
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
File: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft (raw, json)
Hash identifier: mIcMwUgYn+zmkPnpcOhoJ3GaH3k65CdRy/UR0o6jvdg=
Subject key identifier: 37:BD:66:A3:69:93:BD:E0:69:A3:0E:E3:39:A2:1D:7F:13:16:F9:83
Authority key identifier: E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
Certificate issuer: /CN=A91E3441/serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
Manifest number: 5B
Signing time: Fri 03 Jul 2026 09:00:59 +0000
Manifest this update: Fri 03 Jul 2026 09:00:58 +0000
Manifest next update: Fri 10 Jul 2026 09:00:58 +0000
Files and hashes: 1: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl (hash: eo3JUPuLcCqnAVr0cSkQUIZhy1jlCQNR8/ntQMqkZ74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3441, serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Validity
Not Before: Jul 3 09:00:58 2026 GMT
Not After : Jul 10 09:00:58 2026 GMT
Subject: CN=6a477a4b-9245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:37:30:26:1b:4f:b3:f7:b7:7a:4f:8c:f8:
90:ea:a8:25:ce:d5:d2:7f:f2:f2:6c:b1:45:c9:ee:
68:af:1a:fa:75:96:d3:2c:16:03:92:a5:f1:97:16:
6f:26:c1:98:71:26:46:7a:ea:aa:3b:c5:9e:42:ba:
d8:51:5b:79:1c:8d:2f:e8:14:19:0f:a2:5d:02:e4:
54:1e:40:b1:b5:01:58:3c:3f:c5:c2:46:a2:e9:60:
64:36:84:3b:81:fe:68:97:ab:92:e9:f1:22:0f:81:
3e:66:fe:63:64:7e:c0:f1:62:03:e7:1f:57:51:8d:
49:84:eb:89:00:db:5f:09:75:61:d8:3b:5a:42:2d:
e6:60:64:b1:ff:4a:62:7d:31:02:57:1a:e3:c3:19:
e5:7e:22:70:4b:4b:8f:a5:b9:38:eb:fe:32:31:35:
21:d2:27:c2:b6:b5:c1:14:49:a2:cd:39:93:59:82:
11:cc:6c:91:34:66:53:e7:0b:44:67:85:23:39:34:
73:71:7a:ec:b2:6c:86:69:b2:ee:1e:62:96:45:94:
bb:2b:a7:b4:8d:a9:9b:b8:ed:e1:06:8e:e5:43:b5:
59:c5:b0:bc:c3:e1:1c:dd:11:0c:34:d6:04:d7:e2:
26:d0:6b:69:a7:48:e1:b9:17:ab:74:fb:2e:8b:fd:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:66:A3:69:93:BD:E0:69:A3:0E:E3:39:A2:1D:7F:13:16:F9:83
X509v3 Authority Key Identifier:
keyid:E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ec:1d:f6:da:f6:cd:cc:3f:01:aa:da:2c:7b:41:b0:49:89:
91:95:ed:2f:f4:52:31:2c:a4:1d:b0:ab:cf:b8:c7:6e:99:0d:
1b:96:e0:5e:af:a4:66:fd:94:25:e5:65:f6:35:76:e4:96:f5:
e3:64:6f:47:7f:b3:9b:53:97:13:ca:02:4c:d8:ce:ca:ba:50:
8d:23:00:64:96:03:e2:63:eb:0b:fe:2e:79:cf:3e:e4:73:8f:
e5:94:e7:03:91:72:c5:30:08:ff:1c:db:ab:8a:97:f3:26:e4:
5f:26:19:ca:00:1f:42:e2:96:ec:dc:66:a3:53:d6:d0:89:a1:
cc:9b:24:98:1a:e6:f2:32:da:e3:9a:1b:35:5c:08:6d:e7:b5:
d5:80:17:0d:bb:d4:d5:7f:ca:d1:f7:fd:72:02:28:2d:58:79:
ac:c0:ee:a2:88:1b:83:b7:1d:54:ec:28:4c:e6:95:b9:da:3c:
cd:f2:d1:d2:d4:7c:87:ef:6a:8a:ee:56:96:d6:cf:ba:f8:65:
e7:16:e2:95:94:52:b5:b9:2e:35:d7:e5:de:3b:1d:ed:17:6e:
53:c6:df:79:27:26:e3:af:00:94:bd:c2:04:82:1e:e8:27:8d:
08:68:de:5c:86:25:04:a6:b7:1b:a1:ce:b2:89:41:66:b8:a4:
59:db:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:44:31 2026 by rpki-client