
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier: nsSIAtmzmAagPGfI1ycKAcb7LIcbsmjrZiS5OUljKmw=
Subject key identifier: 8B:44:CB:6C:B4:D6:01:31:63:D5:F3:09:3E:3D:4E:5D:63:E6:1F:61
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number: E4
Signing time: Fri 25 Sep 2026 06:36:29 +0000
Manifest this update: Fri 25 Sep 2026 06:36:29 +0000
Manifest next update: Fri 02 Oct 2026 06:36:29 +0000
Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: b3FmGp+FprPfJKXfr1yIWckQTcAiKtaGB0KxijWKQaE=)
2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: HgsCBlPfUxEGN7fUuKP9EFyk8NbYZcFbFk0fllEBLvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:36:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: Sep 25 06:36:29 2026 GMT
Not After : Oct 2 06:36:29 2026 GMT
Subject: CN=6ab6166d-608b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:b2:1d:c5:de:cb:ad:8f:dd:0d:7b:8e:2f:
b7:dd:af:6d:44:bb:82:fa:0c:72:79:b4:33:4e:16:
9c:0e:c5:a8:9b:d9:43:26:7c:44:5d:48:54:a6:32:
1d:68:e2:b4:ad:0c:7d:e4:44:ca:49:5f:76:13:70:
6a:e3:5b:61:72:ad:6a:83:10:02:52:a5:b5:0f:b3:
4a:01:e5:5c:55:eb:09:31:cd:5e:da:f5:7e:0c:b7:
ba:74:91:8f:56:5b:ac:79:78:1a:85:1a:2d:5b:e1:
b7:4f:fe:70:41:e9:75:3d:be:ad:7b:c4:2c:1d:2f:
14:11:9c:5b:7e:82:6b:2c:eb:a8:31:62:7f:20:56:
37:24:53:be:30:25:bf:60:f3:4d:8b:d1:35:65:e5:
5d:3b:6f:4a:46:4c:4b:2d:70:e7:fb:5c:0a:1d:2c:
ad:a8:bc:34:01:81:81:3b:d0:12:7c:5a:cf:57:c6:
3b:0c:09:70:4c:ff:da:8b:b4:ef:a5:01:81:e8:de:
9b:38:f2:db:2a:a4:41:11:22:5f:51:e9:af:a3:d4:
0d:fd:b6:ad:e7:c9:7a:bd:99:2a:5a:08:ee:8a:d8:
71:74:88:22:9d:79:1c:67:cf:c3:e6:e8:62:53:df:
f7:2b:2b:bf:b7:99:b0:28:3d:0c:50:02:fc:23:c2:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:CB:6C:B4:D6:01:31:63:D5:F3:09:3E:3D:4E:5D:63:E6:1F:61
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:c9:b4:70:3f:b1:81:03:c3:7e:e5:a9:5d:81:36:6f:02:4a:
e2:e4:45:10:81:1a:9b:20:a4:cd:55:9d:14:1a:76:fa:6d:80:
72:b7:4c:2d:a1:f7:ae:20:9a:1d:45:bb:ff:a1:d3:78:2e:8e:
5f:20:c3:bf:61:6f:b8:b0:60:fb:a5:c1:09:cf:18:ad:df:dc:
59:10:d1:a3:84:4c:33:88:01:e4:b6:50:57:ca:09:8b:d3:1e:
ce:da:63:9a:84:02:a8:d3:1a:28:fb:1d:05:70:b0:8d:d4:75:
fc:a2:f1:2b:59:df:e0:48:2d:c4:af:33:f8:6a:32:34:89:04:
25:f5:d6:ce:23:b0:91:1d:60:48:9d:b8:30:64:e2:24:86:ba:
ff:51:69:3d:33:65:60:34:e3:41:b6:cf:2e:27:54:77:0f:f7:
43:f3:a3:04:64:9a:77:89:be:fe:48:87:65:fc:a0:ce:f2:f1:
51:9d:b3:c9:dd:8c:41:63:04:73:a1:ea:c5:f2:2c:50:94:e2:
2e:a5:90:84:df:29:63:99:13:c1:43:11:73:00:47:6b:92:df:
5e:23:c1:62:72:08:3d:eb:29:c2:a4:9f:e1:df:0d:8d:ab:67:
75:c9:3d:1e:c9:1f:90:98:ca:74:6d:9b:cd:d0:f4:de:0a:3d:
0e:98:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:15:07 2026 by rpki-client