
$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File: 4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier: HgeqjPlsQkmtQP06lHOvQIn6svtYuEOFCT2bIj09r48=
Subject key identifier: E1:C7:CB:4F:6D:D1:62:80:52:64:4D:BC:8D:93:D3:83:A6:14:C3:79
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer: /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial: 1A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number: 19
Signing time: Mon 27 Jul 2026 11:22:29 +0000
Manifest this update: Mon 27 Jul 2026 11:22:29 +0000
Manifest next update: Mon 03 Aug 2026 11:22:29 +0000
Files and hashes: 1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: 4znqUnqAzVXVl1uyPth1MvOi/6oddgZModhM1EVPZmc=)
2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Validity
Not Before: Jul 27 11:22:29 2026 GMT
Not After : Aug 3 11:22:29 2026 GMT
Subject: CN=6a673f75-b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:ad:d0:5a:2e:17:18:e1:ba:98:8f:eb:06:
02:90:ba:34:89:53:21:e1:84:e5:65:a8:5f:5f:78:
51:3d:87:d3:1a:ce:1a:af:8a:d8:34:82:4b:25:7a:
c2:02:3a:8b:83:78:05:66:7d:b0:0c:1d:0d:07:b9:
71:00:de:52:2f:1a:e5:80:82:98:e0:cf:73:c5:a1:
55:69:d5:52:30:de:db:6c:6d:ef:1d:38:08:f3:fe:
36:2b:1f:56:cc:4f:bd:54:c4:47:44:f4:47:e7:c4:
ec:cb:d0:82:fa:ca:4a:eb:44:76:8f:37:8a:22:67:
35:8b:47:58:98:88:90:db:bf:d8:a6:f0:d7:44:26:
75:fd:88:02:8a:8c:bc:4f:33:c1:ce:56:3b:7f:cf:
fb:73:18:2c:e7:ab:30:2f:e9:20:9e:17:73:27:4c:
46:8f:6e:a0:32:07:52:8f:ed:d0:1a:2c:1b:d3:ea:
d0:88:94:a1:e9:11:8d:22:95:b3:66:f4:b9:97:f7:
68:f7:00:91:29:9a:88:72:23:b6:46:b5:7f:4f:67:
93:e0:29:a3:de:19:14:49:b3:b0:6e:b9:ba:59:18:
2d:d2:a5:0b:bb:7f:33:e0:c1:c6:92:92:54:7b:1f:
ce:39:f8:d8:97:02:e0:da:88:c1:19:f8:43:fe:b8:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:CB:4F:6D:D1:62:80:52:64:4D:BC:8D:93:D3:83:A6:14:C3:79
X509v3 Authority Key Identifier:
keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cd:80:c6:44:81:bc:ed:46:13:c8:e6:85:76:db:ab:09:45:
5e:55:b2:1a:9c:21:81:eb:34:d0:2c:4b:45:4d:21:b2:b7:a1:
fb:fe:ca:07:e5:8d:1f:8e:92:cf:1a:00:96:67:ee:1c:71:f4:
35:5c:23:43:79:5a:8d:75:7b:6a:49:38:b9:a8:b2:88:08:ba:
6f:5a:15:ea:cd:b5:46:4e:0b:ac:6b:c4:ef:7d:65:d4:77:30:
04:ca:dd:2c:e4:67:d2:9b:a6:77:8c:2e:4c:cb:4f:22:f4:ee:
90:fb:fb:84:15:5e:0f:d0:fd:e9:aa:eb:c1:fe:48:41:d3:9d:
ee:c3:95:b4:57:96:13:c0:fb:40:22:5a:6b:8b:af:f7:cf:fe:
22:58:47:dd:77:6d:56:f1:72:7e:43:cf:f1:ab:02:4a:78:99:
42:5c:6e:6a:26:04:94:75:e8:b5:0d:6f:71:39:cf:26:9e:54:
bb:d8:e2:80:dd:a6:78:9a:ca:55:0c:19:02:81:cf:4d:8e:96:
6b:e2:f5:32:30:65:c1:85:c1:ad:2f:6e:93:27:48:81:f8:3d:
ba:01:5d:d0:ab:fc:01:2a:30:34:7f:37:d3:a9:70:6e:83:ef:
c2:f6:5f:b0:de:8c:e1:53:99:7c:e1:26:0a:04:2e:34:b1:fd:
f4:c5:96:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:14:31 2026 by rpki-client