
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
File: 4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft (raw, json)
Hash identifier: uRfDMrG8JfhMVvMBNJj8R3PW+DIH83lVpHNc/656KqQ=
Subject key identifier: DD:36:F1:AF:7F:B6:7E:AC:69:51:81:2D:9B:F4:9E:D1:8F:EF:F7:F4
Authority key identifier: E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14
Certificate issuer: /CN=A91C4060/serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
Certificate serial: 07E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
Manifest number: 07D4
Signing time: Wed 20 May 2026 21:23:35 +0000
Manifest this update: Wed 20 May 2026 21:23:34 +0000
Manifest next update: Wed 27 May 2026 21:23:34 +0000
Files and hashes: 1: 4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl (hash: y8tdh8OpMuiVBldM2uVEhVVgC5MniSaYYO5OuUVgnFk=)
2: 71C26BD039D211EB84B9FD6BC4F9AE02.roa (hash: m1LwxR5yBiEhYayYDDx+VeEVNC28wm7cqjOPRTGQW8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl
rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2018 (0x7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4060, serialNumber=E21F24E0C54DBB93F667814402D66AD408071114
Validity
Not Before: May 20 21:23:34 2026 GMT
Not After : May 27 21:23:34 2026 GMT
Subject: CN=6a0e2657-03b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:d8:1c:eb:a1:31:24:33:e9:d4:16:64:98:
d7:24:3e:e8:91:d7:53:45:f9:f5:e7:11:87:28:6b:
77:5b:b8:f0:ca:a7:03:72:6b:b4:13:e2:95:ef:8b:
5c:5c:42:0e:4b:c2:d0:4c:f4:7e:6f:fd:25:c2:cf:
1c:8b:03:3a:c4:46:5e:4f:b3:c1:85:35:e2:44:6d:
0c:d9:88:79:6b:9e:23:9e:e9:f7:4c:10:62:36:85:
50:0d:98:9d:25:8a:7b:90:cc:95:b7:57:2a:05:56:
f2:52:27:a5:49:90:0e:25:a6:d2:75:18:23:e7:7c:
37:e7:05:c1:37:80:69:7b:b4:d8:e4:34:0f:97:8b:
58:9d:4a:73:1e:25:b0:58:66:c3:83:a8:6c:64:bf:
16:db:49:1e:a2:80:91:77:6d:f8:a8:71:91:41:de:
c0:85:4f:5a:a3:da:d0:df:33:1b:c4:f2:78:ab:f9:
bb:41:dd:48:73:88:49:c3:ed:4d:93:84:ea:23:51:
f8:ff:21:56:cd:59:33:14:d9:52:22:5f:59:9a:aa:
0c:b8:54:6d:5a:06:c8:8f:ef:b8:8f:08:c7:64:44:
7d:8e:db:a0:92:a3:fb:86:86:26:2d:67:79:55:ae:
ca:5b:eb:d9:af:b7:8d:84:b5:8d:a5:6f:05:01:4a:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:36:F1:AF:7F:B6:7E:AC:69:51:81:2D:9B:F4:9E:D1:8F:EF:F7:F4
X509v3 Authority Key Identifier:
keyid:E2:1F:24:E0:C5:4D:BB:93:F6:67:81:44:02:D6:6A:D4:08:07:11:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4060/569389FE39D011EB8F471569C4F9AE02/4h8k4MVNu5P2Z4FEAtZq1AgHERQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:fe:78:69:cc:95:b9:a4:c3:27:84:aa:10:1f:3b:31:41:2f:
db:61:f9:cd:26:af:d8:62:1c:2f:bf:64:22:e4:c1:d8:de:8f:
26:07:16:d8:1a:a8:e2:fa:c2:69:52:7e:96:84:f1:a6:13:6d:
f6:74:38:cc:53:09:3b:19:11:fe:ef:da:d9:05:e9:af:82:0b:
6c:ec:83:27:25:54:fa:54:ef:01:5f:70:10:c4:7f:18:b5:0e:
5e:f3:89:16:51:9a:7c:72:13:6a:37:be:d0:79:be:02:06:2f:
d1:5f:5d:cf:7c:79:7c:ce:e8:ca:73:a8:17:8a:e6:1d:92:be:
60:de:2d:09:8e:aa:3f:b6:45:15:f3:a4:ab:ef:3a:d4:7f:89:
be:66:90:a9:62:7b:5e:af:a3:cf:ee:4d:b4:06:09:c7:25:c4:
a7:27:7e:f2:98:5d:e4:06:3e:89:43:d7:ab:f0:00:6e:7a:86:
68:b9:0f:a1:27:be:59:7c:c9:3f:af:65:db:b4:20:a1:f7:99:
ab:c8:33:88:ae:e2:e1:57:25:75:b9:0e:34:fa:52:b0:46:29:
42:33:0e:da:1f:65:9a:b1:dc:fd:0a:28:cf:19:0c:dd:0a:e5:
3e:7d:91:52:bd:83:37:6f:18:0e:44:2d:4d:d2:6a:0d:28:2c:
ce:49:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:16 2026 by rpki-client