
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier: ulqsMdP6T4XMoY2X/f9B+Uyv9mG2a6bUYeHY65zjDCY=
Subject key identifier: 93:A8:E0:12:FC:51:6F:6A:1B:9C:F2:A5:A7:0D:76:29:13:D5:0C:9E
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 0905
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number: 087A
Signing time: Fri 12 Jun 2026 20:57:50 +0000
Manifest this update: Fri 12 Jun 2026 20:57:50 +0000
Manifest next update: Fri 19 Jun 2026 20:57:50 +0000
Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 7RcjhOWOO1LVd8ih3w2TS7s+om55Wu/kBO6xtEzJ36w=)
2: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
3: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
4: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
5: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
6: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
7: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
8: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
10: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
11: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2309 (0x905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Jun 12 20:57:50 2026 GMT
Not After : Jun 19 20:57:50 2026 GMT
Subject: CN=6a2c72ce-cbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:46:18:93:ab:de:6e:f7:49:23:c2:d4:9b:
ef:a8:60:29:45:87:35:9a:a3:66:d7:20:f0:73:10:
5f:17:b0:ac:ac:91:42:36:6a:cd:d4:40:21:9c:d4:
a6:5f:e8:a6:07:7f:88:0e:17:1b:07:20:b9:d3:78:
4b:7a:3b:27:8b:fe:89:86:41:7f:98:7e:72:d7:15:
74:30:40:b9:b5:36:34:da:a8:2d:75:2b:44:ae:c2:
42:8e:26:4c:12:50:39:68:da:ac:9d:7e:6f:18:cd:
22:49:0c:e2:c6:2f:80:67:42:b3:20:eb:e9:a3:a9:
17:d4:c3:43:47:9e:54:1d:39:f9:81:47:55:b8:47:
70:11:6e:71:66:f7:f8:32:5b:5f:c7:f2:ca:37:00:
26:8d:d5:53:5a:7b:bf:25:f2:89:f1:d9:a4:23:ce:
b0:d4:65:30:bf:46:82:bf:73:84:3c:92:ca:0e:9a:
a2:e4:ee:c0:53:70:00:87:e1:0a:19:e1:30:10:dd:
76:3f:22:03:b3:8e:91:e6:1c:9a:1a:e4:2f:8a:de:
aa:1a:4d:24:a7:96:73:1e:e3:9d:c0:72:67:1f:5f:
30:53:1d:73:a9:59:9b:21:9f:6b:59:e0:0a:52:4b:
68:8d:c0:2a:04:f8:2c:a8:2a:a7:5a:91:1f:ea:9f:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:E0:12:FC:51:6F:6A:1B:9C:F2:A5:A7:0D:76:29:13:D5:0C:9E
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c1:9a:81:8f:64:ac:87:53:34:1c:50:be:37:3b:65:4b:a3:
3d:07:5f:b8:4c:96:79:d3:0d:87:25:e1:a6:cd:29:ad:2c:d3:
8b:36:25:f1:37:32:44:91:93:2a:a3:b8:5e:d9:5e:57:eb:e7:
a9:f4:87:e8:4c:3f:59:91:49:17:5a:55:ab:97:c2:e1:88:ee:
fa:cc:c8:b2:d8:7f:cd:c8:7c:fc:78:62:04:24:4f:03:06:d9:
fc:1a:8e:d5:ad:08:4f:20:a9:dd:02:ad:90:79:41:d0:aa:a9:
98:b5:bd:29:e3:28:81:57:66:8f:3d:5a:d1:86:36:90:2b:01:
74:df:82:e5:5c:17:8c:fd:e9:cd:a0:65:90:fa:f5:8d:9c:a6:
e4:6a:7d:35:d7:ae:69:6a:f2:ce:f1:fe:c6:91:89:a8:7e:51:
b3:dd:77:04:3e:95:6f:7a:56:d0:c1:f0:06:9f:d9:dd:35:42:
f2:df:2f:17:a0:1d:64:a9:44:95:6b:ea:ea:91:9e:53:74:46:
ff:bf:1b:f0:fd:f6:bf:57:b1:e9:22:21:41:3f:6f:53:01:38:
b2:d5:7a:2a:2a:01:af:4e:40:ba:85:d3:1d:5e:17:e0:b7:2e:
6f:df:da:0d:2b:27:b0:54:df:13:b5:ad:fb:bf:73:da:eb:ed:
80:ab:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:12:10 2026 by rpki-client