
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: buy03VddtKXd1L/PG1YHJBdYNDtqiMUAiR2j472D47w=
Subject key identifier: C4:2A:7C:9D:AD:E2:D0:9C:7F:40:53:4E:45:DA:AC:B0:60:89:51:1D
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 02B3
Signing time: Mon 27 Jul 2026 02:42:44 +0000
Manifest this update: Mon 27 Jul 2026 02:42:43 +0000
Manifest next update: Mon 03 Aug 2026 02:42:43 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: 8jIABoKPHWnfenPDPnHnmYbjRmSMNGhU0Q4ApRS8ZIA=)
2: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=)
3: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Jul 27 02:42:43 2026 GMT
Not After : Aug 3 02:42:43 2026 GMT
Subject: CN=6a66c5a4-47cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:ab:24:f5:4f:5c:c2:85:f6:71:55:da:14:
9e:b6:91:93:0d:77:d6:29:49:54:4f:6a:63:e0:c4:
3d:c3:b6:a6:d8:c5:75:13:6d:b7:09:31:e1:38:f5:
0d:0d:2d:ce:b8:bb:db:af:ce:00:e0:5a:f8:2c:04:
40:21:a6:b0:4c:ff:10:56:e4:0a:15:73:14:93:9a:
44:d0:e8:37:30:a7:cc:4d:7e:3e:00:c4:df:5a:d1:
4b:69:1e:32:a5:62:10:d8:bb:fc:5c:46:ef:2b:e1:
f0:f3:9e:71:d5:73:4d:57:90:d5:59:dc:da:ac:19:
ca:9d:95:c1:7a:3a:ca:12:a3:a6:c2:74:e2:50:c6:
60:e2:71:50:fd:3e:9c:0b:c6:51:c0:22:f6:2e:81:
16:fc:9c:5c:49:1b:59:6e:99:d9:41:c3:c5:cc:30:
e5:9c:eb:d8:b3:34:9a:09:06:18:74:b2:b9:7e:cd:
f2:55:3e:b7:69:6c:38:fe:e1:31:49:7e:53:c6:b6:
5c:28:67:09:9b:35:6a:a0:78:bd:17:f8:17:78:e7:
cf:f4:e1:62:fd:0a:a9:25:af:32:ff:2a:86:e0:92:
70:54:ff:75:5c:cb:06:8f:18:5e:93:29:d7:28:f0:
6d:75:a6:aa:ef:66:55:60:ab:82:24:55:ed:b6:fd:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2A:7C:9D:AD:E2:D0:9C:7F:40:53:4E:45:DA:AC:B0:60:89:51:1D
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c5:fd:6e:00:9d:d3:d7:db:05:f3:b8:e6:d9:32:7f:df:cb:
c8:e7:db:5b:3a:b2:8d:bc:39:c9:d8:86:00:9b:53:37:93:03:
22:0e:fa:2b:7e:94:74:23:ed:04:1e:fc:af:6c:b9:e6:42:61:
50:ef:46:b4:e7:ce:fe:3d:2f:ad:85:64:07:99:c0:cb:47:4b:
a6:4d:79:0e:63:ff:6f:7b:22:ba:5e:80:9a:02:7b:24:10:24:
e5:d1:8c:88:ed:be:af:72:d9:32:5d:47:71:cd:ce:b0:5a:d9:
d9:f5:80:f5:c8:57:46:bb:55:09:16:08:c4:9c:5b:c5:e7:99:
8e:d2:98:f7:5a:5b:87:9b:19:16:e7:f7:66:2f:ba:a2:9a:b5:
fd:b1:01:d6:a6:fe:1e:69:09:a8:0c:fa:c5:1b:5b:b7:42:0d:
7d:21:1b:7f:c9:b9:ed:23:f9:d6:9c:6d:34:65:a8:b6:78:40:
c7:b1:98:0d:47:23:de:65:07:0d:6b:86:b4:da:c8:94:22:ad:
20:39:03:2c:3a:4a:1f:04:25:4d:5e:64:74:64:d2:53:ec:da:
07:97:ec:dd:9d:1f:32:1f:78:a2:af:87:b3:00:31:b5:c5:5d:
9c:e5:fa:4e:6e:19:20:6c:96:35:25:9f:24:bb:2d:f0:e3:47:
74:70:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 06:43:47 2026 by rpki-client