
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier: +qCBSKpLATrVPI9KzIYFSucbglg+5DupoLgsDt7hY8w=
Subject key identifier: 96:88:41:5D:1D:21:6D:C4:BB:9B:08:A6:C1:43:B0:E5:97:35:E5:18
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial: 02AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number: 02A4
Signing time: Wed 29 Jul 2026 02:33:40 +0000
Manifest this update: Wed 29 Jul 2026 02:33:40 +0000
Manifest next update: Wed 05 Aug 2026 02:33:40 +0000
Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: BvSPp5gBdZC1avTzDEbx7kPEEQb9Vy/9gLLarig4ZFg=)
2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Validity
Not Before: Jul 29 02:33:40 2026 GMT
Not After : Aug 5 02:33:40 2026 GMT
Subject: CN=6a696684-8911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:b8:8c:db:8f:59:ad:5f:a1:79:7e:c5:64:
27:b1:93:fb:73:c1:f7:12:82:b1:7a:7d:08:de:e5:
d8:d6:d6:78:8a:01:2a:1c:87:59:3a:bf:41:f1:d3:
8d:0e:77:21:59:c5:eb:af:6c:7d:ed:d4:46:8e:91:
7a:71:12:cc:08:e6:02:c7:a5:4c:34:a6:d1:54:f9:
e1:52:c2:c8:ec:27:40:d9:40:af:ea:a7:0f:2c:de:
f9:e5:c3:79:7d:0d:f7:c6:02:34:9d:8f:ec:3a:07:
ea:71:c5:e1:b8:75:50:b8:91:98:33:ea:1b:55:8b:
8a:e9:fc:69:0a:d3:10:3c:a4:98:38:59:35:ef:c6:
9b:88:64:02:30:a3:cc:9b:6e:8b:5d:43:e7:d2:de:
f1:6c:95:97:ea:95:f2:4e:53:13:79:6f:de:81:ba:
4a:af:28:8f:f9:07:f3:11:d3:0f:52:85:b5:ae:30:
4a:d9:25:f0:93:1b:23:70:58:5d:5f:7f:d6:42:0e:
ce:84:d0:73:2b:fa:6e:bc:37:2e:1b:5e:9e:de:63:
47:56:4c:c7:ba:40:0f:5a:a1:08:2b:54:11:69:11:
1f:dc:c4:2d:94:86:43:ef:67:04:5c:b7:f6:7b:9a:
f0:3f:dc:fb:f1:12:8e:44:bf:4e:6d:c6:ae:c2:2f:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:41:5D:1D:21:6D:C4:BB:9B:08:A6:C1:43:B0:E5:97:35:E5:18
X509v3 Authority Key Identifier:
keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:6e:f8:cc:30:30:23:6b:da:5f:7b:c1:cb:4f:f8:41:1e:
e5:0b:69:cc:97:66:99:94:21:d0:53:1e:16:74:73:b0:61:0a:
89:c4:76:64:ee:a5:11:b7:e7:e0:c0:9b:8d:e8:7e:da:85:0c:
66:ae:bf:c3:70:f1:bb:00:bd:a2:f0:33:22:13:4d:19:9d:34:
b3:c0:61:1b:73:4f:45:cf:89:e2:7c:93:9b:95:6a:ae:d9:69:
99:14:d9:5f:a7:fe:25:a2:57:62:d5:49:b3:19:bf:e8:cb:82:
40:63:e9:9d:37:d7:33:3f:41:e6:53:67:3d:44:ec:77:a5:bf:
57:ce:48:0b:74:25:b6:d3:59:f7:a8:1b:ac:79:4a:c0:75:ac:
3f:fa:b4:29:d1:bb:bd:7d:d6:44:a6:05:0a:31:f1:fe:d2:c4:
8b:19:07:e5:9d:bd:2b:85:69:6b:15:d0:ce:52:e4:04:3c:2c:
a7:56:c2:b7:1a:c5:11:df:3b:d7:14:33:8b:0f:ce:a2:69:79:
57:85:e2:75:78:ce:99:5c:62:fa:09:f1:29:ee:f2:6d:9c:35:
7c:d6:b7:81:ad:6c:41:f2:60:ca:b3:35:d4:14:f6:30:93:96:
d0:ee:65:a9:3d:7e:3b:7a:49:3a:2b:c7:be:6a:d8:80:fc:5a:
4a:f2:ba:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3
QTcyRUYwRjMwHhcNMjYwNzI5MDIzMzQwWhcNMjYwODA1MDIzMzQwWjAYMRYwFAYD
VQQDEw02YTY5NjY4NC04OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl4m4jNuPWa1foXl+xWQnsZP7c8H3EoKxen0I3uXY1tZ4igEqHIdZOr9B8dON
DnchWcXrr2x97dRGjpF6cRLMCOYCx6VMNKbRVPnhUsLI7CdA2UCv6qcPLN755cN5
fQ33xgI0nY/sOgfqccXhuHVQuJGYM+obVYuK6fxpCtMQPKSYOFk178abiGQCMKPM
m26LXUPn0t7xbJWX6pXyTlMTeW/egbpKryiP+QfzEdMPUoW1rjBK2SXwkxsjcFhd
X3/WQg7OhNBzK/puvDcuG16e3mNHVkzHukAPWqEIK1QRaREf3MQtlIZD72cEXLf2
e5rwP9z78RKORL9Obcauwi8NSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJaIQV0d
IW3Eu5sIpsFDsOWXNeUYMB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG
NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH
eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANF5u+MwwMCNr2l97wctP+EEe5QtpzJdmmZQh0FMeFnRzsGEKicR2ZO6lEbfn
4MCbjeh+2oUMZq6/w3DxuwC9ovAzIhNNGZ00s8BhG3NPRc+J4nyTm5VqrtlpmRTZ
X6f+JaJXYtVJsxm/6MuCQGPpnTfXMz9B5lNnPUTsd6W/V85IC3QlttNZ96gbrHlK
wHWsP/q0KdG7vX3WRKYFCjHx/tLEixkH5Z29K4VpaxXQzlLkBDwsp1bCtxrFEd87
1xQziw/Ooml5V4XidXjOmVxi+gnxKe7ybZw1fNa3ga1sQfJgyrM11BT2MJOW0O5l
qT1+O3pJOivHvmrYgPxaSvK6hQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:55 2026 by rpki-client