
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier: DP7vy0CkAYem3O7s/YqB/ZTMclxqRUFQs1io8LNp8gg=
Subject key identifier: 0D:8B:A5:C4:E0:75:3E:92:65:4C:B5:CB:6E:DA:B4:78:AE:27:13:7D
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial: 2500
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number: 490E
Signing time: Tue 28 Jul 2026 15:51:30 +0000
Manifest this update: Tue 28 Jul 2026 15:51:29 +0000
Manifest next update: Tue 04 Aug 2026 15:51:29 +0000
Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: Zt0Lfh7hNux85VCF8HB6XQpIdRUevaDEa1UoSCrYSm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9472 (0x2500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Validity
Not Before: Jul 28 15:51:29 2026 GMT
Not After : Aug 4 15:51:29 2026 GMT
Subject: CN=6a68d002-9db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:13:6e:68:26:72:72:25:a6:69:4f:31:80:
66:f4:09:97:32:e9:07:d9:71:b8:0d:84:a8:f8:78:
50:66:a1:32:de:bf:26:06:b8:11:ec:c7:dc:d4:16:
87:69:48:86:c6:53:ff:3a:b3:5c:86:db:79:a0:e6:
42:55:22:01:c4:a3:09:e7:b7:1a:06:77:c4:6e:bc:
92:8c:b8:e2:c7:e8:a4:c5:58:ca:1d:f8:86:ef:fa:
7e:a6:8a:64:aa:96:70:d7:46:75:6c:7f:99:b6:ff:
69:15:82:e5:9a:16:9a:64:f3:65:cd:0d:57:22:5a:
07:b5:0f:b5:1d:e2:5f:e1:fe:4c:98:61:ca:78:f9:
d6:cc:4a:34:98:b3:91:4c:33:48:1b:bd:7d:0d:9d:
b6:44:2b:91:52:3a:74:01:bc:45:12:23:04:0c:ad:
92:9f:b9:39:3f:27:a5:93:8a:06:59:51:0f:de:65:
34:f8:32:40:8e:6e:df:27:01:16:97:d7:0e:68:9c:
a9:93:28:a1:0b:2a:5b:7c:01:cc:13:7d:2e:42:6a:
41:c3:64:66:1d:52:8d:39:bf:97:0d:87:36:e8:8d:
c4:70:eb:06:23:4a:a7:a5:04:1b:ec:ab:b5:01:8f:
67:23:22:ba:30:d9:e1:07:c3:1d:9a:02:83:5c:92:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:A5:C4:E0:75:3E:92:65:4C:B5:CB:6E:DA:B4:78:AE:27:13:7D
X509v3 Authority Key Identifier:
keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:dc:dd:bc:f4:03:7d:46:d9:52:20:af:05:98:c2:7d:29:26:
2c:c0:d0:0c:b3:53:2e:19:d2:4b:79:ea:cf:89:44:e6:b5:83:
06:64:43:26:a0:73:3e:1b:06:1b:38:3c:31:59:4a:27:bf:30:
7e:2c:fb:92:d8:d5:34:19:a8:9b:4d:74:f3:c6:77:c8:0c:ec:
da:84:e7:50:24:4e:13:58:f9:4c:ff:4d:b3:93:11:e8:e2:64:
5f:64:79:a8:72:ba:59:ba:eb:ea:ab:5c:f1:fd:23:34:2c:00:
9e:79:5d:77:32:f2:62:2c:f3:5c:17:ca:31:c3:a8:5f:24:16:
78:86:ac:f7:4d:a5:c2:d4:7d:7c:61:85:c7:6d:99:c8:d5:af:
94:2f:1a:49:24:41:46:0c:67:a2:b2:9e:1e:0f:90:e8:08:fe:
67:ab:66:90:40:1b:f9:95:8e:4f:75:c4:ff:43:03:7f:32:b5:
d9:ee:dd:0c:c4:99:53:f9:42:13:b8:04:0d:b8:7b:b0:9b:3c:
1b:43:ee:d0:23:45:9e:f9:fe:6a:f3:79:7d:b9:d5:eb:bc:0d:
eb:0d:ac:20:f3:e9:d6:d8:ea:ca:ca:a8:f2:be:3b:d8:e5:64:
81:72:35:b2:30:6b:a8:a5:71:32:e7:7a:4d:32:9c:f1:2b:d7:
0f:0e:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:44 2026 by rpki-client