
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
File: 4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json)
Hash identifier: QX4w2PQnZi7vGpF/I9WejabHAc5Wo80fI13R+Yg455o=
Subject key identifier: 6B:DC:BA:98:A6:68:E3:31:E4:1B:C1:99:2B:D1:A5:85:34:10:F4:8B
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial: 08B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
Manifest number: 089D
Signing time: Fri 04 Sep 2026 20:33:14 +0000
Manifest this update: Fri 04 Sep 2026 20:33:14 +0000
Manifest next update: Fri 11 Sep 2026 20:33:14 +0000
Files and hashes: 1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: zBt55AYw4Dv3QGLmzsCN45XKY7Afj8JoLWwdo8EMKVw=)
2: 9F8DA582EA0F11F0944A7CD7716F56BC.roa (hash: 3YwwSJL/lczWD+gAqMpWstD/Bdbs+l7Ejs50rGgef0E=)
3: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: VVuT0oGthuu1h4dpEkw5dwzZuqKsuK62xGDpmmEICJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2231 (0x8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Validity
Not Before: Sep 4 20:33:14 2026 GMT
Not After : Sep 11 20:33:14 2026 GMT
Subject: CN=6a9b2b0a-dab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:27:d0:6c:7d:9a:9e:25:6a:c6:8e:46:52:03:
b1:13:84:6d:aa:bc:7b:24:49:5f:2d:e6:4a:fb:cd:
dd:c8:c2:90:6c:4d:e8:f1:bd:86:8f:03:11:44:f4:
e3:93:c5:5a:c4:4e:4d:46:6a:62:cf:b1:59:a3:8f:
2d:f9:c1:25:e8:de:a4:0d:34:c3:39:03:88:23:5a:
8a:15:aa:ee:1b:10:85:02:bb:8b:27:b4:82:50:92:
1a:16:ca:84:e0:2c:9d:36:c1:75:9f:68:81:9f:36:
f0:ab:82:0b:25:e6:f0:b2:85:ea:ac:ad:a1:ec:79:
e6:c7:4f:32:df:4c:a7:86:34:64:0e:5f:2a:8e:e7:
71:12:94:d4:3a:7f:ed:3d:c5:73:14:d3:47:73:85:
ea:a1:2b:89:ab:0a:4f:90:d0:49:50:eb:18:68:23:
aa:fd:5a:60:3e:98:db:46:07:e4:d9:53:48:2f:78:
f5:30:14:cd:fe:26:9e:c9:23:c5:45:c0:2d:fc:4a:
43:a4:61:9f:bb:0b:4c:42:dc:d4:6c:4b:78:00:22:
34:98:0c:1b:42:ee:ae:08:cd:a7:fe:28:cf:7a:b4:
7f:e2:fb:b2:05:2c:09:b0:6b:ee:a7:a2:10:5f:a2:
e8:a2:b1:fd:d3:bc:95:36:d2:85:9f:b5:74:f3:14:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:BA:98:A6:68:E3:31:E4:1B:C1:99:2B:D1:A5:85:34:10:F4:8B
X509v3 Authority Key Identifier:
keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:45:c3:70:52:13:12:30:31:21:40:e1:0b:31:cd:59:4d:4b:
30:0a:92:fc:35:d0:15:23:ba:02:d2:65:37:af:b1:8c:7d:dc:
13:95:8d:26:e0:86:06:ed:d0:0c:b1:84:ef:04:0e:ec:f5:32:
06:42:71:00:e3:e5:91:11:85:13:68:a1:fc:93:3b:0f:db:25:
6b:7d:3e:e3:de:0b:52:d5:bf:38:3f:3c:de:37:82:54:9d:15:
72:82:00:e4:0d:ae:a8:ec:4c:96:e2:2b:50:36:0c:16:e1:86:
fc:24:1d:98:a1:fd:f0:39:19:a7:2e:42:6d:bf:40:ce:9f:46:
14:6b:96:65:48:1a:bc:5e:96:f3:74:f1:3b:91:30:6b:4d:4a:
56:c2:2d:fc:d0:3a:24:ce:9e:cb:99:73:2d:6c:90:76:5d:30:
a2:f4:98:26:6d:71:08:6c:c5:67:2f:19:4a:d8:bd:68:6c:d3:
3d:c8:58:3f:91:f6:a9:ad:5b:1d:ca:9e:bc:80:2d:c1:e1:11:
db:8e:4d:ef:06:e8:f5:b1:34:a9:e6:89:34:ab:44:7b:d7:12:
99:a3:98:fb:9c:76:e9:66:2c:04:14:5d:92:fe:89:50:ff:f2:
17:ac:d2:56:8f:e0:14:db:bc:be:ed:a9:99:00:3a:26:13:48:
9a:10:ee:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:46:57 2026 by rpki-client