
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
File: 4OynvFsloMo3TZqDzEz5DdbPIgk.mft (raw, json)
Hash identifier: lqrQr/jzh+/vpQivrJTVf55fwwMtHesRaoyjJSXay0g=
Subject key identifier: 24:D6:28:6D:D2:6C:F5:C3:11:E8:E2:1D:7E:31:59:FB:66:96:D0:06
Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
Manifest number: 024F
Signing time: Mon 21 Sep 2026 02:24:59 +0000
Manifest this update: Mon 21 Sep 2026 02:24:58 +0000
Manifest next update: Mon 28 Sep 2026 02:24:58 +0000
Files and hashes: 1: 4OynvFsloMo3TZqDzEz5DdbPIgk.crl (hash: xsOMP8H6hH0Bobc1QgiMnuDQf9X4KlAdNRy7DtlLUus=)
2: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (hash: /Ca02zsxpAL8gcjil39VFFafzNLGZS+o8ZdBBpzgYJE=)
3: FBCA5E628A4E11EE8EFFA44BC4F9AE02.roa (hash: G4c9qIHjh7jRuzT8uRtPVyKbehGwTJD3pzh2RMSA5FQ=)
4: 23E0203034AF11EE90E6263DC4F9AE02.roa (hash: kQlooTOYF7DNmDZKuzweY7EEd5/y9UZLGCRSSGQFlGE=)
5: 2343647034AF11EE90E6263DC4F9AE02.roa (hash: +ktnd6zho24yZwUVIDb8JpM0wNDX8OLmDRgr8JefA9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C74B5, serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209
Validity
Not Before: Sep 21 02:24:58 2026 GMT
Not After : Sep 28 02:24:58 2026 GMT
Subject: CN=6ab0957b-a7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:e3:1e:6c:ce:b3:0d:99:cd:fd:39:47:d8:
98:1f:b5:81:b9:f4:f0:e2:ac:4f:53:3d:2f:6c:3e:
9b:b6:f0:b2:40:b0:f5:d5:a7:4f:59:a7:63:5d:f7:
ad:23:8c:2f:8e:82:49:f4:46:8e:d9:c4:b7:97:8f:
63:b7:6f:c4:37:50:8a:88:9f:4f:aa:3a:b5:6d:5a:
60:5c:c8:39:08:2c:87:43:c7:ac:fe:50:ae:f0:ff:
e3:85:8e:d7:89:5b:7a:d9:ae:55:d5:26:3f:94:7c:
02:4a:4c:57:41:ab:e9:1a:33:51:34:f5:1a:3b:2d:
ca:df:0e:10:e5:e7:bc:ab:04:15:36:8d:98:13:e3:
24:7e:c2:d4:73:42:35:1c:35:32:cd:58:5e:e6:23:
56:b8:5e:32:7c:8b:6a:b0:80:c0:e3:f3:e4:f2:bf:
04:08:c5:88:73:43:27:f5:46:d2:a2:b2:15:6b:0d:
24:5c:c8:e8:c2:a6:d7:55:06:bc:87:7c:6c:16:08:
d3:0a:a7:91:bf:f7:62:4a:76:01:85:02:7c:c9:a9:
61:d1:1a:97:be:0c:e7:1c:f6:2f:55:22:68:cd:fb:
ac:85:c6:81:78:29:1a:43:20:38:b8:df:86:c7:16:
c0:52:3e:37:df:bd:e2:a7:19:cb:2f:fe:1a:70:e2:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D6:28:6D:D2:6C:F5:C3:11:E8:E2:1D:7E:31:59:FB:66:96:D0:06
X509v3 Authority Key Identifier:
keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:30:5b:41:1e:2d:f9:3e:b9:37:28:d3:cf:5f:33:22:98:66:
fa:09:98:df:d1:e3:a2:cc:7c:0b:89:e1:d6:7c:1c:09:cf:37:
10:fb:7a:33:0f:97:3a:d7:74:a0:da:5c:8d:57:3b:55:bd:3a:
4a:1c:66:ef:90:e4:7b:02:33:41:3e:12:d0:d6:74:84:6c:40:
ea:30:72:e3:05:5b:c5:14:5d:ed:16:ea:88:dc:47:20:a3:6b:
19:8e:1f:c8:82:14:73:0c:f7:6a:a2:3b:b0:e9:d4:12:49:43:
17:e2:7f:60:38:3a:81:c9:60:38:40:f7:53:c2:cc:52:40:49:
06:4b:da:42:0f:b9:1b:44:c3:ad:90:d8:a4:8c:20:18:09:a8:
67:7b:c2:7d:a7:01:1b:fa:69:05:0d:9f:a3:96:67:af:c9:9b:
52:2e:2a:30:1c:5c:7c:03:66:d9:4c:63:5a:d1:8a:d9:8d:37:
fc:57:e6:52:70:af:80:79:03:df:03:b0:16:47:a1:ba:a8:71:
8f:6d:46:c4:e2:c2:09:13:3b:9c:97:33:59:dd:34:72:50:c1:
39:cb:b1:f3:39:1a:68:4f:dd:30:73:eb:f5:ec:01:6d:87:ab:
a7:bf:3d:dc:ed:b3:d7:f1:e8:1a:58:13:d3:b7:e1:af:1d:0c:
33:95:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:03:05 2026 by rpki-client