
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json)
Hash identifier: IIbLxKGZUJmb1LyqgnwuWzly8xucziQoRl4ymhasN7g=
Subject key identifier: 1D:FD:A4:26:3E:2A:12:A8:75:CD:74:E8:DF:71:EB:16:43:B7:79:2A
Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Certificate serial: 024C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
Manifest number: 0232
Signing time: Mon 27 Jul 2026 04:11:04 +0000
Manifest this update: Mon 27 Jul 2026 04:11:04 +0000
Manifest next update: Mon 03 Aug 2026 04:11:04 +0000
Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: C/QcnKlDODzBsokI3PJbwCaog1jvN1do0vfrKQ0qlD0=)
2: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: G4c9qIHjh7jRuzT8uRtPVyKbehGwTJD3pzh2RMSA5FQ=)
3: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=)
4: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: +ktnd6zho24yZwUVIDb8JpM0wNDX8OLmDRgr8JefA9c=)
5: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: /Ca02zsxpAL8gcjil39VFFafzNLGZS+o8ZdBBpzgYJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Validity
Not Before: Jul 27 04:11:04 2026 GMT
Not After : Aug 3 04:11:04 2026 GMT
Subject: CN=6a66da58-d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:e5:04:15:83:15:2d:17:1d:cb:ec:01:ce:
08:84:bf:f8:ff:b0:c8:d6:ca:52:e0:da:bc:5b:27:
16:83:71:1a:c2:6d:e9:79:27:f4:af:a6:0d:9d:15:
6a:c4:e8:8e:22:dc:49:9f:46:1f:69:0e:29:fa:a1:
2d:3b:23:d7:67:97:37:da:9a:5c:de:bc:68:a3:41:
1c:cc:dc:0b:5f:5c:99:d0:ab:5a:dd:07:fc:51:8c:
8c:ec:98:e6:98:27:3d:a1:0c:75:13:d1:55:ed:97:
0b:3d:af:c4:ff:e5:ea:ce:0c:4e:82:c2:ad:b8:ca:
77:4f:6e:47:b9:fd:ca:37:51:65:e0:4a:d8:35:46:
f1:e7:5a:80:ea:56:0f:c4:7d:9a:15:05:43:ca:c0:
1d:eb:1a:c8:e4:51:4d:26:94:50:90:54:4e:52:c1:
0f:3d:4c:33:8e:5e:37:7b:54:68:66:6b:ee:48:f2:
ca:3b:6c:aa:53:7b:89:cf:0d:7b:4f:ae:53:7a:88:
5c:e1:59:40:ca:1a:8a:da:7e:bf:1e:00:73:8d:fd:
2c:a7:df:3f:dd:47:3f:c9:a7:08:ca:42:9a:0b:dd:
f5:0f:b0:97:d3:8e:10:88:32:ca:19:73:c6:7e:49:
7a:2b:60:92:fe:20:ef:3a:5b:5d:a0:4f:fb:f1:54:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FD:A4:26:3E:2A:12:A8:75:CD:74:E8:DF:71:EB:16:43:B7:79:2A
X509v3 Authority Key Identifier:
keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e2:46:57:1d:49:7f:9f:24:a8:ad:c4:57:14:91:58:55:37:
61:9f:11:4a:30:49:e9:33:43:0a:c8:e5:47:d0:55:ae:4d:2b:
8e:f2:7b:95:2e:68:99:5e:12:c0:f7:dd:4f:15:e3:f4:3c:0f:
8e:58:7c:51:2a:a0:84:51:40:15:de:3b:17:14:b6:fb:9c:4f:
f8:ce:7e:d2:23:bc:b9:95:d8:49:a4:7d:b9:a6:77:2a:cc:51:
8a:bb:bf:b0:94:18:48:1a:90:12:c8:4d:5d:df:ff:f2:44:6f:
7d:5c:5b:c1:26:65:80:b6:41:ad:9f:ff:38:f3:37:a4:4d:a5:
30:0a:59:b5:59:02:d9:36:36:fd:29:ef:19:84:83:96:61:18:
a0:a6:fb:dd:85:44:75:fb:97:16:65:01:90:a9:c9:fd:67:5e:
5e:c7:e1:35:fd:25:07:5e:1a:2d:fa:5c:fa:b2:26:36:ce:63:
09:d7:ea:e7:c7:7c:55:ac:43:9e:e5:45:90:e1:b7:d7:dd:b5:
ff:4f:e8:7b:12:9c:19:35:32:81:f2:77:b5:47:3f:c6:74:22:
ac:1b:0d:b6:6f:f0:48:e1:6a:fd:c3:f0:fb:ff:bc:99:ca:6a:
ec:34:d2:50:1a:62:0f:b0:9d:57:6b:8c:29:62:13:8a:bf:20:
82:4d:4f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:09 2026 by rpki-client