
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier: oiU9HhE3D3wnLxxIsfL1Mx3H4RU1QCcTkVDu30AE7rQ=
Subject key identifier: 98:14:C4:17:AA:D2:0B:45:6E:DB:8A:8F:20:01:F6:B3:24:F1:70:75
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial: 02B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number: 02B0
Signing time: Fri 21 Aug 2026 01:29:59 +0000
Manifest this update: Fri 21 Aug 2026 01:29:59 +0000
Manifest next update: Fri 28 Aug 2026 01:29:59 +0000
Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: SQXijfY6qWwlZuxdnbYbTDyUE76S27pFfgHKPrhcoDo=)
2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Validity
Not Before: Aug 21 01:29:59 2026 GMT
Not After : Aug 28 01:29:59 2026 GMT
Subject: CN=6a87aa17-3a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:10:e6:30:54:25:1c:c0:13:95:0d:62:10:
0b:cb:0c:e4:c9:69:c8:61:98:f1:5d:4c:d1:a7:84:
6e:a4:40:7a:f7:31:92:5f:03:b3:64:56:3a:14:95:
6e:25:4d:3c:65:56:27:a3:c6:62:25:3a:93:86:13:
7d:12:5c:36:90:f0:be:b2:49:68:73:26:f9:28:54:
04:f3:24:b1:84:f4:12:1e:2f:4c:ed:67:3b:cb:29:
8b:13:9c:03:27:63:5d:88:1f:a0:bc:0c:cc:9e:b6:
dc:be:0c:b7:a6:92:17:50:94:f7:f8:83:89:83:dc:
2f:3c:e1:07:7a:04:d1:2b:14:b7:6b:9d:8d:e0:da:
9b:c4:86:e0:2b:fd:4c:0d:2e:f5:b8:f6:0f:11:c6:
2c:6f:55:05:97:48:eb:01:fb:0f:cc:41:b5:df:ce:
d5:75:12:10:aa:4d:bb:49:ee:50:b7:36:84:23:48:
18:b3:08:4d:80:48:29:99:4f:0b:c9:39:2c:10:a1:
96:9c:55:b5:72:47:f5:58:e7:e3:fc:e3:a5:2f:15:
e0:02:dd:eb:47:8b:3e:d6:4b:e1:50:20:fe:c4:b9:
13:66:c7:d0:d1:5f:96:02:72:c1:a0:fb:dd:a0:90:
08:5d:e2:13:98:09:9a:8f:70:b1:9b:f6:22:c4:c1:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:C4:17:AA:D2:0B:45:6E:DB:8A:8F:20:01:F6:B3:24:F1:70:75
X509v3 Authority Key Identifier:
keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e3:7d:a6:bb:01:c3:ee:52:7d:0a:1b:c8:9f:42:cf:9f:da:
9b:4f:15:45:fb:f8:ad:27:f5:9b:65:18:8b:13:c0:e4:8d:1e:
60:44:d1:06:5f:c1:bf:d3:04:77:54:56:b4:40:d0:ff:a6:e0:
d2:d7:21:85:7b:61:dd:a4:16:a6:00:7c:b5:ce:83:b8:7c:14:
83:e8:ff:c7:d2:db:d1:ad:b0:e2:f1:57:35:0a:7d:41:e5:a4:
b5:43:9b:e3:84:ce:ec:6d:3a:af:64:c8:7b:82:97:0a:13:e4:
93:19:f7:ba:52:b0:81:e0:ef:23:bc:a4:19:ab:d8:1d:41:66:
11:fd:d5:fa:b5:da:17:e4:23:9a:7b:56:7f:08:e5:92:50:41:
ca:93:e1:21:a9:6b:06:2a:cb:24:d2:dd:c8:c7:f4:92:d4:43:
1c:8f:65:1e:66:4c:09:58:34:fa:31:1a:87:53:e7:83:23:ff:
76:11:b6:5d:98:63:29:dd:0e:94:63:2c:da:48:63:1f:54:ce:
91:0b:83:8b:b9:8c:1b:42:87:e5:d9:76:f8:04:bf:11:e9:83:
d4:d1:8b:76:95:ff:3b:f1:ac:e5:fc:3d:94:4d:4c:ed:f1:46:
d9:e7:46:c0:25:d8:7c:25:6b:27:35:9f:54:95:da:3e:c5:32:
d7:0f:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:30 2026 by rpki-client