
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
File: 4Y-ehXQ6vsrARiuP30On20pij_k.mft (raw, json)
Hash identifier: 7S/IV2ypaH8U3K0GIjpSIg7JZLyBwCeImSLhgEcrKu4=
Subject key identifier: 38:93:85:70:3F:CB:4C:0B:8B:59:2F:2B:B5:93:67:DD:16:8C:74:98
Authority key identifier: E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
Certificate issuer: /CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Certificate serial: 04CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
Manifest number: 05EC
Signing time: Wed 19 Aug 2026 00:12:48 +0000
Manifest this update: Wed 19 Aug 2026 00:12:47 +0000
Manifest next update: Wed 26 Aug 2026 00:12:47 +0000
Files and hashes: 1: 4Y-ehXQ6vsrARiuP30On20pij_k.crl (hash: 1LP0fPWPe4yig3ZqAGltbV7YnLfmhEWexuXfG51lOjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl
rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D, serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Validity
Not Before: Aug 19 00:12:47 2026 GMT
Not After : Aug 26 00:12:47 2026 GMT
Subject: CN=6a84f4ff-ac6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:58:d6:1e:b5:40:10:7c:a9:e5:1d:5a:ce:
5f:d7:79:07:7f:a9:ec:87:29:a1:30:5a:a7:4e:55:
c1:3e:c0:ec:a4:12:60:f7:68:90:99:99:bc:4e:96:
96:cb:94:2f:d0:89:f1:9b:dc:9e:b7:b5:52:ed:b9:
f7:2d:08:2e:93:bf:b9:39:16:a7:43:55:bd:c3:c4:
9b:40:58:0a:e9:27:59:38:67:90:5b:0e:f0:dc:f4:
c6:26:c2:4a:ae:63:72:eb:3f:d7:fd:e8:b2:41:e7:
12:e7:31:ed:0e:60:e9:39:dd:ac:98:a6:8c:12:3d:
02:9e:e7:33:e9:6d:69:fd:37:21:37:b1:8f:e6:a4:
00:82:3f:94:3f:35:81:ca:95:98:1b:37:32:19:17:
98:7f:8b:64:c8:09:8a:5a:31:92:3b:b7:cc:98:3a:
cc:1b:21:ad:07:00:17:84:ff:9d:2b:9f:9e:21:f7:
5e:79:8c:42:0d:15:0a:a3:e4:23:d8:07:d8:27:25:
6d:ae:ba:de:8f:90:15:bc:50:08:27:4a:7d:00:a5:
17:29:8f:52:58:27:71:15:a7:a2:5c:a9:40:72:6c:
13:15:b5:b4:c6:9a:e9:cc:ed:26:e4:fd:8c:3c:68:
77:16:b2:c5:ce:6c:11:2e:86:56:7b:ca:17:5b:15:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:93:85:70:3F:CB:4C:0B:8B:59:2F:2B:B5:93:67:DD:16:8C:74:98
X509v3 Authority Key Identifier:
keyid:E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:15:dc:ec:f6:82:ac:85:28:18:36:1d:cb:48:5d:22:fe:cf:
3c:70:53:fa:27:40:eb:4d:c9:2f:ec:73:4b:c0:80:b7:26:9f:
1f:f9:b9:e4:d9:22:73:20:92:09:d0:e8:93:07:bb:f7:c1:6a:
57:6a:5e:ea:d9:65:86:d9:c5:ef:d1:e2:92:4e:58:0e:69:b0:
92:d1:eb:9f:ff:bd:ab:86:a2:b1:6f:b3:fc:f9:90:fa:88:66:
53:4f:2b:f5:5b:3b:a3:ad:23:72:b6:8f:16:89:00:7c:30:91:
33:aa:c6:71:dd:97:f3:38:fe:c2:47:87:3e:a1:8e:db:87:df:
db:fb:5f:05:70:b8:4a:6d:ec:b6:35:78:2f:30:31:fd:5d:83:
aa:c6:25:ad:4e:c8:90:64:00:18:15:6d:e4:f5:2b:42:40:a2:
db:ae:2e:65:ad:90:60:cf:a5:06:19:20:6b:18:24:2c:1b:2a:
72:cc:2f:6b:55:29:99:6a:06:37:12:1c:4f:c1:ff:0f:52:8e:
f6:df:9a:8a:cf:c5:e0:ca:a3:f4:af:e3:99:65:12:99:1a:68:
0b:ca:ab:5a:88:1f:c6:ea:13:56:52:54:49:a9:eb:c4:f5:73:
04:6e:cb:97:fd:93:31:ce:67:1e:3a:d1:5d:a1:f1:fd:fe:f7:
00:5b:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:02 2026 by rpki-client