
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json)
Hash identifier: g+qn6wtExM/f6gyvNR/dWP3pXSMKPcltmt1ROxSp6Ag=
Subject key identifier: D2:D5:08:BF:E9:A9:8A:A7:F8:76:19:CF:72:AB:DB:68:A9:4F:F4:FD
Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Certificate serial: 0187
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
Manifest number: 017E
Signing time: Fri 17 Jul 2026 05:40:05 +0000
Manifest this update: Fri 17 Jul 2026 05:40:04 +0000
Manifest next update: Fri 24 Jul 2026 05:40:04 +0000
Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: 2w5rWmF0CyC4dzHTdSAHz0Q+MSDXo9PSQJFR4fRk+Sc=)
2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: hxVPrb830azs0lN0PgHfZWp5ALPZT3k8NudZmcYdzUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Validity
Not Before: Jul 17 05:40:04 2026 GMT
Not After : Jul 24 05:40:04 2026 GMT
Subject: CN=6a59c034-6a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:fa:1a:b2:56:d0:25:15:a5:57:b4:25:27:
e1:02:08:f8:eb:bd:70:e1:a2:ab:27:e2:d3:4f:b9:
9e:cc:00:f5:b7:0a:95:b6:e3:7d:93:db:da:92:c0:
52:6d:a8:54:04:49:de:5c:a4:29:e3:25:62:3b:70:
b7:3a:19:4b:99:93:f9:3c:cc:d4:11:2f:71:88:53:
ab:5f:af:96:e6:b4:ba:74:97:99:23:3d:f4:00:6f:
03:ec:97:3f:6a:87:3b:4f:d7:9c:79:72:ca:7e:98:
b7:a5:b8:28:ec:d6:b8:c2:5d:37:a9:04:ae:7f:4d:
aa:22:e7:3f:b0:e7:3c:0c:5a:e4:61:2b:d7:a7:63:
a7:02:12:aa:77:ee:7c:42:05:c8:0a:ed:6e:8e:7c:
70:62:ca:d7:fe:9f:ec:42:7d:3a:f3:88:c0:fb:cb:
1c:17:53:fd:e9:c1:25:c5:9d:16:3f:64:89:b4:37:
94:c1:d9:b1:51:80:2a:a8:bd:72:e6:fc:3a:25:e6:
0a:c7:07:24:1e:e8:2d:82:53:05:21:67:4e:1b:66:
dc:d3:1c:25:21:48:39:98:bb:61:e8:ef:b7:c0:11:
84:dc:ec:8d:c3:a6:ae:d5:1b:1b:0d:b8:d1:2f:37:
7a:a2:fc:28:ba:36:2e:48:be:89:fa:b6:ae:6a:12:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D5:08:BF:E9:A9:8A:A7:F8:76:19:CF:72:AB:DB:68:A9:4F:F4:FD
X509v3 Authority Key Identifier:
keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:04:42:3f:75:b9:42:05:0c:1f:34:6a:4b:8d:69:5b:70:69:
82:37:5c:8b:63:b5:51:2d:4d:ec:bf:29:13:16:75:68:7f:f2:
77:e6:73:75:12:d0:ed:0d:9a:1f:1d:fc:83:a0:47:66:e6:ab:
ed:05:ed:59:33:f4:e9:73:8e:6f:39:6f:94:bd:58:7a:34:da:
b3:2e:3e:8c:00:7d:0b:29:2d:73:db:e0:74:76:b2:7d:57:0c:
18:e5:91:de:0a:8d:d9:8a:62:a9:a6:ca:6d:ac:c0:b0:b8:38:
47:03:7b:93:c3:f4:19:73:dc:f8:fd:ca:f6:c4:74:08:98:ad:
34:10:20:02:e7:f5:21:15:0d:72:9d:65:6a:6b:77:ac:db:47:
b9:1a:be:77:f8:b0:d2:71:a9:e4:1c:5e:9f:21:ff:48:41:9f:
fe:8f:9d:89:9a:50:40:8e:41:5a:88:19:9e:73:5e:4e:6f:ba:
9b:0a:83:3d:83:43:54:25:97:7f:45:ce:0e:12:56:e8:6d:f3:
53:78:54:d5:3d:3a:44:f8:1f:b9:6f:7a:9a:07:66:68:ca:21:
ce:f2:1a:65:eb:5e:f0:cd:b2:6c:18:d0:e6:b7:9c:e9:d0:40:
8b:e9:30:d2:78:56:9c:eb:67:95:d2:92:7f:fb:f1:86:a3:1d:
35:f6:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:21:14 2026 by rpki-client