
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier: +dq2pvEuUMxmkiDwNwPLiJahvZm0hortWqCUMpd/DrA=
Subject key identifier: 2A:EC:ED:E2:8F:99:37:4A:C3:7B:68:CB:49:BB:8A:DE:F4:1C:83:70
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number: BE
Signing time: Fri 17 Jul 2026 08:10:38 +0000
Manifest this update: Fri 17 Jul 2026 08:10:38 +0000
Manifest next update: Fri 24 Jul 2026 08:10:38 +0000
Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: F7+SJfgBEUWi3CY3RaNBLGdrHbsvOkgZyv5QpuX8qgU=)
2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: Jul 17 08:10:38 2026 GMT
Not After : Jul 24 08:10:38 2026 GMT
Subject: CN=6a59e37e-6b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:8e:84:f9:5c:da:4e:f4:78:1a:2c:08:20:
34:32:1d:65:09:49:09:34:d6:57:be:4b:15:85:34:
3f:0b:e7:60:5c:bd:25:c4:22:38:bf:61:40:c3:81:
33:46:49:1d:cb:aa:ad:c5:88:62:a2:4f:28:34:75:
7b:1a:fa:7b:59:69:62:2c:74:97:e8:82:d5:3b:ec:
c5:15:7f:c5:01:72:a9:c5:2f:04:b9:3b:5e:1d:7e:
1e:04:35:0a:9e:2b:10:a1:f2:88:e4:cd:f4:5d:2c:
3d:1f:ea:b4:44:2f:c9:e8:d7:46:99:1b:7c:97:b8:
e0:9f:27:aa:28:c5:f7:9c:cd:f1:37:c2:af:13:fa:
fc:fd:ff:dd:cc:3c:b1:70:f7:51:71:ea:f6:b4:bd:
2f:94:48:0e:b3:e1:f5:9a:a0:9b:6c:a6:62:3a:66:
a1:f1:d9:30:d3:d3:a2:25:1c:5c:8a:03:90:2b:3f:
85:a2:be:3e:fd:f0:76:a7:af:76:f7:a1:9b:58:7c:
55:83:2c:61:bd:75:62:cf:52:64:1a:2f:8e:f9:a0:
eb:9e:db:0e:f4:95:3c:52:4d:37:72:c3:af:57:49:
ab:d5:71:a6:2a:d3:02:e2:44:85:e3:e5:d9:03:3a:
b1:37:42:e9:10:70:7a:aa:b0:60:0b:8b:66:cd:4c:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:ED:E2:8F:99:37:4A:C3:7B:68:CB:49:BB:8A:DE:F4:1C:83:70
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:86:48:42:c0:9d:1b:3d:4f:41:b8:3c:64:81:5e:17:21:17:
2c:8d:e9:66:e4:b0:58:f6:94:99:3a:6c:c0:e8:7f:ed:a2:cb:
16:be:a0:a2:81:d9:61:f0:67:21:d9:c4:92:c2:c1:0f:18:d6:
90:03:19:01:f2:35:5d:84:0d:6f:b5:7c:4d:40:ec:38:86:61:
81:79:dd:48:e9:8a:94:8e:02:74:18:3c:1e:2c:8d:04:60:1f:
8d:9b:2e:53:96:bb:4a:ad:52:82:30:92:6d:8b:71:b7:05:17:
75:c9:7e:5a:66:b3:27:0f:b3:de:ef:74:21:ef:fb:22:e2:58:
7d:1b:68:f2:17:9b:09:ab:5c:40:e9:f5:0a:77:12:06:e3:10:
65:dd:ce:4e:1d:22:e9:2c:7b:44:0a:55:a0:2a:47:fc:97:f4:
f9:5b:62:d1:80:43:e7:0b:9f:dc:61:68:cc:a9:ba:17:5c:93:
df:04:e6:fa:f4:8a:0f:2c:be:bf:d4:86:c8:b4:68:fa:c8:af:
c1:a9:9e:8a:a6:74:3b:84:26:03:2f:03:1b:f1:0b:0b:03:0d:
05:9f:d2:8c:1e:0a:5f:2d:8a:71:16:b1:5a:50:9e:fa:64:09:
80:4a:70:da:4a:da:33:3f:24:05:5e:6e:8c:26:2b:cc:9c:f8:
93:7a:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:11 2026 by rpki-client