
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier: XMj75kJU0X30RPP9r1qz4R9f67FeQnX/wF551zmWzvI=
Subject key identifier: 9A:ED:ED:66:AA:B7:D2:14:97:04:16:F6:76:C2:42:38:66:45:6C:A3
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial: 250B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number: 492F
Signing time: Tue 18 Aug 2026 15:50:51 +0000
Manifest this update: Tue 18 Aug 2026 15:50:50 +0000
Manifest next update: Tue 25 Aug 2026 15:50:50 +0000
Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: 2EVf9DwLkfkTI1WkDjzXc/d3dt2t0mKfGXvraE1feu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:50:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9483 (0x250b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Validity
Not Before: Aug 18 15:50:50 2026 GMT
Not After : Aug 25 15:50:50 2026 GMT
Subject: CN=6a847f5b-dd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:19:67:b2:bc:d9:09:95:ab:1c:db:ae:c6:da:
30:4d:81:c9:79:61:b4:9c:8a:50:5c:ab:54:a6:ac:
51:17:9d:57:49:d2:47:17:4b:33:b1:fd:08:92:01:
37:c4:8e:97:39:81:d7:54:b5:47:cf:ad:c0:63:41:
09:ad:b3:73:aa:d5:c7:14:3c:c5:09:28:63:b1:81:
f7:5f:fc:af:ca:5f:ce:73:a5:73:1b:7a:b0:0a:5f:
b3:53:f2:34:21:bf:b2:cf:0d:4f:51:63:03:b2:71:
ac:10:81:59:17:dd:91:86:2d:09:f9:b0:ac:cb:57:
6e:19:dc:79:b0:b7:04:80:1d:af:6a:f8:06:ce:6b:
d8:3c:8b:11:df:65:1a:07:ec:fe:d2:e2:6b:35:6d:
f8:8e:13:07:19:fb:09:3e:4c:0c:af:6f:da:15:4d:
59:5d:40:35:7e:6e:97:32:79:87:c6:ac:78:ad:a4:
08:b3:11:db:57:78:97:dd:f6:fc:f7:c7:7b:86:c5:
00:43:28:65:a5:b8:f6:2b:0e:9d:62:de:f5:cb:b0:
be:25:2c:cc:0c:20:e3:05:01:f2:38:c6:e2:a8:27:
81:cf:23:df:d4:47:ff:d0:cc:36:15:27:ba:99:be:
48:56:19:e0:d3:b6:21:d7:cb:f9:f0:52:44:0b:9a:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:ED:ED:66:AA:B7:D2:14:97:04:16:F6:76:C2:42:38:66:45:6C:A3
X509v3 Authority Key Identifier:
keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9d:fe:99:80:10:5d:3c:a9:eb:00:05:46:62:27:24:83:a0:
92:cb:ad:96:a2:c2:48:56:ff:e6:59:e9:5b:5b:ea:c8:9b:44:
15:27:dd:24:e8:4b:f9:0a:7f:d5:be:d7:55:53:83:af:13:a9:
53:9c:87:e2:a8:02:f2:1d:32:b0:7e:c6:6e:fa:60:9c:8e:b9:
a7:b5:40:3f:ad:cc:c8:69:14:2d:6f:12:06:e0:fb:87:75:15:
27:d0:4a:1a:13:b6:52:46:db:8b:bd:1e:e6:2f:3f:ee:7b:f0:
cf:87:2f:cc:12:02:b0:cd:0e:83:fd:a1:8b:35:94:a4:f7:ff:
84:68:9f:91:01:9f:66:4d:83:fc:65:21:ad:99:35:fa:6d:d0:
e9:45:90:38:81:e4:61:e2:92:bf:d2:fb:fa:b4:61:5c:fa:d9:
9a:16:16:a5:db:03:80:3c:5b:a4:e7:73:0b:38:91:ec:6e:e9:
35:2f:e2:f6:fc:b3:df:5e:89:6a:1b:d0:a3:e9:e5:e3:7b:5f:
b9:65:ff:ce:1c:5c:3f:2a:31:2d:09:63:89:89:f5:26:bf:24:
5b:75:84:40:15:3b:0a:4b:8c:42:bf:c1:76:5f:7a:99:d6:34:
9b:94:9c:9a:89:b4:e9:e9:54:01:14:1a:87:60:04:a7:3a:c8:
99:13:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:27 2026 by rpki-client