
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
File: crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json)
Hash identifier: MDxegTZZUJhwpWzqAaBPEX5fj5VenuiRbY87ihLrcAU=
Subject key identifier: AC:FE:7C:E6:D0:4F:DB:79:FC:98:55:C5:4B:59:97:74:98:FE:19:41
Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
Certificate issuer: /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
Manifest number: 4A
Signing time: Tue 21 Jul 2026 10:14:57 +0000
Manifest this update: Tue 21 Jul 2026 10:14:56 +0000
Manifest next update: Tue 28 Jul 2026 10:14:56 +0000
Files and hashes: 1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: 03cHgFhjnWj7NW+Dz2tGgE54PGIoHtWdubhtX72PNqg=)
2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Validity
Not Before: Jul 21 10:14:56 2026 GMT
Not After : Jul 28 10:14:56 2026 GMT
Subject: CN=6a5f46a1-5b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:38:ea:dd:25:09:9c:0f:54:cd:73:79:e5:
e8:d5:38:c1:74:c6:58:ab:18:a0:51:ac:9d:f1:37:
fc:3b:53:f6:e5:ec:27:4f:b8:f3:1b:da:17:c5:7b:
2a:3d:45:54:34:4c:8b:77:fb:5d:42:d5:25:61:43:
5d:1c:32:63:e2:ca:5e:42:f2:62:0b:3b:f2:74:a9:
7b:dd:6b:c4:d9:94:55:37:25:24:fb:00:2b:64:6b:
20:b6:08:fc:f2:48:4f:31:52:0c:be:7d:7a:44:d8:
ae:53:73:87:da:bf:9a:aa:4c:b8:d3:ec:73:a0:39:
cb:1b:eb:8e:a2:07:db:40:5e:7c:f9:f7:80:b4:47:
15:db:fa:21:fc:44:5a:4a:13:33:0a:e7:88:5e:9b:
70:ce:91:34:f1:82:5a:e4:5c:54:3e:9c:41:05:0e:
ac:47:1a:d4:8b:9b:36:d9:e4:a8:3f:9c:d9:3a:58:
c1:f5:e7:a5:ab:ba:68:f2:7a:c0:f8:4b:fd:1d:d7:
6a:a9:f5:0a:60:b0:be:36:d9:e0:d1:78:cf:44:a7:
5b:f6:4a:30:c1:a9:68:27:eb:64:be:b3:07:9c:0f:
86:f7:a1:30:db:46:86:85:12:86:11:f7:fe:d4:ea:
d3:d6:41:dc:5a:d4:47:a3:9c:d8:db:e4:e2:2e:34:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FE:7C:E6:D0:4F:DB:79:FC:98:55:C5:4B:59:97:74:98:FE:19:41
X509v3 Authority Key Identifier:
keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ac:c1:2e:9d:a0:59:b0:9a:6c:02:94:eb:35:36:41:22:74:
8f:95:3f:6d:83:83:c1:00:e0:ae:e0:c2:f0:f2:1c:e4:1b:ae:
f7:f9:da:59:ad:d7:f9:3c:89:ed:c3:98:eb:d0:98:3f:54:09:
5f:cc:1b:da:1d:66:4a:9d:60:49:70:24:07:e8:70:ef:ff:ba:
07:f7:bc:1c:c1:21:e6:95:62:e1:aa:44:4b:b8:c5:47:3e:f7:
45:4b:66:ff:eb:4e:25:1e:bc:67:4b:6e:dd:45:e5:9d:66:14:
32:d3:c6:f0:03:45:67:6c:2b:07:66:24:e5:78:c6:46:aa:be:
81:69:96:b9:48:6c:59:94:13:87:a0:84:2d:f4:a9:f5:89:e4:
0e:6a:72:a1:99:72:32:6c:9d:b3:cf:54:fd:08:43:14:09:43:
78:96:2d:29:29:fe:81:b8:0f:bd:ce:de:d5:75:2e:e2:1f:38:
62:81:5e:d5:13:ba:74:6e:d1:ee:5a:38:02:8d:4f:15:c6:c7:
db:e3:4e:54:9f:db:19:61:cd:f0:b4:f6:11:0d:9c:80:fa:70:
fa:9c:d9:2a:8a:f7:d5:57:8d:20:ef:ca:1d:11:b0:c0:6e:85:
98:d3:51:ac:d5:a4:18:c4:36:36:e5:94:3b:2f:7b:95:5f:da:
80:41:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:56:07 2026 by rpki-client