
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier: MzjbskbvVVUpkPP2t2RaIRw+HPg3hAXH2NSm3VX/1tE=
Subject key identifier: D3:D4:08:71:B3:51:E3:1F:04:D1:4F:52:15:00:03:A9:72:14:16:FB
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number: 0240
Signing time: Wed 19 Aug 2026 03:05:56 +0000
Manifest this update: Wed 19 Aug 2026 03:05:55 +0000
Manifest next update: Wed 26 Aug 2026 03:05:55 +0000
Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: pyM0hcyfQDPyCJvz28uSExlg4NCUzhM+CN9gBw2rVow=)
2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: oIFWU2U3FpoDzzLzWPnxsOr677OIj+OUoCa9oBm5yVg=)
3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: pEZ4PzrQv6b6ndP0HpfE6ghr1BZrsxRE21MGz3Ej87E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Validity
Not Before: Aug 19 03:05:55 2026 GMT
Not After : Aug 26 03:05:55 2026 GMT
Subject: CN=6a851d93-2a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:71:80:59:90:8c:a9:71:88:0d:da:f3:1b:
a0:46:b7:19:9f:60:39:d7:71:d2:a9:cb:01:0e:e8:
12:d7:4a:4f:8b:12:7b:65:a1:e9:d5:83:41:a5:97:
83:5e:6c:10:f3:46:c7:cd:73:ff:d5:c6:db:01:0c:
c4:bf:6f:0d:84:5a:e5:15:46:bf:ea:0a:82:a2:9d:
9f:65:80:06:2a:b8:09:73:d5:a9:95:e8:a7:ea:66:
b9:74:ea:61:3f:6c:bc:46:a2:f4:0b:40:dc:ce:b4:
b1:c9:ce:3b:21:4d:f6:29:05:a1:00:6c:a0:20:33:
80:f8:77:9e:52:25:1f:a6:33:4f:f1:2f:8e:60:42:
8e:49:84:71:7e:fb:3f:c8:11:08:18:15:3b:e9:74:
d7:40:0c:20:7a:66:4f:f7:4f:26:82:98:bd:32:8a:
e1:c4:2e:d1:ac:30:55:6e:b3:1f:0a:ab:2a:bb:0c:
93:98:74:ab:06:c3:df:1b:78:fd:75:0f:23:52:fd:
e6:b4:84:83:47:43:c5:d7:71:94:e2:e1:b8:1b:d8:
91:87:66:b5:ba:f2:ed:0f:43:c1:8d:07:3f:e4:71:
c7:a5:2c:af:bf:08:97:85:13:de:f6:97:c3:4e:b1:
ac:ff:fb:a8:6a:ad:ad:61:ce:c5:8e:4d:9e:ad:a7:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D4:08:71:B3:51:E3:1F:04:D1:4F:52:15:00:03:A9:72:14:16:FB
X509v3 Authority Key Identifier:
keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:cd:9c:f1:8a:f3:32:44:ac:19:72:9e:ba:0a:66:ec:bd:f8:
f7:df:d7:d8:12:4e:5a:47:2d:6f:be:08:ae:25:b8:43:c4:a4:
de:56:dd:38:81:17:7e:95:3c:f7:2a:90:79:3b:14:91:c2:a5:
91:4d:76:2a:be:52:1d:64:17:03:88:7f:58:95:9f:d0:b7:2e:
de:31:d5:b5:39:c8:38:ac:15:f9:69:ba:b3:4a:5c:1c:d6:d9:
fe:fa:b5:df:04:a7:9c:8a:02:44:b6:91:24:75:6e:5e:9b:ef:
e8:88:e2:56:22:90:94:b8:1d:11:d9:be:6d:9f:00:f4:e1:19:
39:15:c4:ac:71:27:50:85:73:49:83:8b:54:5e:8e:5d:4e:d8:
47:69:56:37:21:28:23:22:29:43:b8:52:f3:58:73:f5:a3:f1:
f2:50:05:fd:e1:15:73:71:7f:7d:c8:31:6b:78:05:99:76:f4:
b5:01:3b:d7:a1:33:66:ea:7c:f4:7c:f5:ed:b0:04:ba:d3:7a:
e0:ba:3f:a9:aa:ca:d3:ba:c3:a5:aa:05:91:11:07:e9:b1:c8:
4e:ec:d7:f4:14:a6:6a:f7:c5:ae:ec:f8:d8:8d:62:ff:f4:b9:
85:99:04:75:78:8d:7f:a7:ee:65:7b:46:41:1f:1b:1e:fe:55:
62:92:a3:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy
QUJEQjQ0RTMwHhcNMjYwODE5MDMwNTU1WhcNMjYwODI2MDMwNTU1WjAYMRYwFAYD
VQQDEw02YTg1MWQ5My0yYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv9RxgFmQjKlxiA3a8xugRrcZn2A513HSqcsBDugS10pPixJ7ZaHp1YNBpZeD
XmwQ80bHzXP/1cbbAQzEv28NhFrlFUa/6gqCop2fZYAGKrgJc9Wplein6ma5dOph
P2y8RqL0C0DczrSxyc47IU32KQWhAGygIDOA+HeeUiUfpjNP8S+OYEKOSYRxfvs/
yBEIGBU76XTXQAwgemZP908mgpi9MorhxC7RrDBVbrMfCqsquwyTmHSrBsPfG3j9
dQ8jUv3mtISDR0PF13GU4uG4G9iRh2a1uvLtD0PBjQc/5HHHpSyvvwiXhRPe9pfD
TrGs//uoaq2tYc7Fjk2eracpkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPUCHGz
UeMfBNFPUhUAA6lyFBb7MB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz
NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz
TWFNN1hyZnFfR3NxdmJST00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA82c8YrzMkSsGXKeugpm7L3499/X2BJOWkctb74IriW4Q8Sk3lbdOIEXfpU8
9yqQeTsUkcKlkU12Kr5SHWQXA4h/WJWf0Lcu3jHVtTnIOKwV+Wm6s0pcHNbZ/vq1
3wSnnIoCRLaRJHVuXpvv6IjiViKQlLgdEdm+bZ8A9OEZORXErHEnUIVzSYOLVF6O
XU7YR2lWNyEoIyIpQ7hS81hz9aPx8lAF/eEVc3F/fcgxa3gFmXb0tQE716EzZup8
9Hz17bAEutN64Lo/qarK07rDpaoFkREH6bHITuzX9BSmavfFruz42I1i//S5hZkE
dXiNf6fuZXtGQR8bHv5VYpKj0w==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:17:17 2026 by rpki-client