
$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File: 4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier: MvaLJHLZpGKk08nNPFp+9QnxsxmtyWMBf01gbi7BbcA=
Subject key identifier: 78:35:9C:B5:32:97:63:21:A5:98:93:FA:EF:79:17:63:C1:15:4D:56
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer: /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number: 08
Signing time: Sun 21 Jun 2026 09:14:26 +0000
Manifest this update: Sun 21 Jun 2026 09:14:26 +0000
Manifest next update: Sun 28 Jun 2026 09:14:26 +0000
Files and hashes: 1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: FEBxFDmojin4lCLeyEnNXEmGKLz6WXXKrbo75izBcEg=)
2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 09:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Validity
Not Before: Jun 21 09:14:26 2026 GMT
Not After : Jun 28 09:14:26 2026 GMT
Subject: CN=6a37ab72-0c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:f5:b3:fb:50:87:58:8a:d8:eb:a7:66:34:
3b:d8:18:db:67:54:03:08:61:2f:12:f5:e8:43:70:
49:c6:d6:f9:26:74:50:55:d8:59:13:1e:90:8e:e8:
6c:dd:78:62:e0:c8:e0:8c:27:7a:56:fd:61:38:c5:
8d:f3:15:09:4a:fd:d4:af:51:5d:7d:3b:97:8f:f3:
82:35:37:f8:94:aa:d5:01:77:c7:17:dd:5b:9d:85:
e5:72:f9:0d:27:6c:b8:cb:b8:eb:9f:2d:a4:8f:f2:
34:f1:31:f5:c8:07:33:14:92:c0:96:fa:9b:a4:dd:
0d:be:98:59:0c:89:9f:21:f4:ac:47:77:cc:41:33:
db:e1:64:38:4c:4a:68:1d:b0:df:db:11:58:fb:00:
80:a1:3f:d6:6e:b2:ea:07:57:ee:ff:5a:f0:cc:ed:
c9:78:72:3c:4e:57:c6:b0:dd:03:00:73:4c:e2:84:
58:5b:1c:f2:72:b1:1e:c7:3e:18:67:14:be:f8:9f:
24:5c:4e:bf:6f:f2:95:09:e4:a2:b2:f3:ed:5e:96:
37:3c:fd:ab:8a:48:30:02:f4:e0:25:d9:63:88:eb:
dc:51:f8:c4:96:32:1b:2b:7b:88:cf:9e:52:30:20:
bf:cd:b5:33:11:cd:c0:11:ab:1a:ce:09:ff:9d:d7:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:9C:B5:32:97:63:21:A5:98:93:FA:EF:79:17:63:C1:15:4D:56
X509v3 Authority Key Identifier:
keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:2d:16:3e:40:65:91:2b:6a:83:1b:99:f5:70:f3:8f:34:17:
c4:5c:34:c2:e0:cb:ff:1c:30:38:37:77:d1:71:ef:21:8e:1a:
cc:ba:81:5a:57:c1:85:63:67:e1:e8:0a:86:42:b2:3a:41:44:
c3:7b:50:dc:fc:07:d8:af:63:81:fd:e3:b9:f7:10:e0:70:86:
f0:ec:22:ae:27:3b:84:79:92:a2:e0:fe:15:8b:06:d8:8a:d2:
32:a7:51:f0:5f:cd:e0:05:c9:be:63:c0:4e:79:c5:4d:f8:b5:
ed:61:33:d3:ea:ce:63:b4:43:e5:c3:ec:99:44:3f:98:92:67:
7b:ca:38:89:38:9d:2b:82:58:61:40:4c:76:5e:9e:02:c2:d8:
2f:d5:42:06:0e:77:69:5a:e3:01:7a:56:aa:9f:2e:9d:a3:0e:
95:2c:e3:0e:aa:e8:d9:e2:88:a3:4c:77:10:45:0b:32:eb:ef:
c2:04:fc:99:1a:2a:9c:ce:20:8e:c3:1d:6b:ab:b9:c5:c7:02:
a7:3e:22:60:f5:7e:d7:c3:12:f2:82:92:7a:7e:99:8e:d8:dd:
9c:8b:82:53:c3:bf:14:9f:33:6c:26:21:e9:6a:7a:90:50:60:
8e:d3:3e:57:0e:f4:ce:b5:f6:4b:01:91:e3:6d:f4:95:ce:9d:
7b:6c:3f:38
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
OTRBNDExMC8GA1UEBRMoRTA4RTJBNDUwQkVFQkIwMTQ2QjYwOEZGMTAzODg4QTJD
M0VFRkVBRTAeFw0yNjA2MjEwOTE0MjZaFw0yNjA2MjgwOTE0MjZaMBgxFjAUBgNV
BAMTDTZhMzdhYjcyLTBjMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2evWz+1CHWIrY66dmNDvYGNtnVAMIYS8S9ehDcEnG1vkmdFBV2FkTHpCO6Gzd
eGLgyOCMJ3pW/WE4xY3zFQlK/dSvUV19O5eP84I1N/iUqtUBd8cX3VudheVy+Q0n
bLjLuOufLaSP8jTxMfXIBzMUksCW+puk3Q2+mFkMiZ8h9KxHd8xBM9vhZDhMSmgd
sN/bEVj7AIChP9ZusuoHV+7/WvDM7cl4cjxOV8aw3QMAc0zihFhbHPJysR7HPhhn
FL74nyRcTr9v8pUJ5KKy8+1eljc8/auKSDAC9OAl2WOI69xR+MSWMhsre4jPnlIw
IL/NtTMRzcARqxrOCf+d1x01AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeDWctTKX
YyGlmJP673kXY8EVTVYwHwYDVR0jBBgwFoAU4I4qRQvuuwFGtgj/EDiIosPu/q4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5NEE0LzNCODU4RTFFNjVC
QzExRjE5QTgxMDQzQzdFNDdBODg4LzRJNHFSUXZ1dXdGR3Rnal9FRGlJb3NQdV9x
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvNEk0cVJRdnV1d0ZHdGdqX0VEaUlvc1B1X3E0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5
NEE0LzNCODU4RTFFNjVCQzExRjE5QTgxMDQzQzdFNDdBODg4LzRJNHFSUXZ1dXdG
R3Rnal9FRGlJb3NQdV9xNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAnLRY+QGWRK2qDG5n1cPOPNBfEXDTC4Mv/HDA4N3fRce8hjhrMuoFaV8GFY2fh
6AqGQrI6QUTDe1Dc/AfYr2OB/eO59xDgcIbw7CKuJzuEeZKi4P4ViwbYitIyp1Hw
X83gBcm+Y8BOecVN+LXtYTPT6s5jtEPlw+yZRD+Ykmd7yjiJOJ0rglhhQEx2Xp4C
wtgv1UIGDndpWuMBelaqny6dow6VLOMOqujZ4oijTHcQRQsy6+/CBPyZGiqcziCO
wx1rq7nFxwKnPiJg9X7XwxLygpJ6fpmO2N2ci4JTw78UnzNsJiHpanqQUGCO0z5X
DvTOtfZLAZHjbfSVzp17bD84
-----END CERTIFICATE-----
Generated at Mon Jun 22 10:48:44 2026 by rpki-client