
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json)
Hash identifier: BXcUaBmjc138eAesua83/kj2ed+P9aVFgDwVGgHO7Cw=
Subject key identifier: 26:E5:6B:3F:73:FF:F9:96:3B:96:4D:41:25:3D:E8:B5:87:55:2A:1B
Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72
Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
Manifest number: 0187
Signing time: Sat 03 Oct 2026 05:16:37 +0000
Manifest this update: Sat 03 Oct 2026 05:16:36 +0000
Manifest next update: Sat 10 Oct 2026 05:16:36 +0000
Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: Y/m1S4/xDQcuHntlNq2pF5g+Ns2iAV988Ri33iy4k2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl
rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272
Validity
Not Before: Oct 3 05:16:36 2026 GMT
Not After : Oct 10 05:16:36 2026 GMT
Subject: CN=6ac08fb5-981b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:d8:93:27:38:05:04:12:31:77:91:37:2b:
ee:5a:a4:86:fd:63:32:98:4e:62:2f:85:ba:b7:40:
58:ee:b7:2c:59:81:c0:c0:0d:cb:32:23:63:73:2c:
01:e2:c8:57:fe:f6:08:11:51:b6:c3:ed:2e:b0:a2:
cb:af:45:57:7f:09:c3:cb:b4:fb:0e:51:b5:a4:f2:
2b:fe:fa:be:e3:35:2d:db:0d:9a:f2:29:bf:a6:96:
8e:fe:73:ed:b4:c2:f4:97:58:e0:ec:69:4d:f6:3f:
86:43:9b:5c:4e:82:8f:62:73:df:ef:13:cb:db:c8:
6f:08:7f:9b:dc:2f:5d:72:88:11:b4:b7:b3:9a:e8:
ed:97:b2:5e:6a:ad:e7:18:e5:55:ad:e8:2c:b7:a9:
b2:39:74:0b:14:ba:2d:32:ba:f0:29:94:cf:54:c4:
a9:09:d3:cc:93:0e:39:b3:bb:dc:21:98:b1:88:99:
a6:39:d3:16:26:cd:5d:98:49:64:98:1c:9a:ee:8a:
64:0d:bb:5e:1e:df:8c:65:1b:47:6b:59:b6:44:ea:
1f:f6:3f:08:1b:2e:c3:10:7e:fe:a0:7d:72:9c:fa:
0f:4c:a0:fb:4b:c9:90:8a:3a:bd:2d:84:ab:bd:a4:
9c:31:2b:62:14:a5:ad:99:c9:b4:2e:0e:8a:ae:f6:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:6B:3F:73:FF:F9:96:3B:96:4D:41:25:3D:E8:B5:87:55:2A:1B
X509v3 Authority Key Identifier:
keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:0a:3e:56:0e:e7:df:79:e2:e5:ac:21:c0:dd:8b:8b:d0:ef:
5a:d2:fb:8c:fd:1f:e6:32:c5:d3:49:7b:64:dc:c9:ff:fc:01:
97:42:84:3b:1d:3e:f7:2c:c5:36:fd:dd:c0:a6:ad:e4:45:ad:
75:8b:34:70:7a:86:b3:29:68:90:eb:a1:b8:75:3e:e3:70:ff:
f2:62:26:48:45:41:b3:f6:e3:3a:92:da:86:d4:d3:df:02:4b:
2c:61:5b:b2:82:16:e0:c1:23:5e:d4:17:74:b2:f5:ea:23:36:
02:3f:ad:58:a2:19:f5:b5:56:af:57:5e:49:2b:cb:a7:1b:c3:
8c:c2:aa:78:16:e5:70:79:91:89:ab:86:b3:49:8d:fa:25:2d:
e0:39:9c:8c:5d:fc:7a:44:76:15:ae:bd:0e:aa:85:64:9f:7a:
ce:2c:b2:4f:0c:fa:7a:07:db:41:c6:98:f6:05:c5:92:25:94:
81:6b:32:17:23:65:16:be:41:b6:bd:38:6d:65:50:05:b2:e1:
f0:59:42:9b:0c:dd:e9:24:1c:31:33:e4:41:87:40:37:40:5d:
f9:79:d2:5b:29:f0:ff:ca:d3:02:04:79:69:ab:9e:aa:42:c8:
23:34:32:40:3e:ba:09:e5:71:fd:2f:b0:81:79:4d:13:0e:c3:
27:a2:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:50 2026 by rpki-client