
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
File: 1OdEGcvjVoAT4bz3doRyhsGYhFo.mft (raw, json)
Hash identifier: ZrLRp9qEK3hRdXT2PLCODr/rFJ3OeUtEVVdDmZASNA4=
Subject key identifier: F8:DA:62:7C:BE:C1:FF:AA:EB:9E:50:BE:52:3E:81:92:83:92:2C:00
Authority key identifier: D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
Certificate issuer: /CN=A91A547E/serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
Manifest number: 4B
Signing time: Mon 21 Sep 2026 08:19:03 +0000
Manifest this update: Mon 21 Sep 2026 08:19:03 +0000
Manifest next update: Mon 28 Sep 2026 08:19:03 +0000
Files and hashes: 1: 1OdEGcvjVoAT4bz3doRyhsGYhFo.crl (hash: Dl5BkrMfe5C8sOEIyW5ktYzWqTzmVut5iTqh6A+jNrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl
rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A547E, serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
Validity
Not Before: Sep 21 08:19:03 2026 GMT
Not After : Sep 28 08:19:03 2026 GMT
Subject: CN=6ab0e877-4206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:df:57:fa:8e:5e:9b:28:fb:a2:dd:aa:c4:
1c:0b:c8:5f:9e:0e:ea:72:fd:fa:d4:0c:57:2f:d2:
a2:2d:d7:5b:d3:6d:5a:d8:c6:90:af:10:c5:86:bb:
43:33:a9:81:3f:54:9d:54:36:0c:9b:66:be:0a:9d:
0f:cd:35:f0:0c:e5:1f:59:12:c5:0b:ab:6d:90:a2:
13:42:ec:b6:0d:cb:e5:6c:3c:2e:9b:40:cf:45:12:
79:a5:23:48:58:cc:c0:41:57:b5:6f:9c:4d:23:53:
cd:6e:0f:9f:31:96:99:f1:dd:53:b4:fb:ca:e4:a5:
f9:2c:c8:dc:6a:c4:8d:87:2a:ab:a6:9d:13:97:92:
8b:27:b8:17:13:b1:d5:13:1e:6e:4e:1e:d0:03:65:
13:49:20:e0:ab:92:ce:36:e0:f6:88:16:a7:ec:12:
46:49:7b:5b:82:49:20:50:40:77:9e:66:bf:6b:08:
4c:21:6c:9c:53:08:e6:fb:b1:c6:50:e4:66:11:1d:
78:85:85:c5:61:5b:7e:7b:0e:fb:1e:88:b0:3f:87:
07:5f:3f:e4:0e:fc:9e:4c:f6:af:8a:f2:2b:e5:50:
51:28:b5:05:45:c9:b8:7e:25:47:0b:f3:98:fc:c7:
6e:72:b4:7c:15:f2:77:4a:e0:10:10:f2:6a:ba:51:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DA:62:7C:BE:C1:FF:AA:EB:9E:50:BE:52:3E:81:92:83:92:2C:00
X509v3 Authority Key Identifier:
keyid:D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:bd:1f:b4:ce:38:42:51:46:1c:0c:d3:e9:81:f3:e1:23:a1:
e0:47:d1:4b:05:f0:ef:a3:36:d1:ee:79:c3:30:37:4a:25:15:
40:69:1d:89:97:ad:b5:6f:87:1b:5c:15:98:bb:0e:e6:8e:eb:
84:f6:20:06:a0:36:f4:51:e3:52:2e:f4:8b:da:c9:f4:ee:d2:
9d:54:f4:db:ec:86:d9:ff:94:03:5e:a4:32:6a:43:3d:84:9e:
9f:75:a2:3b:4a:bf:68:02:6e:07:c9:59:7e:7f:6d:45:9d:4b:
95:af:48:d6:7d:44:56:46:8a:ca:67:8c:7d:27:0a:6c:36:95:
c8:69:77:d6:dc:9f:73:91:51:bc:37:73:61:17:4d:8f:94:f3:
4f:6e:b3:ba:e2:ea:8c:84:61:2f:33:7c:bc:be:96:04:a6:6d:
f3:cd:e5:f7:3b:23:e1:64:90:6a:07:39:d1:24:a2:1e:8f:e8:
a4:47:8b:ca:d5:d7:fd:22:f2:3b:74:9d:65:60:51:85:15:0d:
03:9e:81:0f:38:dd:51:a5:e2:b6:d3:3e:df:9c:d5:dc:ec:31:
36:2c:7d:d1:80:4c:97:89:53:c0:f9:14:bd:86:13:e6:0a:74:
51:5d:a6:e9:01:fd:6a:eb:32:8f:03:f1:dd:59:14:69:0c:c0:
f2:e3:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:07:07 2026 by rpki-client