
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json)
Hash identifier: sEZDpSRDev5n/+0geIGiHGoyqi2DSFp8uRVwmRuPUAk=
Subject key identifier: 02:D8:5B:40:60:3A:70:FA:B3:6C:41:99:1E:EC:60:84:C7:93:DC:ED
Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24
Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
Certificate serial: 0BC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
Manifest number: 0BBA
Signing time: Thu 08 Oct 2026 19:09:46 +0000
Manifest this update: Thu 08 Oct 2026 19:09:45 +0000
Manifest next update: Thu 15 Oct 2026 19:09:45 +0000
Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: tzKMlFEPJUtx3b/JkSbTcUyKqh3FWRnAtq3wVdzwojY=)
2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: a6wavOgKoP5md5rS3aTV8AwOSfSYTGywa/u0ciPrNLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl
rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3011 (0xbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
Validity
Not Before: Oct 8 19:09:45 2026 GMT
Not After : Oct 15 19:09:45 2026 GMT
Subject: CN=6ac7ea7a-4d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5e:bf:3f:e4:f0:3f:1d:0f:34:ce:da:5c:54:
1b:d9:db:b3:04:81:4e:cf:6b:ca:04:2e:e9:df:56:
67:43:9d:fd:36:8d:79:b4:bd:73:be:de:89:49:1c:
f1:b2:04:d7:a6:ff:38:74:e5:4c:4b:b8:ca:12:44:
88:d3:b0:cb:f1:7c:9f:38:0e:1e:8d:56:85:66:95:
e3:ec:3d:d3:50:e6:94:c4:8f:ef:6c:48:35:43:d7:
33:dc:ef:1a:de:c6:11:00:46:45:45:a1:2b:6d:5b:
1b:1e:78:f3:d5:3f:8d:d8:b8:99:62:49:29:86:f5:
2c:7b:27:fc:f0:1c:b9:89:6e:40:14:ba:a7:23:37:
dd:d3:d0:08:a1:d1:c1:7f:c4:2b:b7:86:f4:d5:7e:
6a:a5:20:43:71:cc:bf:17:fb:40:46:61:89:f2:99:
ba:52:b8:8d:3b:9e:a4:17:b5:cf:c9:39:1b:8d:8d:
09:59:87:39:dd:d0:1b:7f:99:69:5a:a4:2e:45:03:
da:9a:36:9b:47:ad:a9:31:9e:b4:e3:b4:34:2e:77:
14:77:34:d6:db:4b:a9:dc:d0:6c:88:4a:3e:14:77:
76:e7:47:07:ef:32:b3:06:9f:79:4e:19:fd:20:e5:
57:1d:36:d4:51:8b:39:92:5c:41:41:8b:ec:1e:b8:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:5B:40:60:3A:70:FA:B3:6C:41:99:1E:EC:60:84:C7:93:DC:ED
X509v3 Authority Key Identifier:
keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:3f:9c:fe:61:a4:10:fa:6a:3d:db:a2:92:e3:97:f5:75:3f:
e7:d2:8d:c3:a8:9d:14:73:41:4a:95:a8:98:c1:1a:24:2a:01:
ce:42:d2:63:f6:e4:7a:4e:0b:12:29:08:71:06:f2:3f:18:92:
00:9c:aa:33:b7:07:b5:87:25:55:de:b7:08:74:59:6e:6b:02:
e6:46:5c:a2:33:75:58:32:60:7c:82:21:a5:de:e7:a2:e2:47:
6e:71:b5:76:53:49:7c:89:b7:15:7d:3c:f8:57:e4:7b:c3:14:
39:34:7e:4b:fa:6c:fe:12:3b:de:cb:44:6d:5c:81:0c:c6:0c:
da:6e:72:72:11:ae:28:63:51:c8:54:db:20:26:64:4b:d1:9f:
0f:f9:67:67:26:09:88:45:54:c6:4e:fb:17:74:3a:e1:8e:9d:
a9:7c:34:ac:4c:6c:61:af:71:f8:06:0f:1a:2c:4a:5b:66:ed:
31:a4:47:c5:c0:f7:21:51:7b:ad:f2:8e:ae:d5:e2:74:3c:77:
6c:17:06:f5:7f:a8:4a:f1:6e:46:d5:d0:26:34:50:9e:6e:4e:
8c:fe:1f:48:46:ce:c9:3a:57:50:f5:5d:3f:84:ca:3b:2b:ca:
cc:0e:99:3c:57:bf:0a:ca:76:d4:ed:a1:0e:b0:c4:ac:dc:6b:
3a:0a:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:10 2026 by rpki-client