
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier: th315pee4Jb7+96XsJgAm5U1YggNFxec3gPAbirmOrU=
Subject key identifier: E9:B7:DE:B8:C0:C6:17:65:91:36:3F:11:71:08:8E:1A:20:CF:67:F2
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 2842
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number: 27D9
Signing time: Mon 20 Jul 2026 15:43:42 +0000
Manifest this update: Mon 20 Jul 2026 15:43:42 +0000
Manifest next update: Mon 27 Jul 2026 15:43:42 +0000
Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: qCq2nqTAFJjDD52HfbGDh+wXg5paAM0cXHjcF/+7vmw=)
2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
3: 79393030926D11F0B792FC45C4F9AE02.roa (hash: tLT2kndqqx6tGSH4PRFsNm8v32IFyxMwIpYkP8MKXpg=)
4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10306 (0x2842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Jul 20 15:43:42 2026 GMT
Not After : Jul 27 15:43:42 2026 GMT
Subject: CN=6a5e422e-9aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:6a:5f:2b:fc:36:1c:ad:8e:2c:6d:c5:a1:
91:db:86:63:65:c5:69:66:e3:b1:06:79:fd:1b:71:
e1:fb:e7:b6:6c:86:d7:91:c7:f7:39:74:54:07:d5:
15:7e:9b:c5:3b:bb:1d:19:06:fd:b1:3d:72:64:1f:
51:53:f3:f1:b7:eb:15:e7:d9:ea:09:93:f9:4e:59:
f7:9b:f3:32:52:2f:e9:7d:33:dc:68:c9:d3:76:21:
66:a3:3c:ec:b0:e3:6d:2e:9c:f6:41:88:9e:ff:b2:
0b:3c:6a:98:b8:a2:99:2c:53:7a:ca:ba:dc:95:6f:
62:5f:b2:53:6e:08:3d:5b:f8:8e:2b:27:57:d3:df:
30:99:5e:3e:45:d6:48:13:ab:29:f6:76:4a:bd:a0:
70:d6:4d:61:f1:a9:b4:80:4e:2e:68:0f:e1:b6:c5:
81:3f:54:eb:24:e9:f6:8f:81:8a:70:a7:33:b4:37:
f3:a2:44:f0:b1:d8:73:08:67:1b:a2:d7:b6:83:23:
2c:2f:59:83:ed:ee:7c:59:b1:df:d2:b4:cc:a3:cd:
4a:a8:24:dd:b8:78:0e:ac:0f:91:fa:c7:07:c2:9e:
a6:c3:bf:68:a5:cf:6f:9e:28:40:6f:6f:e8:06:1e:
bf:82:c4:34:0a:bd:bc:7e:6c:5b:3d:4c:70:21:93:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:DE:B8:C0:C6:17:65:91:36:3F:11:71:08:8E:1A:20:CF:67:F2
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e0:80:a9:0c:2d:55:fb:5b:07:2c:f7:fc:b4:2c:4f:78:26:
94:38:63:f8:13:6f:06:d3:2b:dd:d0:9c:0b:60:60:79:b7:85:
5d:af:55:c5:ae:72:7a:9b:56:80:b9:0a:2e:24:e5:a4:8c:40:
51:94:16:a8:84:ff:1e:b4:d3:58:12:04:f4:4f:98:14:a0:04:
7b:28:17:40:c2:78:22:44:af:09:f8:19:48:73:f8:49:e0:93:
4b:14:cb:70:0a:75:c2:2d:f0:d9:61:57:f0:4d:64:57:a5:9e:
c5:59:d4:56:ed:2f:6f:50:9a:ca:da:ad:ad:79:c2:3c:b5:10:
e8:dd:e0:e2:46:3e:d4:7e:82:38:07:01:49:1f:26:62:71:82:
b4:87:ab:96:af:0c:52:68:c2:ce:5b:16:d2:60:f6:53:4b:62:
12:1f:0f:6a:6d:7a:8c:fb:ae:2d:3c:6e:de:12:bd:8b:49:0e:
3b:cb:cc:f4:54:df:9e:4d:cb:af:29:ea:93:a5:2c:de:ff:af:
57:d4:19:04:ca:5b:18:76:9f:87:de:3c:76:d3:fc:4d:a2:1b:
5a:7b:91:36:76:a3:b3:35:39:5d:90:d8:43:c2:d4:8c:93:aa:
48:a0:4d:06:91:ca:46:22:bc:93:e9:62:7c:ff:db:bf:0f:55:
48:dd:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:08 2026 by rpki-client