
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
File: R4pL3QESHRxrMz7MPiW6Gohxmao.mft (raw, json)
Hash identifier: lpsXupP2RuElXlvLAabsbkiPOIvdUexzVuoh/mPCPgc=
Subject key identifier: 19:2B:9A:C1:F9:7A:30:61:04:CE:0C:DE:E2:30:9A:CA:B6:E2:2C:6C
Authority key identifier: 47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
Certificate issuer: /CN=A91DF076/serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Certificate serial: 0EC8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
Manifest number: 0EBC
Signing time: Tue 08 Sep 2026 17:46:22 +0000
Manifest this update: Tue 08 Sep 2026 17:46:21 +0000
Manifest next update: Tue 15 Sep 2026 17:46:21 +0000
Files and hashes: 1: R4pL3QESHRxrMz7MPiW6Gohxmao.crl (hash: f+ZSn05YpGnKhduVl9ShUHt1OuzXXIdeGI2W6akgQoQ=)
2: 7043D43679BB11ECB6D72266C4F9AE02.roa (hash: 4apSZMW7Vfs833gnnmQpU2EzXDtEcmjJdHV9lEBaG8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 17:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3784 (0xec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF076, serialNumber=478A4BDD01121D1C6B333ECC3E25BA1A887199AA
Validity
Not Before: Sep 8 17:46:21 2026 GMT
Not After : Sep 15 17:46:21 2026 GMT
Subject: CN=6aa049ee-e00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:49:dd:64:94:93:91:10:c3:d9:05:0a:cf:
b8:8f:1f:94:00:b4:66:3e:52:79:73:8a:6c:6c:8b:
dd:22:a2:3f:8f:95:de:ee:34:b6:ad:7a:a7:d4:69:
28:0b:9d:be:52:a0:57:5d:b6:37:3e:a9:5f:f9:9b:
5e:6a:9d:1f:c0:9c:69:f8:9c:5a:ac:22:8c:fb:e9:
e7:4e:0b:26:b3:c4:a3:61:45:1a:7a:62:02:5c:3e:
2e:40:48:d6:b6:13:4f:2a:12:93:b7:3d:2f:3a:04:
a7:c7:b6:ab:57:d7:a5:b5:c2:af:30:95:c9:6a:84:
e1:40:28:a6:21:8e:64:04:53:1f:9a:1c:05:c8:0a:
c5:70:b9:42:f1:fc:0c:22:ef:00:a8:ae:d6:f5:68:
81:20:be:57:18:e0:72:32:f3:3f:dc:53:50:da:e5:
43:ca:3a:38:dc:81:70:1e:54:e2:75:27:56:af:27:
c6:a3:d0:fe:7d:bb:86:b5:8a:5a:d4:7d:e1:05:03:
62:06:dd:e5:57:c2:f2:d0:04:e4:3b:ff:33:42:3e:
0a:b6:06:b4:64:71:22:6f:46:3b:7c:22:13:89:d9:
d8:fa:e0:c0:87:83:8c:9a:1f:96:84:78:2d:db:35:
73:5d:d2:15:ce:f2:94:4c:7d:23:dd:3d:26:0f:b8:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2B:9A:C1:F9:7A:30:61:04:CE:0C:DE:E2:30:9A:CA:B6:E2:2C:6C
X509v3 Authority Key Identifier:
keyid:47:8A:4B:DD:01:12:1D:1C:6B:33:3E:CC:3E:25:BA:1A:88:71:99:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4pL3QESHRxrMz7MPiW6Gohxmao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF076/A408F582B90411E9B1D50B41C4F9AE02/R4pL3QESHRxrMz7MPiW6Gohxmao.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4f:e1:cb:42:63:85:9c:11:fc:95:59:d1:be:8f:5a:bd:82:
60:94:6d:69:0e:1e:65:20:4f:a7:64:21:81:c5:4f:1f:f5:fc:
5a:25:40:3a:16:0d:cd:28:43:a8:74:dc:37:41:41:0e:ff:ec:
cc:e2:12:11:7e:5b:0d:f8:04:19:10:81:6a:e5:f0:0d:91:4c:
39:b7:aa:dd:67:48:13:53:f7:27:e7:2e:bc:50:15:d6:70:0d:
74:e4:54:00:77:9e:94:64:ed:84:3b:e4:69:66:ab:94:4f:4b:
a9:78:2b:6e:96:65:66:28:6e:96:18:95:ca:10:1d:2f:c4:9a:
ff:a1:ee:eb:fc:fc:84:05:f2:33:c2:7c:e9:eb:3c:6f:ff:76:
f6:1a:40:38:ee:7d:45:82:58:98:28:94:a7:31:69:90:2d:10:
b0:04:0e:34:f8:e2:bf:99:bd:bc:80:79:6f:b6:6f:e6:fa:f6:
0c:8b:ce:21:66:e7:fc:4c:74:5d:7c:53:e0:18:c0:4f:37:fd:
45:e2:0a:74:29:7e:38:91:f8:47:69:6d:f9:06:de:9e:3f:cd:
8c:ce:5a:26:b4:14:8e:4d:69:ae:c0:d7:97:f6:d0:47:ff:af:
45:fb:d6:52:d9:ea:2a:6b:7c:2e:21:9a:64:9a:66:e9:0d:52:
d0:3f:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:33 2026 by rpki-client