
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft
File: md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft (raw, json)
Hash identifier: /gre1PW3DgG6o81D6J2gNU65WrFvYz/Xlgr/PYj63bU=
Subject key identifier: 78:4C:3D:20:1F:15:E1:10:3F:B5:55:37:56:C6:C4:F7:E5:08:41:EE
Authority key identifier: 99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D
Certificate issuer: /CN=A91B08F7/serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D
Certificate serial: 1846
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft
Manifest number: 1D25
Signing time: Tue 28 Jul 2026 16:36:08 +0000
Manifest this update: Tue 28 Jul 2026 16:36:08 +0000
Manifest next update: Tue 04 Aug 2026 16:36:08 +0000
Files and hashes: 1: md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl (hash: 5Auk5M7dHaESPNqVNtj7k5QIhe75ahcC+9X9T+UUrhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl
rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6214 (0x1846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B08F7, serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D
Validity
Not Before: Jul 28 16:36:08 2026 GMT
Not After : Aug 4 16:36:08 2026 GMT
Subject: CN=6a68da78-1c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:35:67:2f:67:97:5c:61:ab:a6:f5:e4:1d:
c3:21:32:9f:be:5f:20:34:0f:93:1b:2a:9e:fe:62:
e1:b9:11:aa:7f:f0:79:1c:0b:11:e5:7a:ce:6b:ee:
dd:56:17:43:59:e1:6a:6d:0e:16:5e:54:af:ba:49:
85:85:fe:3a:1c:97:ef:96:e0:40:a2:fc:5f:8b:06:
ab:82:fa:b8:27:41:14:f6:c5:89:1b:07:9e:d5:21:
dc:a6:ee:c9:8c:92:34:f4:6a:82:f1:10:aa:7f:6f:
bb:17:02:e0:e0:e6:84:61:f4:8c:25:80:31:8d:d9:
09:88:4f:9e:c5:9a:de:bc:fa:1b:9e:84:db:78:8b:
67:66:1a:bd:47:fd:55:50:9b:c5:04:29:9b:87:46:
7b:72:5c:7e:3e:b6:f5:a3:60:a2:74:3a:fd:6e:55:
1d:86:22:68:99:0b:9f:9e:ef:95:e2:74:20:af:55:
4b:e5:d1:07:15:c6:7d:b6:ad:61:f3:b4:52:14:5d:
68:69:dc:92:a8:7e:a2:49:31:c0:87:25:2a:eb:cf:
0c:3a:27:38:a1:55:61:9e:7b:72:03:f3:ad:7e:59:
9c:12:70:4c:3b:e7:e8:f5:79:38:8c:92:bc:a5:6f:
de:db:6e:89:c6:42:69:38:8c:ae:b2:96:44:ba:1d:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:3D:20:1F:15:E1:10:3F:B5:55:37:56:C6:C4:F7:E5:08:41:EE
X509v3 Authority Key Identifier:
keyid:99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:92:cf:e8:70:fd:72:4e:15:46:28:69:67:5d:ad:cf:de:db:
a3:94:15:1a:aa:0e:5d:0a:c6:b1:56:64:8e:41:e9:e0:20:bd:
73:af:1b:5b:82:99:a4:24:1e:b4:f5:52:e7:b3:06:0c:53:de:
31:f3:c4:38:93:43:5d:51:a3:6c:12:d4:9e:f1:87:d5:93:6b:
8b:86:14:71:23:9c:88:17:98:40:eb:ec:94:87:d4:d1:d6:41:
40:41:5b:73:d4:16:e9:e5:51:16:a3:2b:9a:2c:ea:d5:00:20:
52:46:d4:2c:1c:fc:c2:f1:64:2c:f1:d1:5c:3e:ad:af:3c:fe:
f4:55:f4:45:72:18:05:76:99:69:12:c9:5e:23:6b:84:b2:1a:
b0:2d:e4:66:b2:17:6d:71:d8:5f:67:c0:d7:bc:2f:26:bb:40:
d5:a1:74:4c:04:9b:fd:4f:be:f1:49:2e:f1:df:77:9f:9e:24:
53:93:5e:db:31:42:89:3f:af:f8:dd:6d:74:e0:3f:37:b9:d9:
3f:ef:55:9a:4b:3a:43:7e:bf:e9:8a:03:3d:7c:4a:45:5c:3b:
02:cf:77:ff:66:d4:fe:95:44:25:2b:2a:ad:7f:9e:79:6f:0f:
99:e5:a1:99:7c:73:95:4b:85:9d:d0:c8:ca:ef:96:f6:f8:4b:
25:21:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:09 2026 by rpki-client