
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json)
Hash identifier: tD0sCClEILOXSIzUcBSwze++WTcTCSVyTAfXilH6Tpo=
Subject key identifier: B4:87:63:DB:A8:09:9A:48:69:F9:54:C6:A8:58:30:09:B4:96:4A:BF
Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Certificate serial: 051D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
Manifest number: 0510
Signing time: Wed 19 Aug 2026 00:01:46 +0000
Manifest this update: Wed 19 Aug 2026 00:01:46 +0000
Manifest next update: Wed 26 Aug 2026 00:01:46 +0000
Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: /Sba//hSN2yg0i/dLN3QkYxO7w86yb+ILBASomh5TLM=)
2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: Bqm0LBQ1QxgmzQ67GzN6T9VVJw3twyV0J98hBbifjyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Validity
Not Before: Aug 19 00:01:46 2026 GMT
Not After : Aug 26 00:01:46 2026 GMT
Subject: CN=6a84f26a-0290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:e8:6d:69:06:54:61:a0:35:eb:b0:2a:43:
e7:55:df:a8:aa:95:e2:d3:99:be:81:64:c5:c1:82:
04:86:59:f1:df:dd:8f:f1:4d:96:56:04:d9:05:d1:
cc:26:cc:f9:cc:28:b0:ca:d1:f6:ae:5d:0d:4c:67:
b5:80:5a:cd:b1:94:57:f3:21:97:58:14:30:ce:f1:
aa:3d:61:f8:df:2a:65:6a:5a:f8:dc:b5:94:50:26:
dc:54:89:78:f0:c4:0d:84:b9:2d:09:7c:13:f6:56:
f8:18:18:3e:1e:a7:9e:a0:25:b6:61:eb:e1:cb:57:
54:6c:02:77:62:8e:49:f2:87:44:cc:91:75:08:50:
40:e2:a8:07:a9:41:b0:73:a3:02:3b:5d:84:5d:c6:
63:36:12:8a:d4:ea:12:44:9e:2a:a8:63:44:62:68:
28:0e:c6:be:2a:a8:b1:ca:33:8c:2e:8b:cf:07:54:
a4:0e:0f:ac:c2:92:2c:37:d1:79:55:9e:99:c2:c6:
70:18:7a:42:1f:8f:c0:15:12:4a:89:19:0b:17:12:
cd:65:13:9d:79:c5:4d:91:28:c6:1b:62:26:df:d3:
6d:e3:87:f3:7c:da:8d:ea:9b:f3:0d:9f:9f:35:0c:
24:54:d4:ad:43:3b:1e:24:4a:b3:05:e0:b2:ae:c0:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:87:63:DB:A8:09:9A:48:69:F9:54:C6:A8:58:30:09:B4:96:4A:BF
X509v3 Authority Key Identifier:
keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:08:3e:35:b6:8b:77:fd:c5:7a:70:19:a6:f9:3c:82:74:2a:
71:f5:d4:e5:31:50:2c:51:89:a1:97:8a:bf:6f:ad:75:ae:b3:
df:eb:12:78:c7:9c:df:45:84:d3:c5:cb:33:c5:bc:dd:86:cf:
4c:60:b8:42:28:66:1a:00:7a:7e:f4:55:65:95:86:cd:27:3b:
0b:a7:f8:40:69:12:25:1a:81:1e:51:e0:4b:5a:f5:1c:dd:dc:
39:d8:ad:af:ae:96:f7:0e:d7:f8:b3:89:d0:20:63:69:c0:43:
d8:67:b2:55:2c:5c:25:4e:df:35:71:0c:ad:4c:e9:e0:b5:3b:
cb:75:77:39:61:f2:31:b3:66:a4:b9:6e:30:b2:e6:38:a3:0f:
ab:99:82:2e:ed:e6:f5:43:50:51:4d:f1:61:54:fd:a6:ed:84:
be:38:eb:6d:07:01:6b:df:42:29:2e:d1:b7:3d:d8:a0:d2:b9:
df:b6:ad:24:97:42:04:f1:1f:b8:8d:86:fa:e5:7f:18:bc:08:
b7:0c:23:4a:77:43:3b:8e:1b:bb:9d:b5:6e:81:b9:dc:0a:22:
d0:05:ed:5a:dd:b2:9b:3a:e2:bb:d9:48:3b:ce:ee:72:82:0f:
c0:27:77:22:13:52:38:bd:76:e3:40:01:08:49:d7:73:62:51:
ed:3b:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:58 2026 by rpki-client