
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier: jqPdgvRgX2eDKouY5Sd8BeQmawMOqoIgaQ0++d60k80=
Subject key identifier: 33:01:05:F5:3A:46:D1:6B:CB:E3:1A:C9:DB:6F:1B:86:E3:B7:85:F1
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 0938
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number: 08AD
Signing time: Sun 20 Sep 2026 20:43:04 +0000
Manifest this update: Sun 20 Sep 2026 20:43:04 +0000
Manifest next update: Sun 27 Sep 2026 20:43:04 +0000
Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: XWd+8ZmxzB4XKfcnrp2iFxBWE/4Kfc8DOnKXFzIEQj0=)
2: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
3: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
4: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
5: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
6: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
7: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
8: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
9: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
10: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
11: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360 (0x938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Sep 20 20:43:04 2026 GMT
Not After : Sep 27 20:43:04 2026 GMT
Subject: CN=6ab04558-cde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:b1:3f:f7:9c:d8:04:b3:1c:cf:f2:8c:19:
45:fa:90:eb:40:f9:ba:f8:1a:5b:de:e7:b5:97:3e:
e8:c2:df:ac:7d:39:26:eb:c5:d3:b0:1e:3e:a7:d3:
a5:77:0f:31:2c:9a:92:ab:5b:64:69:79:95:dc:84:
d1:0a:d8:fa:6f:1e:a4:f0:d9:f5:e5:ad:34:8b:5d:
cc:ee:14:de:5c:c5:2b:8a:dd:fb:fe:cf:48:ae:80:
f2:ed:99:4b:97:a3:03:c6:f3:06:33:4e:17:d4:29:
97:8b:39:76:97:5f:04:cd:4e:cd:9c:a4:73:77:8d:
ef:77:24:35:4a:54:08:5c:03:f2:df:72:d3:76:58:
93:36:e6:98:b8:00:dc:12:c5:58:82:ac:bd:34:00:
ea:dc:65:b8:fc:e3:59:a7:ed:a2:bb:14:68:1e:c2:
8c:18:20:b9:57:f3:dd:58:2d:5f:6a:cb:69:ee:8c:
67:eb:c7:43:ac:6b:8b:57:96:1e:a2:62:47:9b:ef:
61:cb:92:cc:73:c4:29:0b:33:ba:5e:95:59:db:72:
58:c8:b6:23:42:c4:76:5f:2b:8d:f2:fe:ef:e7:16:
3c:dd:3c:6d:9f:e3:53:e5:5f:af:20:3a:a5:1a:13:
c7:3f:47:77:7d:c5:31:fe:b2:12:f7:f3:87:a6:ba:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:05:F5:3A:46:D1:6B:CB:E3:1A:C9:DB:6F:1B:86:E3:B7:85:F1
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ba:4d:43:23:8f:14:0c:7d:51:00:1c:95:33:ee:7b:19:83:
65:4e:26:72:38:57:84:fb:cf:b2:6e:97:46:85:b6:77:c0:66:
57:2c:e3:a5:f0:1b:b0:7a:00:e7:9d:e0:74:18:d3:8b:b0:5c:
73:e0:41:78:90:f1:39:27:46:63:37:38:c4:c7:2c:64:eb:7e:
d7:3c:4b:d0:dd:65:54:d9:a7:e8:ac:6e:90:4b:69:ec:93:b6:
e3:ae:c0:3d:37:31:9a:d1:06:e4:da:45:58:80:bd:a2:44:14:
75:81:21:0a:c3:62:03:f4:9e:5b:77:fd:ee:5f:ca:7e:2a:de:
ca:46:92:4b:6b:74:9a:c4:6f:b2:6e:36:6a:4f:9f:0e:fd:46:
29:81:c4:52:bd:33:fe:e6:41:46:17:e6:8b:5a:2c:df:88:b2:
1f:23:63:69:6c:f4:2f:36:2d:ea:6a:28:2d:83:db:2a:55:8d:
22:4d:37:1d:c9:b0:d8:5d:4e:d5:0d:e3:00:6f:58:4d:d2:39:
48:16:ee:9a:a7:db:ba:30:a8:62:22:ed:2d:86:1f:b6:4a:41:
78:fd:06:c3:69:47:24:75:92:33:1f:bf:83:08:41:f4:69:ed:
3b:bb:89:c3:a3:89:81:c3:b0:6c:b6:d1:97:48:fe:46:cd:7a:
04:99:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:03:20 2026 by rpki-client