
$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier: wuR74RKMUJq8TL80EWlS2nZArynjxnNNzFFmDCVEzMs=
Subject key identifier: 1B:2A:FC:70:3C:F7:5D:F6:4E:68:DB:48:98:09:1F:43:A9:41:4C:6D
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number: 84
Signing time: Mon 27 Jul 2026 09:51:33 +0000
Manifest this update: Mon 27 Jul 2026 09:51:33 +0000
Manifest next update: Mon 03 Aug 2026 09:51:33 +0000
Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: /M3GFJdS05ht7bTFcTQP51qx9DvgyXn+s/1islJ5Q3E=)
2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Validity
Not Before: Jul 27 09:51:33 2026 GMT
Not After : Aug 3 09:51:33 2026 GMT
Subject: CN=6a672a25-8514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c7:96:3e:8b:d4:24:fe:9c:09:84:f6:45:53:
8d:d3:23:e1:b4:70:01:27:48:6b:93:bc:09:3c:8d:
26:c2:96:ba:e2:a1:49:3e:e0:42:b3:79:1f:3f:82:
a2:05:49:76:0a:6d:3e:0d:bf:84:15:32:42:eb:fa:
01:4e:b7:2f:e4:21:1b:09:3a:05:bb:b0:79:45:5e:
fe:8e:52:a6:a8:fb:52:a3:79:a8:41:17:c2:99:09:
7a:6e:02:4f:04:6d:c6:12:ea:43:ea:3e:7c:ed:29:
71:9c:8f:b8:d1:70:0f:3b:62:09:5f:81:64:1d:92:
c6:f1:35:a8:7d:ed:1c:8f:09:25:63:5f:27:02:c9:
58:2e:0b:e2:94:5c:8b:30:51:df:ec:d6:7c:c1:1b:
1f:8a:ea:80:ae:63:50:50:3b:9f:f6:4c:bd:a1:3b:
e5:71:4d:3b:d6:79:a9:37:ae:15:ff:8d:ed:1e:5b:
53:33:31:a3:60:e1:d5:78:91:27:95:f7:00:63:f0:
30:d1:43:49:c6:14:6d:2a:77:45:f7:9e:de:77:40:
02:d3:79:64:5a:d1:27:9b:a4:e6:14:65:51:47:46:
60:20:da:21:1f:d1:c7:45:72:0e:70:01:5e:a8:01:
e1:12:45:70:c2:63:7c:a3:30:a3:9f:a8:f3:d3:8d:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2A:FC:70:3C:F7:5D:F6:4E:68:DB:48:98:09:1F:43:A9:41:4C:6D
X509v3 Authority Key Identifier:
keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:46:94:e1:9d:d5:36:09:75:3b:b2:a6:4f:67:0f:c5:e1:b8:
a6:17:d1:91:4b:89:c4:4b:5d:18:1c:63:f0:1b:18:8d:2b:33:
d0:04:3c:5a:06:1c:6a:41:5f:12:c8:4c:2a:02:36:41:b9:d0:
1e:71:64:8a:ab:83:e8:28:eb:4e:89:d0:df:47:40:5c:0f:85:
bf:08:f4:7e:ad:0d:3e:15:70:19:61:2f:9e:50:97:bf:f6:e4:
6d:89:bb:d5:24:ac:37:64:4f:54:b8:75:dc:20:b1:b1:f4:80:
1c:01:61:c2:99:d8:08:64:1e:f9:d2:67:d6:a5:e7:23:29:88:
d1:18:3c:fb:03:23:18:93:a2:bc:26:e6:ba:8a:03:77:35:1b:
53:bf:d5:b7:4d:14:71:59:b9:94:95:9f:df:dc:c0:ed:4a:fc:
f4:24:3f:74:89:a5:36:65:dc:6d:98:2c:64:3f:7a:38:7a:08:
6a:d2:83:7a:3c:85:93:21:0c:aa:d9:32:30:22:9e:26:52:22:
c0:43:8c:46:a5:14:7b:a6:7b:97:56:11:47:cc:b9:31:59:03:
60:e9:b4:76:de:5a:da:2d:66:75:c8:0d:25:70:ce:99:6b:db:
99:46:47:e4:b9:ab:6c:9c:03:20:a9:0b:9b:bd:db:ce:a5:ab:
06:c5:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:29 2026 by rpki-client