
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
File: 4Y-ehXQ6vsrARiuP30On20pij_k.mft (raw, json)
Hash identifier: fguiRuq+itC+s2KPs+AOB6Uld4NHl0j2Fl5ieqKhi2Y=
Subject key identifier: C7:2C:20:66:09:53:C1:FA:45:B4:86:95:1F:C2:D4:FC:79:C5:03:5C
Authority key identifier: E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
Certificate issuer: /CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Certificate serial: 04E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
Manifest number: 0622
Signing time: Sat 10 Oct 2026 23:49:20 +0000
Manifest this update: Sat 10 Oct 2026 23:49:19 +0000
Manifest next update: Sat 17 Oct 2026 23:49:19 +0000
Files and hashes: 1: 4Y-ehXQ6vsrARiuP30On20pij_k.crl (hash: D7usM7hom//CNywd8G77ekZ/gq/RTb5OQYspPs4u1Y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl
rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1255 (0x4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D, serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Validity
Not Before: Oct 10 23:49:19 2026 GMT
Not After : Oct 17 23:49:19 2026 GMT
Subject: CN=6acacf00-8f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:a7:5d:83:1a:75:cf:c8:74:4b:1b:b8:0d:
02:aa:b8:b0:14:c0:2f:4b:73:06:1d:11:e1:cd:99:
30:9f:a9:23:b8:a9:15:a0:32:21:ea:6e:ac:99:2a:
52:3e:43:57:e5:1c:06:8b:75:08:18:d7:78:3b:39:
07:e0:61:6b:ad:9d:8e:f9:fc:a9:6e:8f:86:ab:fb:
85:e4:53:3f:23:86:d2:03:85:31:25:ba:77:81:c5:
54:b5:6b:55:c6:d0:1b:39:34:c1:67:67:3e:e9:f9:
92:72:d3:c0:17:57:ac:a6:cd:7c:7b:74:09:e5:1d:
42:00:a3:4a:51:65:71:61:73:d1:ed:5d:03:4f:fd:
ee:31:2d:fb:78:61:a3:7e:bf:06:c1:c8:4b:e8:56:
e4:e6:5c:4a:e8:6c:1a:48:3d:7f:5f:cf:68:61:9d:
c0:f4:2f:8e:ae:3a:fa:7b:42:ab:f0:74:ef:64:d2:
7c:ce:53:6e:ed:e4:76:79:58:ab:80:49:f4:da:58:
2d:85:58:a6:22:5b:02:ee:15:4b:70:86:77:41:3b:
51:11:5b:78:ce:0e:a5:61:d5:22:f7:4d:e9:1c:48:
f0:6b:d6:06:09:53:7f:c9:1d:e9:c2:84:2a:6c:4b:
6c:ee:db:77:07:2e:48:3f:a7:5d:4e:51:72:97:ee:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2C:20:66:09:53:C1:FA:45:B4:86:95:1F:C2:D4:FC:79:C5:03:5C
X509v3 Authority Key Identifier:
keyid:E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:eb:e7:13:42:85:d0:3f:b5:c8:22:1d:c0:13:eb:43:b8:e3:
30:b3:ed:a6:90:b5:63:5a:f3:5b:d1:f4:bf:1c:c7:07:2b:f9:
f6:9d:0c:0e:65:bd:e8:65:16:0e:84:64:75:4f:93:46:c5:e8:
6d:96:8a:d1:76:8a:4c:a3:ce:7d:e6:b2:51:8e:65:be:e5:9f:
c8:a9:06:e8:af:7e:c6:d2:ff:e6:7f:19:18:6f:93:a5:9d:6e:
24:76:31:9e:bb:2e:27:c2:cb:44:1c:13:f1:8f:5d:fd:b3:ef:
03:d1:ee:42:0c:61:41:1c:c4:02:03:31:82:40:f3:71:f8:76:
d4:65:89:69:66:36:72:2c:d5:25:4b:b9:b0:74:38:eb:d7:58:
64:71:b4:8a:89:91:34:d4:75:f0:fd:91:01:2c:63:a5:15:1e:
39:00:30:87:b2:2b:39:6b:b5:4d:0f:eb:c1:14:fc:30:15:3f:
18:97:d1:74:cb:6e:3c:19:fe:01:26:68:a0:a9:ee:a3:c2:29:
d4:e6:8a:56:17:a8:4b:66:89:0a:e3:6b:37:ce:08:22:27:be:
87:87:9d:d6:c1:5e:7a:22:cc:0e:12:c7:95:56:e8:d2:3f:0d:
68:d7:00:a1:6a:f6:79:d7:e1:fc:f6:26:55:74:5c:4b:5f:e3:
28:fe:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:03:49 2026 by rpki-client