
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
File: 4kseiTWUfEbxEc4paFpZGaGEgWI.mft (raw, json)
Hash identifier: 8momopg4/GbgA9+JchzqHUpnVhSiqDkviko9d8z4GD4=
Subject key identifier: 74:A9:1D:AE:38:96:46:BA:AB:CC:12:8A:F6:0E:F3:9C:0B:81:AB:87
Authority key identifier: E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62
Certificate issuer: /CN=A91AC757/serialNumber=E24B1E8935947C46F111CE29685A5919A1848162
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
Manifest number: 1F
Signing time: Tue 13 Oct 2026 09:41:29 +0000
Manifest this update: Tue 13 Oct 2026 09:41:29 +0000
Manifest next update: Tue 20 Oct 2026 09:41:29 +0000
Files and hashes: 1: 4kseiTWUfEbxEc4paFpZGaGEgWI.crl (hash: OmyJ/jGCXjah/UYtmKjlrZ7C5ash6qTIaD9y23QrFuY=)
2: F930E2AE9A0211F18F8C777D4D11F970.roa (hash: g0HTZkRvVAAIsmTQpLZEGBxeJYJHzsZAyNCmFjkA0Pc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.crl
rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC757, serialNumber=E24B1E8935947C46F111CE29685A5919A1848162
Validity
Not Before: Oct 13 09:41:29 2026 GMT
Not After : Oct 20 09:41:29 2026 GMT
Subject: CN=6acdfcc9-9756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:ef:48:f6:59:c6:17:b1:52:62:2e:3e:72:
48:c1:b8:ae:02:3c:58:71:e6:a3:6d:50:2e:c6:87:
a8:5c:da:b6:8c:f1:50:cb:c1:3c:ea:f9:99:38:b8:
c1:10:69:ff:d6:15:e9:a3:c0:4b:e4:9f:eb:ab:a4:
fd:1f:58:69:f9:a7:f8:36:0b:87:25:0a:75:52:2f:
27:e3:94:95:7b:93:1a:40:b0:bd:9f:b9:6b:4b:16:
54:6a:fe:d4:67:06:52:a0:d7:3c:d9:be:55:cb:20:
58:6b:12:b0:55:5f:9f:2a:ff:57:07:36:d2:cb:84:
7f:20:32:3f:00:b0:1a:7e:f1:5e:ec:9a:3c:0f:ef:
02:ad:57:91:df:bc:c1:8a:86:64:4f:8a:a5:6b:40:
36:87:4a:32:ba:e5:e9:21:d1:8f:3d:fd:97:fc:29:
46:7a:42:f3:ff:a8:67:d8:65:4c:a6:6f:ce:fb:d1:
f6:a3:d6:cb:20:bf:6a:48:b0:4f:52:19:5d:d3:22:
00:a7:d5:20:77:5e:cd:82:11:90:d5:61:45:57:cc:
51:ed:4b:b9:e5:c3:af:03:a9:5f:e7:6c:7b:f5:14:
ce:7a:93:41:e0:a5:14:bd:41:f2:21:8a:6a:d4:04:
6d:a8:b2:1a:10:32:52:7e:e6:46:8b:ad:9c:f1:b0:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:1D:AE:38:96:46:BA:AB:CC:12:8A:F6:0E:F3:9C:0B:81:AB:87
X509v3 Authority Key Identifier:
keyid:E2:4B:1E:89:35:94:7C:46:F1:11:CE:29:68:5A:59:19:A1:84:81:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kseiTWUfEbxEc4paFpZGaGEgWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC757/5B38AA3699FE11F1A9DE99834B11F970/4kseiTWUfEbxEc4paFpZGaGEgWI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:b6:7b:0c:2c:4e:4f:b9:08:23:87:20:2d:29:f0:24:bd:20:
ef:8b:ca:e6:df:4c:a7:7e:63:3a:ce:26:a8:8e:02:bf:a2:3b:
da:4b:f9:a0:dc:af:4e:e2:f0:af:3e:1b:c0:57:1e:5d:53:5e:
39:c1:d0:b5:b4:c8:b5:5d:ff:71:ea:bc:52:db:33:04:ff:f4:
f4:5b:88:9b:21:1b:2c:a6:15:21:67:08:70:92:8f:9d:f9:61:
48:45:19:c7:9d:18:50:01:f9:68:84:e4:a6:d2:23:28:dd:ee:
78:ea:9c:39:ac:ef:64:cc:1c:ee:ce:d7:54:1a:99:af:7c:19:
b9:7f:d2:0e:93:07:63:4d:cb:6a:d2:69:76:61:9e:46:f2:c0:
1a:83:47:b3:e6:94:94:b5:4a:cb:23:bb:b1:57:33:37:33:83:
0a:c6:41:35:e2:b8:94:5d:ce:39:d2:c0:02:d7:df:fd:31:3b:
ac:61:2a:29:40:f8:47:79:3b:0a:38:a1:b8:68:0e:87:30:ad:
e9:6d:d0:61:56:93:fc:ae:69:65:cc:1c:50:60:53:32:de:fc:
25:62:c8:72:06:77:72:2a:0f:f7:95:46:b5:a0:e1:b3:2e:ab:
73:d5:57:46:44:5f:f6:aa:15:ce:49:18:2e:32:98:26:cf:9e:
85:28:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:06:11 2026 by rpki-client