
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json)
Hash identifier: tA8X9k77izMKylSJVM5YrhdRKNkTVqx8zv4GXicmAh4=
Subject key identifier: A7:27:F6:E2:16:85:4F:F0:88:31:E0:FE:C9:BB:BE:1F:46:CE:0E:91
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial: 0E56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
Manifest number: 0E4E
Signing time: Wed 20 May 2026 17:47:08 +0000
Manifest this update: Wed 20 May 2026 17:47:07 +0000
Manifest next update: Wed 27 May 2026 17:47:07 +0000
Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: Ml5R5/JOyjAuqAL6MHyguoUjVIb8g02sE8WBU9dVns4=)
2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: QV4VcOWMjw2Q8agZQUCaZHMoZiK398hrWlFAisrLEf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3670 (0xe56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Validity
Not Before: May 20 17:47:07 2026 GMT
Not After : May 27 17:47:07 2026 GMT
Subject: CN=6a0df39c-193e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:67:af:1b:0d:66:b7:e7:75:39:d3:12:b8:
86:ec:18:68:65:04:b4:33:ba:78:6f:36:19:35:6c:
fc:d4:19:f9:e7:3a:0e:d7:b9:e1:05:50:65:ee:5a:
b6:f7:ec:e8:59:f6:5b:d3:24:cb:11:2a:64:c4:59:
47:22:d9:97:a7:d5:42:9f:b8:6a:7f:b9:8e:06:11:
1c:94:a5:0c:70:b1:26:21:61:c3:3a:0c:84:53:da:
f9:db:e8:3a:7a:a4:5d:1a:96:74:fd:e0:10:41:65:
c7:e9:a2:76:d9:e0:0b:e2:4a:34:5f:78:df:b3:44:
80:ec:f6:c8:38:63:5e:27:13:a9:9f:88:dc:88:d5:
04:b5:5a:35:72:60:d9:76:61:a5:6b:4c:3a:f2:5d:
d1:16:0b:26:4b:d5:79:6d:0a:7f:e1:67:d1:3a:e2:
62:2a:a0:ad:eb:69:b0:80:a1:e6:cf:b8:71:71:4a:
3e:a6:9e:23:a0:39:fb:2f:6c:18:6a:e7:20:a1:6a:
dd:af:a0:2a:6c:58:1d:4c:1d:c0:5a:41:50:e5:6a:
5d:c9:c5:62:97:61:86:36:23:fa:93:bb:9e:82:f5:
89:8b:bb:c2:6b:3b:a5:4c:44:08:ea:2d:2e:94:a9:
be:bb:d4:12:c4:c6:65:87:f2:a7:d6:ce:63:f6:bc:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:27:F6:E2:16:85:4F:F0:88:31:E0:FE:C9:BB:BE:1F:46:CE:0E:91
X509v3 Authority Key Identifier:
keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b6:1b:6e:7d:2f:b0:b6:1a:3f:10:a9:c9:d5:96:e5:c2:7b:
7e:64:f9:e1:36:04:58:af:af:0f:1d:ed:f5:6e:ef:31:f6:a2:
59:32:f2:6e:ae:5b:a0:f1:c3:de:4a:96:2e:e9:2a:0e:63:f8:
69:6c:7f:c4:be:b2:01:8c:69:0b:9e:2c:e3:66:97:c6:2c:21:
31:e1:5e:e1:7f:4a:33:ec:6a:ce:35:e8:ca:6f:07:52:5b:07:
94:7f:34:07:f0:c8:61:a4:61:6b:a3:9d:42:a6:da:d2:11:01:
18:42:9b:cc:47:5b:2e:8d:2b:4a:35:ed:02:12:4e:50:f8:be:
1d:fa:5c:e4:d6:81:fb:9c:95:c1:7a:9f:9b:72:81:53:45:90:
d0:cb:65:20:35:d6:1e:5c:48:5a:40:0a:d7:d4:a8:c1:c8:91:
ae:35:6a:d1:c2:9a:88:4d:ef:84:f4:ec:a2:f3:99:f1:0e:27:
3d:0b:91:ae:cc:a3:b8:c7:d8:fb:24:62:53:1f:52:44:de:ca:
9e:21:be:f0:f1:35:87:a4:f9:63:13:af:df:38:e1:65:86:2a:
99:ec:46:da:6c:51:37:61:a3:45:3a:2f:a3:b2:f2:32:e9:dd:
2a:05:6c:b7:80:28:56:84:1f:26:ba:fc:79:4f:d3:4e:2b:64:
0c:20:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 17:09:41 2026 by rpki-client