
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json)
Hash identifier: a5C3YKfE34a7GD77x98wK8IwLo+FWC7NAR9ztUliAqE=
Subject key identifier: FB:E5:B7:2A:65:B6:A5:32:22:7F:3A:93:BA:AC:46:48:9E:8A:58:CF
Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
Manifest number: 0196
Signing time: Wed 07 Oct 2026 04:50:06 +0000
Manifest this update: Wed 07 Oct 2026 04:50:06 +0000
Manifest next update: Wed 14 Oct 2026 04:50:06 +0000
Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: qDvjusGmfceC/lbhn5y3rHWqD2vd02gleHy1elg4cM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Validity
Not Before: Oct 7 04:50:06 2026 GMT
Not After : Oct 14 04:50:06 2026 GMT
Subject: CN=6ac5cf7e-f39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:2f:4a:d6:70:a5:e2:b8:e7:64:ea:68:29:
d1:e2:de:51:10:2d:47:2e:a8:56:2c:73:60:d1:58:
42:e6:6d:5b:e2:29:88:a1:8a:4d:cc:cb:f7:37:5c:
da:6b:cf:c7:47:3f:3a:3a:cd:ee:12:86:fd:fe:eb:
46:35:01:bb:d4:43:9f:67:27:1b:63:7f:85:6d:12:
d7:71:59:3d:94:4f:3f:1e:ad:eb:ac:bd:5b:56:ab:
67:39:2f:3f:66:47:80:69:c2:fc:ff:18:8d:f5:24:
04:8d:30:aa:a4:42:eb:57:98:81:b9:ad:0b:20:11:
f8:24:32:40:25:00:fc:29:f6:a4:a5:f4:75:e2:f9:
09:a0:db:1b:dd:e0:5c:fb:68:91:eb:83:21:a1:df:
3e:2d:23:9d:9d:b7:41:09:a5:4e:d6:6c:cd:03:c4:
cb:fc:c9:cf:b9:fe:11:28:70:de:4b:8c:05:8f:33:
74:a0:99:91:79:86:e6:00:0c:50:ce:3c:62:ad:24:
e3:3d:e7:7e:eb:88:46:60:5a:0a:57:aa:28:a4:09:
c7:26:a2:aa:4c:26:3c:76:c5:05:fc:a8:28:fc:e0:
ba:6c:1c:c8:07:12:c0:be:e0:93:f5:dd:6f:ea:ec:
b0:2f:95:52:01:67:ab:65:29:1c:d0:bf:c5:72:4d:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:B7:2A:65:B6:A5:32:22:7F:3A:93:BA:AC:46:48:9E:8A:58:CF
X509v3 Authority Key Identifier:
keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:85:49:52:c7:00:cd:32:8f:11:9d:a7:c1:0d:20:39:af:76:
d1:8c:52:94:84:22:66:ce:37:b8:e0:da:1a:cc:64:a9:d9:70:
42:de:44:ca:cc:f5:bf:45:54:35:b1:ed:25:5b:07:8f:01:24:
53:cc:7f:23:8e:d4:cb:7a:4c:42:a4:3e:68:38:7f:40:c7:c5:
a0:e3:82:a5:4f:c4:2b:d9:6a:92:fb:ca:f2:f0:99:c9:54:2f:
e9:be:ed:92:73:a1:73:eb:e2:7f:c9:a9:cf:82:9f:63:6a:17:
a9:4e:80:7f:43:31:02:d0:47:68:6d:c1:a1:e4:6b:0b:2b:74:
81:96:ef:7a:82:24:31:48:54:43:4a:9a:5f:b1:4f:34:bf:e6:
fe:20:50:3c:b0:61:c7:17:a8:3b:c0:27:0a:00:1e:06:fb:2b:
1b:2d:b6:3f:30:a1:58:a8:19:ca:53:19:ac:d3:fc:fc:72:f6:
9b:8d:95:0f:60:2e:81:72:6e:ff:a0:8d:ff:4d:77:2c:21:fc:
b9:f4:cc:1d:c7:c9:bd:e0:b1:9c:f7:d0:34:6f:74:8e:14:4d:
6d:4b:65:53:bf:47:a6:ae:48:07:8d:36:01:a0:c9:25:d4:b2:
e4:29:b8:67:b9:b1:d9:d4:9f:dc:59:f6:16:3d:e8:24:d9:4f:
fb:a3:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:15:19 2026 by rpki-client