN=6ac0b4c1-9e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:e6:06:f3:5f:28:6e:c1:94:f8:74:71:c9:
92:1f:55:e4:e2:38:c4:71:db:17:3e:1f:fa:5b:9d:
17:23:ac:99:78:2c:c9:58:fc:02:44:b2:dc:14:d7:
1a:2b:5d:b8:31:36:ac:15:40:ef:80:4a:09:7f:6a:
de:b0:c2:e4:1f:a0:c8:a2:f5:fc:b2:2a:47:a9:a0:
67:69:a7:93:62:af:a0:a8:75:69:aa:0f:8f:85:93:
ea:ba:e8:76:0a:c0:0c:76:a2:92:04:10:40:32:e8:
44:06:a7:1f:c0:4f:18:0e:0f:bc:87:d8:05:be:3f:
92:81:05:e7:70:d3:6a:0e:84:50:fe:c5:be:c1:b1:
1a:51:bf:b0:c4:78:7e:93:7d:3d:04:5f:f8:27:a8:
f8:13:35:ba:3b:da:83:7c:ab:d6:fa:c6:53:00:fa:
a1:d2:ee:3c:5d:c9:b5:85:38:ad:70:5d:29:fe:09:
a6:f9:be:0b:af:56:e2:86:99:ca:5e:3b:3e:00:9d:
e9:05:8e:08:04:51:f8:4d:2d:3f:5c:31:a1:2f:98:
1a:94:d4:62:9a:7a:b0:bd:47:fa:b6:f2:da:87:ea:
ff:b6:e8:8f:f9:09:1f:25:b7:7a:be:f3:59:22:06:
95:a4:33:0f:b8:92:e8:9f:36:fa:72:05:75:5c:87:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B6:16:6F:B3:80:91:DF:39:AB:92:72:45:57:F0:EC:79:17:97:4A
X509v3 Authority Key Identifier:
keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:f3:e2:b2:61:77:85:c8:2c:b8:39:8e:72:13:b7:a9:c0:f3:
e2:e2:1a:67:1d:d1:d6:2e:d4:2e:66:25:fd:a7:a2:37:f0:09:
6d:89:15:49:f0:bd:95:a1:6f:6b:fb:d3:99:51:c1:25:37:47:
a5:97:91:75:c4:98:98:e0:28:02:91:a4:45:f5:96:75:ed:7e:
9e:7d:34:35:dc:81:25:c6:df:be:5d:a5:82:1c:a3:e6:0a:23:
35:5a:76:00:1b:e2:40:8d:4d:d8:0b:4e:0d:af:63:97:42:c4:
8a:b0:bb:ea:77:53:89:c7:f6:04:45:60:ad:7e:d7:96:74:92:
a3:b2:bf:d8:68:ff:60:2f:cb:ee:dc:02:13:91:bb:92:50:79:
a1:c3:b4:52:d9:df:06:a2:01:29:fa:28:46:03:f9:04:af:87:
50:28:07:8b:4c:2b:30:b5:55:9b:3c:28:57:c3:c5:69:97:0c:
63:6e:92:8d:0b:49:da:34:db:04:89:04:47:c2:73:00:64:9b:
bf:27:05:ef:b4:63:2f:f6:54:9a:e8:6e:e9:c0:36:f3:27:11:
96:56:2f:0d:16:c7:60:67:3b:a0:f4:b3:8f:a5:30:dd:b9:53:
89:56:a9:55:2d:7f:db:34:01:6e:5a:1c:f6:a5:d0:f7:09:09:
20:5c:75:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:40:33 2026 by rpki-client