
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File: 4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier: SrSum/wOwDbLidvz9VBPJ/tL++3ko4R0CTi8ZR+2Za0=
Subject key identifier: 20:F0:EB:25:49:FA:8D:56:F9:A7:7D:B3:C3:90:67:F8:0F:81:49:F4
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer: /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number: 39
Signing time: Sun 27 Sep 2026 09:11:09 +0000
Manifest this update: Sun 27 Sep 2026 09:11:08 +0000
Manifest next update: Sun 04 Oct 2026 09:11:08 +0000
Files and hashes: 1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: 5SWcC8u+oFlOsryP1qOCTJOD4cC0yu2qAt14Dsx/gKA=)
2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Validity
Not Before: Sep 27 09:11:08 2026 GMT
Not After : Oct 4 09:11:08 2026 GMT
Subject: CN=6ab8ddad-a663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:6f:7b:03:b9:f5:5d:c6:13:4e:01:9d:64:
52:24:9c:17:cf:21:d2:af:e5:c5:97:20:7d:d1:b1:
10:6c:ce:2e:c9:21:b6:e6:44:d1:c5:36:da:bb:2f:
1a:2d:42:3f:6b:3e:e6:78:b2:8d:9b:bc:fe:66:87:
93:b0:8a:7d:f4:59:ba:2e:f4:ae:0e:3c:1e:6f:78:
fb:10:21:f7:44:3d:0d:56:d5:4a:cf:bf:b0:b4:eb:
46:27:7a:a6:74:cb:ac:4f:35:e9:bb:0b:b2:49:b3:
12:e9:e4:5b:13:5f:27:2e:2e:d3:a6:29:3a:29:29:
fa:d7:88:25:1e:7f:b0:b8:12:dc:be:1d:2e:8e:20:
b3:1a:04:65:c7:d7:97:62:1f:09:39:ac:7c:97:18:
b5:02:0d:50:81:ab:44:a6:58:a2:41:08:9e:9a:01:
3e:cd:fd:f4:6a:5f:a4:16:4f:f4:36:21:e5:9b:26:
ff:04:32:18:77:fd:51:e8:13:71:65:8e:b4:2f:4e:
62:e6:77:0f:7a:11:9c:8c:57:be:ec:68:ea:21:c4:
f8:50:dc:3e:67:85:bc:35:c3:21:a8:cf:84:4e:6a:
4b:15:d2:de:e9:04:12:40:cf:4e:65:92:bc:80:46:
72:f4:1d:70:6a:c6:ba:b9:fb:f6:30:7a:c5:ce:b6:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:EB:25:49:FA:8D:56:F9:A7:7D:B3:C3:90:67:F8:0F:81:49:F4
X509v3 Authority Key Identifier:
keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:19:a3:d6:f5:16:87:eb:ee:28:fd:e4:e4:71:55:69:54:
84:56:76:13:a2:58:b5:a3:16:76:4e:ff:bc:6a:cc:f4:4f:c9:
6c:3e:48:a2:53:03:a7:fc:95:65:73:29:f9:60:0a:ee:f1:1c:
fb:67:1c:36:43:fc:e8:7e:df:19:24:ee:ad:a5:c1:c1:cb:77:
e9:75:30:01:af:79:21:fb:e2:92:04:75:e2:9f:6e:75:ac:90:
7a:52:c9:92:f8:86:f3:15:4a:db:0a:67:6c:d9:07:83:6e:90:
f2:ce:6a:78:f4:68:ce:8a:f1:ac:1f:94:76:a7:d3:6f:32:04:
83:16:6f:5f:d2:85:e7:e9:8b:a3:52:53:22:9d:86:48:5b:69:
79:af:54:97:8b:dd:f6:52:a4:3e:59:7d:80:4a:0f:85:06:cd:
87:ef:2e:82:8d:2d:64:b3:51:15:14:82:b3:77:83:83:c1:ff:
7e:51:7c:fd:6c:55:bd:90:c0:3e:ae:54:9f:a0:72:46:45:dd:
7d:33:3a:1b:86:ac:b9:68:55:a1:05:80:f9:70:62:28:f6:57:
b3:b7:96:ee:e4:5a:17:7d:32:7c:e7:0b:44:f0:a4:cf:c3:55:
1a:fe:97:31:c4:77:82:11:83:04:7e:6b:d0:e2:af:00:83:e2:
a5:73:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:17 2026 by rpki-client