
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json)
Hash identifier: p6mUdMdzOEhnxFhb3y6+wfb7mr3cloSKU9UH5gnxvww=
Subject key identifier: 00:DE:1F:3F:B1:06:C1:C5:56:B2:1E:C5:24:DC:3D:C9:42:DC:DA:B3
Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Certificate serial: 0DBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
Manifest number: 0DAF
Signing time: Mon 22 Jun 2026 17:54:41 +0000
Manifest this update: Mon 22 Jun 2026 17:54:40 +0000
Manifest next update: Mon 29 Jun 2026 17:54:40 +0000
Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: sAaqJQGo7wg+8JY2g282RAhIOqqLLr6x3+8XxYyloYE=)
2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 4+Ac/qmp1PMvnSJouQnIg3+M0ch95gCYSQtb1scOlcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3518 (0xdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Validity
Not Before: Jun 22 17:54:40 2026 GMT
Not After : Jun 29 17:54:40 2026 GMT
Subject: CN=6a3976e1-086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:ea:20:72:04:93:95:7e:6d:9b:1e:aa:47:
83:d3:05:b1:61:60:70:52:3e:fd:0d:b2:ab:3a:e3:
0d:18:bd:48:f1:db:bf:8e:e8:d2:8c:47:bd:ab:90:
1d:b1:55:17:43:64:9c:3c:af:4b:72:02:ed:14:02:
4c:6e:13:83:2f:d6:bc:a4:2e:b1:f7:f7:72:3e:4f:
55:9e:6f:71:07:68:3c:77:b1:58:3a:a1:8c:f4:27:
32:5c:67:86:b6:2c:07:4e:49:d1:f5:d8:58:31:78:
5f:91:24:91:da:3f:1d:ed:4e:b3:1d:6a:0e:17:69:
be:75:62:86:b2:92:56:da:97:95:7a:13:98:b5:b2:
7f:36:3c:e3:71:2b:23:94:ea:a4:1e:39:10:89:eb:
62:8f:ae:06:7e:7c:3c:f3:67:8b:e2:bb:68:e0:85:
45:9d:36:b6:25:53:58:6c:56:cc:1d:18:e4:df:72:
9e:e3:8b:ff:0f:47:5b:9b:95:e0:0d:8e:2f:5b:96:
0a:79:eb:06:3c:6e:26:a4:d7:05:1d:35:08:a1:12:
be:5b:19:72:ed:22:44:01:89:ff:5e:21:71:7e:9f:
ad:17:1a:04:84:2e:6e:5e:c0:42:2f:69:47:73:f8:
4f:22:78:4f:14:04:27:1c:5e:8f:65:20:23:91:aa:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:1F:3F:B1:06:C1:C5:56:B2:1E:C5:24:DC:3D:C9:42:DC:DA:B3
X509v3 Authority Key Identifier:
keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:f3:95:4a:b1:92:c2:fd:00:34:9b:60:45:4d:fe:27:d9:ad:
d0:2f:fa:c5:45:00:39:39:d4:32:00:93:1b:ba:14:cb:e5:f6:
1f:83:4c:c3:08:49:70:4b:eb:43:29:69:b0:81:de:65:b3:eb:
7b:ff:ca:5a:a4:8d:b2:9c:20:1b:8d:31:86:a9:9d:f0:0f:fe:
d4:2b:5f:17:8d:ca:02:f5:78:f7:ab:b8:26:45:91:b5:19:f2:
18:84:3a:5d:52:6a:31:9f:dd:e1:83:20:e9:2a:fd:39:7f:8c:
e3:2a:cf:68:b7:c5:4c:74:ae:f1:99:0b:83:d7:c2:2e:d7:9a:
ee:d8:c4:0b:f5:73:da:33:40:4d:84:3c:ae:b8:22:65:30:00:
e4:b6:21:84:89:e9:4a:f0:dc:bc:d8:31:ed:18:a3:af:11:f8:
0a:49:da:3c:db:27:dc:5d:e1:37:a1:49:92:97:31:41:01:4c:
1e:e6:48:53:b9:ad:f2:b3:04:d7:dd:9b:a9:97:06:ed:8d:a8:
0d:aa:eb:3a:a1:9f:5d:b2:79:26:d4:74:43:09:26:83:56:fc:
43:52:09:f3:e4:f0:05:12:3b:3b:94:ce:26:36:cc:4e:cd:af:
61:41:c5:f8:2a:a8:99:94:34:12:65:ac:93:58:6f:f5:f6:0a:
eb:fb:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:12 2026 by rpki-client