
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json)
Hash identifier: 7zbmheAE0bUeXIVB6yvQbqrfvHSmBr7wtYenqF3PBSA=
Subject key identifier: 06:CC:41:89:55:02:D4:EF:94:93:43:81:16:D7:47:FC:ED:B7:EA:71
Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Certificate serial: A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
Manifest number: 9D
Signing time: Wed 07 Oct 2026 07:53:50 +0000
Manifest this update: Wed 07 Oct 2026 07:53:50 +0000
Manifest next update: Wed 14 Oct 2026 07:53:50 +0000
Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: CNc6iHTa+VPvlz2KPHP3JW52hnoi3scai/RhAz+QWjk=)
2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=)
3: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: vhaf/68N75siwelbtPS2Tu3DEgGqynrrUITnReXj5p4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Validity
Not Before: Oct 7 07:53:50 2026 GMT
Not After : Oct 14 07:53:50 2026 GMT
Subject: CN=6ac5fa8e-ce3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:52:44:62:c4:a4:9d:a5:cb:51:d4:c2:ae:
d1:9b:1e:25:21:74:d3:87:a2:47:ba:85:a9:e3:63:
29:56:40:a9:d8:c8:ad:bc:a1:c1:2d:40:bb:4c:68:
03:44:c2:14:8b:06:7f:6a:a6:b6:02:f6:b7:d6:18:
db:9e:e3:15:9e:53:d6:06:1f:73:72:f2:d0:ea:47:
53:3d:11:07:0c:c3:7d:50:4a:91:18:c6:a1:83:32:
b2:d8:ce:52:7c:6a:bb:90:70:11:86:87:07:71:95:
d8:ee:04:2c:aa:74:6a:c3:fd:c7:81:e1:0d:3a:37:
38:17:b2:25:32:51:0a:50:30:d9:44:3e:b8:b5:c4:
0c:6d:d9:5e:c6:ef:3c:53:46:f9:02:f7:1f:d3:2f:
b5:9f:cd:cf:ea:19:1d:6e:43:33:d8:52:d1:c3:c9:
f7:c6:71:ce:d3:e4:26:cc:7c:09:eb:d0:2d:d5:13:
54:6a:a0:5e:a1:e1:64:5b:1f:ec:07:93:ec:ed:3e:
68:da:36:2f:e2:d4:9e:cb:fd:43:14:d0:a0:91:82:
a4:35:05:9b:e4:d7:7d:19:4d:9b:3a:07:1c:11:af:
0b:66:be:19:d2:c8:49:29:1f:fa:bc:6c:21:f4:73:
87:9f:44:4f:6d:b8:34:29:e2:1e:fc:f1:31:a2:c2:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CC:41:89:55:02:D4:EF:94:93:43:81:16:D7:47:FC:ED:B7:EA:71
X509v3 Authority Key Identifier:
keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:22:04:96:d9:27:91:05:bd:8a:f2:fb:cd:05:03:d9:67:d1:
b6:93:91:aa:ef:fb:36:8c:ba:97:3f:07:85:06:66:e5:e3:18:
f7:cc:a9:2c:08:b8:d8:36:8c:e4:9d:6e:e3:7c:3d:c7:76:e7:
ea:1b:6d:46:3c:49:de:1e:fb:d6:cd:bb:25:90:ff:18:c8:65:
18:5a:71:68:a2:3b:35:72:9e:68:aa:f5:87:c9:91:dd:a1:55:
d1:11:2b:c0:58:ea:75:5d:8b:7c:7a:62:54:da:4b:00:b8:97:
92:18:41:88:c2:2f:22:b5:66:b5:0f:4e:a1:5d:ec:98:73:35:
8d:bb:f2:00:20:e7:e5:0f:6c:a5:92:52:a9:40:2f:0a:59:37:
bc:0a:6b:71:0c:83:a0:7d:d9:58:64:bd:ed:f8:04:67:85:d2:
d8:27:d6:10:25:d8:5e:4f:7d:13:93:c3:c8:da:85:e9:ed:28:
ae:9f:fa:51:b3:9e:b1:c3:8a:43:6e:6d:44:7f:8f:9b:b5:59:
1f:b7:69:2a:71:f9:8c:66:c6:eb:6d:53:a3:02:74:cb:eb:f6:
2d:b9:ce:9f:ae:cb:a6:18:58:7d:8c:25:0c:9a:30:57:d0:3f:
ff:62:4e:0a:62:26:77:84:1e:7a:20:f3:d8:61:e5:98:da:09:
f6:4c:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:54:31 2026 by rpki-client