
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier: nShgLg6Zf5dSV/GH6ZoKtCRgVM4RpW6EW3M61UsRnNE=
Subject key identifier: 30:15:AB:EA:13:18:22:60:47:EF:56:5F:E9:BB:BB:73:0A:99:DD:5C
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number: F0
Signing time: Mon 19 Oct 2026 07:04:28 +0000
Manifest this update: Mon 19 Oct 2026 07:04:27 +0000
Manifest next update: Mon 26 Oct 2026 07:04:27 +0000
Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: apW42zndMrUr+0/joyVTkK2RvdySFxSwFMcIKUzsRHw=)
2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: HgsCBlPfUxEGN7fUuKP9EFyk8NbYZcFbFk0fllEBLvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 07:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: Oct 19 07:04:27 2026 GMT
Not After : Oct 26 07:04:27 2026 GMT
Subject: CN=6ad5c0fb-77d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:d8:29:1e:a9:9d:8a:f9:ad:dc:20:59:54:
a4:51:b3:66:b4:40:3b:a2:37:4f:92:0a:ae:b7:b9:
8f:dc:ad:be:1b:c0:3a:98:78:f0:9d:4e:4e:99:a8:
24:6a:0e:16:eb:6d:cc:a4:e7:51:1f:2b:31:8c:b4:
22:1d:46:3c:ce:01:04:6b:d0:57:fc:ef:28:5d:ab:
ed:3a:3d:15:f0:59:5c:f7:b1:77:6c:5a:b8:30:f6:
6c:e0:7f:3e:7d:3b:a8:04:b4:0d:e5:12:99:ab:11:
34:50:7c:61:d4:02:cb:d3:31:ad:e3:de:64:c2:9c:
76:0e:64:82:fc:18:b2:45:49:79:5b:04:8b:a3:9a:
41:e7:c9:75:6a:a7:a6:db:e4:3d:25:09:22:60:f4:
32:2f:0d:6d:d9:2a:78:d6:03:74:d9:f3:a8:61:91:
cd:dd:1c:77:93:95:e2:9a:a5:d0:19:f0:78:6d:66:
b9:90:94:db:d6:f4:46:30:0d:fe:d3:02:dc:b1:e1:
d6:bd:c8:1d:a2:7f:6d:3e:f1:d9:54:4b:d2:e9:99:
26:b5:1b:9d:16:a8:c9:f7:04:ff:e4:f8:bf:a8:43:
cc:17:49:47:7f:03:61:e3:b7:fd:43:ad:22:08:f1:
bb:c1:98:3f:a8:01:a5:66:1f:78:b9:72:77:e3:e1:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:AB:EA:13:18:22:60:47:EF:56:5F:E9:BB:BB:73:0A:99:DD:5C
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:98:eb:0c:32:a3:d5:7f:f7:d3:da:e4:d5:19:e1:f2:56:b9:
9f:d2:77:b2:8e:43:15:52:61:d9:a9:39:9d:e2:56:b3:59:63:
10:18:99:af:bb:1b:8d:26:39:8c:37:62:17:eb:c0:ca:f9:e6:
01:9a:66:7d:c4:26:78:42:cc:e9:9f:07:67:bb:1b:42:e4:fc:
3a:bb:99:d0:ef:5a:20:80:f9:d1:71:2a:1c:16:c4:90:72:07:
b3:7e:03:f8:c3:44:75:b0:4b:7f:29:37:28:47:67:29:01:c7:
5e:66:2e:c5:c3:0d:45:de:5c:c7:73:44:35:db:00:74:34:66:
e3:85:0e:1b:4c:28:98:6d:e9:eb:42:15:af:54:49:7e:00:a9:
83:75:98:89:ac:fb:e4:49:f7:32:62:72:4d:75:55:7f:3a:f1:
d4:e4:e7:b2:9e:1d:43:64:88:bd:55:c2:97:ba:8c:76:90:66:
72:0d:ad:6a:79:da:f1:04:63:e8:b4:20:9d:c6:ca:90:e5:8c:
ef:8e:f8:30:1b:7a:f5:80:85:a8:cb:40:55:73:58:a9:26:c8:
2c:40:9c:99:a2:6f:ce:90:7c:d7:48:7a:1d:af:f6:ca:92:40:
b6:08:1b:2b:ff:5d:13:e7:f4:10:6e:96:39:a8:99:d9:8c:d0:
fc:72:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:00:01 2026 by rpki-client