
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json)
Hash identifier: zNDAXQTy72yY19cIsPyrMilLz7j1v+tWb1gRsXhMooA=
Subject key identifier: 3B:00:6B:26:88:5E:5E:BF:5B:01:E9:03:BE:15:3F:01:0A:F4:4E:EA
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial: 0E7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
Manifest number: 0E73
Signing time: Tue 28 Jul 2026 17:52:12 +0000
Manifest this update: Tue 28 Jul 2026 17:52:11 +0000
Manifest next update: Tue 04 Aug 2026 17:52:11 +0000
Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: uhiq5uQGv8yMoEYNA1BkXX28wStkQ0Syr/bNLS1yim0=)
2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: VGnQoHLbOR6gGAIMZ8u2WkXS8JnY0rPW7LfuTtXGg8Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3708 (0xe7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Validity
Not Before: Jul 28 17:52:11 2026 GMT
Not After : Aug 4 17:52:11 2026 GMT
Subject: CN=6a68ec4c-2c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:4d:3b:5a:f5:c7:10:fc:8a:78:7b:f7:9f:
5c:1f:39:b0:25:3f:4a:fc:6b:59:3c:24:44:b1:c4:
ff:2c:ed:e9:8b:eb:fb:93:ee:72:5f:81:8d:26:6a:
80:54:ed:27:8b:82:63:fc:c5:a8:c9:84:00:72:a6:
35:e3:32:8c:ae:37:20:22:b4:c2:69:c1:88:e3:59:
23:f3:0b:b8:99:b4:42:81:d1:e6:cf:c8:8c:18:49:
0d:96:be:44:68:af:d3:a2:b0:ea:a8:0e:e7:b8:80:
39:04:79:66:2f:c5:91:9b:0f:e6:06:78:d3:3e:2c:
ef:c4:f8:63:5d:c1:13:ad:92:dd:54:be:bb:71:9e:
bd:3c:bf:99:b4:80:e9:8e:7c:c6:82:e7:20:b4:fe:
85:06:0b:64:de:51:b4:05:71:b4:d0:b3:a8:b8:d0:
a2:ef:8b:30:73:6e:4c:3d:45:ab:0d:78:a3:ff:7c:
66:d1:7d:51:95:ff:6b:84:33:20:48:66:5b:66:ef:
f0:c0:f5:10:ea:d6:03:a2:36:8e:d3:a7:07:31:53:
0e:4d:12:51:92:2e:a9:98:38:51:1b:f8:b7:f2:5c:
cd:f8:ea:4a:58:e2:b0:fe:7f:46:89:17:68:61:36:
06:64:9c:d7:73:b0:d7:d1:7c:45:5a:08:16:ca:a3:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:00:6B:26:88:5E:5E:BF:5B:01:E9:03:BE:15:3F:01:0A:F4:4E:EA
X509v3 Authority Key Identifier:
keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:70:58:0a:a4:25:ec:b9:37:5f:5c:0f:95:5c:ba:58:e3:5e:
01:ff:50:d6:11:a5:e4:55:d9:a3:dc:d6:03:97:55:fb:98:70:
21:37:4a:2b:56:9a:0d:37:68:97:09:27:8b:ec:89:83:c3:fe:
af:ca:d6:c1:bf:7f:95:31:fb:75:22:0c:35:9a:66:50:64:4f:
7b:bc:e3:1f:70:e1:02:8d:d5:1a:c8:3d:66:be:d6:f0:b9:e0:
ff:e1:98:e0:53:68:e5:2e:91:c3:5a:9b:e1:15:7d:6d:52:29:
1b:3c:89:4e:6d:46:07:3d:18:9b:d3:3d:f7:13:19:53:19:49:
aa:45:d2:e3:f0:d7:45:df:65:75:f5:84:d6:f5:fe:6d:08:cd:
73:9c:cc:82:fc:97:28:9e:ea:2a:b7:8d:1f:5e:d6:ea:8f:fa:
1b:d9:47:33:87:14:6e:a6:ff:31:9a:04:19:a0:ac:cc:54:87:
d0:a5:74:0a:bb:72:d0:2f:da:69:0b:45:48:d6:08:d4:8f:7c:
37:f2:a4:76:fc:2a:74:5c:eb:59:3b:df:ad:62:7f:db:80:34:
ac:59:a6:bb:1b:b0:93:2f:2e:5e:ff:01:ab:b2:b2:7d:76:a1:
b8:4b:55:71:72:50:4a:2d:d2:df:87:7e:04:cf:e3:87:1f:90:
31:a8:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:33 2026 by rpki-client