
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier: jLDq/0YMy221Yvj7FgqRcViGcISD7FfN/98le0rsqns=
Subject key identifier: B4:EF:F1:36:0C:0A:C7:19:C1:A0:C6:0E:1C:DD:B5:82:CD:B7:CA:2B
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0AE3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number: 0AC6
Signing time: Tue 22 Sep 2026 19:17:40 +0000
Manifest this update: Tue 22 Sep 2026 19:17:39 +0000
Manifest next update: Tue 29 Sep 2026 19:17:39 +0000
Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: 8JDXqDj6D8XtcDqhmr3u1UyrME+u2WjO+yzNb3lE79k=)
2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: Vj7o88kIi1gzoKZrYduw49KYBvPlvY9XiAyKSejHJoM=)
3: D520BC1A7F2511F193FF4ECD8AA30FBC.roa (hash: cYVs4UtWMOUgw+pmidHUQjILVWpjgcEIdNe72N7OhlM=)
4: D61FACAC7F2511F193FF4ECD8AA30FBC.roa (hash: Jy4Oj/aitMJWrPnGk37BzvM5yrFoetv9y1SnJ11uK70=)
5: 0A5A5A8C868611F1834D6ADF67A30FBC.roa (hash: EnnfgpQNdSPaqBnvSKsk/cfhTzDdzQOYchOp4FDnxR8=)
6: 2ACA766C751511F18829B6FC70A30FBC.roa (hash: fC6Nc+Jtk1WvyemJtWNOUp/N1CwROSxHeCpLb+/dGnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Sep 22 19:17:39 2026 GMT
Not After : Sep 29 19:17:39 2026 GMT
Subject: CN=6ab2d454-5d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:5c:da:4c:0e:6b:de:02:7d:e3:74:f8:4e:
ab:8c:b0:e7:08:45:5d:ea:80:c4:02:59:f8:db:62:
52:82:d5:fe:57:29:cd:97:39:29:18:24:9c:c5:7a:
f2:af:f2:ef:57:5f:86:36:3f:81:5e:db:12:8b:0c:
31:85:fd:d8:80:78:83:4e:b7:e3:7a:71:05:f2:07:
f7:bd:95:cf:4a:96:5e:01:61:e6:8e:8d:bc:6b:4e:
28:9d:32:f5:85:32:3d:d3:82:c6:51:31:7f:a4:3d:
9c:09:a6:b2:a0:55:00:12:9b:3c:f5:b6:ad:6d:a8:
b3:af:fb:06:4d:69:b0:78:47:97:12:9c:cb:12:6c:
94:2b:15:11:30:c7:fb:f9:43:31:92:3a:9b:1b:25:
28:e4:b6:91:06:37:86:ca:56:0f:b9:a0:64:7b:fb:
f2:30:9f:0b:46:93:e7:15:28:73:2d:9b:d6:1a:c7:
46:1e:6d:b9:a3:7d:17:9d:0e:a5:fc:13:d3:2a:75:
ea:fa:c7:90:fe:65:27:c9:00:d5:da:f8:f6:77:ae:
7e:c7:04:5f:0d:ce:be:c8:62:00:31:47:de:86:0a:
e7:a8:db:1d:6f:96:c8:ff:ac:23:9e:68:87:df:ce:
17:e0:47:60:79:76:b4:a7:1d:d7:96:24:de:64:b3:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EF:F1:36:0C:0A:C7:19:C1:A0:C6:0E:1C:DD:B5:82:CD:B7:CA:2B
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2c:61:d9:83:0c:0d:3e:20:9a:1b:fb:8d:82:9c:ef:c8:5e:
6b:3b:be:c0:1c:e4:e4:73:97:3f:ee:fb:bb:1c:c8:41:93:25:
60:a8:ff:6d:01:e7:01:54:1e:da:59:b5:bb:e2:0c:b9:41:bc:
5e:12:ea:8f:a2:35:4f:e9:92:ee:94:04:b0:54:5f:3f:c5:ef:
00:8b:06:95:f9:cb:aa:61:fb:69:4b:77:fc:20:7d:ec:35:07:
03:2d:4a:ec:75:0a:4a:9d:d2:5a:79:3e:f6:c2:18:7d:4f:77:
0b:ef:c2:82:54:cc:42:44:c6:01:40:75:a2:70:6e:c5:ca:ba:
0c:85:32:f3:89:ce:2d:47:b1:3f:7f:d3:ce:9c:93:e4:07:54:
29:ee:fd:22:1e:39:cd:c0:0f:23:c5:6b:6b:17:13:5c:db:5a:
59:67:bf:6f:e7:82:0e:d5:4e:60:76:e4:13:1c:31:ca:f5:8f:
22:0c:e8:55:16:e4:27:89:82:27:07:0e:4a:a9:82:8d:86:7d:
f8:1c:1a:6a:33:fd:73:6d:8b:20:d5:39:8f:14:91:b9:9f:b7:
ba:39:f1:30:12:a7:0a:bc:b5:f2:f0:71:d7:8e:b2:da:d0:24:
7d:5b:01:0d:0e:9b:36:b9:3c:92:1c:94:0e:dd:f6:55:a5:95:
13:ef:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:04:09 2026 by rpki-client