
$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File: 4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier: FXP8mha7/PkJtRMQm7rsskKBTGlRKQR3Sl1u6FGdwpw=
Subject key identifier: 3C:7C:8A:BC:19:24:00:13:97:18:B3:80:4B:D5:5C:BD:AF:46:3F:89
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer: /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number: 04
Signing time: Sat 13 Jun 2026 09:18:29 +0000
Manifest this update: Sat 13 Jun 2026 09:18:29 +0000
Manifest next update: Sat 20 Jun 2026 09:18:29 +0000
Files and hashes: 1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: waLzbEHRAotKsZbS/9HYv+SgMFPvDDQCnqz2SroOWWU=)
2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Validity
Not Before: Jun 13 09:18:29 2026 GMT
Not After : Jun 20 09:18:29 2026 GMT
Subject: CN=6a2d2065-37e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fa:a1:9e:f9:b5:43:79:c2:f1:d3:99:ca:a8:
0e:1b:f6:91:97:67:15:41:d0:7a:73:00:1c:a8:00:
26:90:35:94:4e:b8:92:9f:57:2e:90:f8:a8:11:33:
cb:88:44:f6:f6:c1:98:8f:63:24:22:fa:50:17:66:
03:20:b1:e1:b9:c6:16:c2:d0:3d:c9:94:80:97:0a:
4a:94:2a:a2:c8:82:29:cf:fe:dc:cf:5c:68:30:74:
e1:3b:06:58:a3:96:6c:f5:29:74:90:86:a9:e1:4b:
2a:9f:ae:92:92:4e:d7:92:4b:37:59:60:ef:6e:6f:
99:fc:56:31:b0:9a:6d:37:aa:f1:79:20:00:9b:58:
59:df:b4:15:6d:6a:96:3e:84:16:44:c7:47:e5:1c:
1d:5b:4a:88:e3:f1:52:3e:8e:7d:b7:94:0d:e4:93:
9b:af:b7:a9:87:22:a7:ae:d9:09:6a:b3:27:85:c1:
c5:54:7f:7c:9c:20:db:f3:ac:45:85:29:4d:19:b2:
60:28:43:b8:a7:80:96:eb:9b:bd:30:0f:30:ef:d1:
e8:85:2e:d2:a9:e5:b9:f4:17:dc:05:d2:0c:c1:d3:
07:7f:e9:97:e0:6c:64:80:e1:8f:7b:0a:5d:05:fd:
30:70:49:b3:97:7a:f0:d0:ab:7e:90:b0:23:d1:db:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:8A:BC:19:24:00:13:97:18:B3:80:4B:D5:5C:BD:AF:46:3F:89
X509v3 Authority Key Identifier:
keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:18:14:2a:9e:7e:97:06:1f:51:34:cd:73:8a:9c:19:27:c7:
2e:ad:d4:53:a2:44:5f:14:52:ae:de:f2:1c:21:cc:f7:cc:5f:
8e:50:e0:40:52:bb:b7:a8:27:c7:36:7f:21:02:b3:7c:8e:c9:
db:4b:b9:6e:50:a4:a8:39:5e:9e:34:c1:d9:eb:3b:70:cd:81:
57:f4:27:55:35:f6:ff:ba:88:ca:c4:a5:6a:80:fd:ad:8c:47:
60:f3:96:82:db:0a:89:18:87:e8:15:2f:62:f3:28:41:51:7f:
76:03:8d:84:74:f4:a5:94:de:26:23:7b:4b:05:bb:f4:4e:ba:
98:df:50:f5:30:a4:d8:8d:73:d0:af:55:8c:33:f2:10:bf:d8:
a3:c8:34:62:2e:d0:18:6c:67:b6:8a:1b:2e:b1:04:2f:73:58:
0f:37:90:1b:dc:02:6f:d0:a5:69:67:57:5a:cd:f7:fe:90:d6:
92:c2:f8:12:b8:82:0f:d5:51:13:2e:d9:47:d9:0c:d6:a9:56:
db:ce:14:74:43:f3:2c:1b:97:95:1b:1c:00:63:16:fa:fd:21:
dd:4c:7e:f1:b4:6a:a0:bd:a5:33:1b:00:0d:a9:e3:89:bc:61:
9e:1f:84:44:81:ca:da:fc:81:07:f1:d0:41:51:0a:34:e9:f0:
4b:cc:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:08:10 2026 by rpki-client