
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
File: 4Y-ehXQ6vsrARiuP30On20pij_k.mft (raw, json)
Hash identifier: 759YtsFWiMKsaiofTSzmt4GEJpjpbgXC/e+/1FYq83U=
Subject key identifier: 15:3F:25:90:87:A1:71:40:8A:DF:CF:3D:5E:30:80:5F:60:D3:19:49
Authority key identifier: E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
Certificate issuer: /CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Certificate serial: 04C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
Manifest number: 05D4
Signing time: Mon 27 Jul 2026 00:54:04 +0000
Manifest this update: Mon 27 Jul 2026 00:54:03 +0000
Manifest next update: Mon 03 Aug 2026 00:54:03 +0000
Files and hashes: 1: 4Y-ehXQ6vsrARiuP30On20pij_k.crl (hash: WCYLZCvv7OaLRTdsKYvj/IhujCNdtgZLa9qvJM8zOYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl
rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1216 (0x4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9A8D, serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9
Validity
Not Before: Jul 27 00:54:03 2026 GMT
Not After : Aug 3 00:54:03 2026 GMT
Subject: CN=6a66ac2b-3099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:ad:3e:14:86:16:61:16:ce:ff:3f:49:48:
e5:bb:a5:d2:78:0e:05:67:e6:f4:a3:fe:37:ad:ef:
12:b6:02:2f:ea:55:cd:88:26:91:17:d9:fa:11:5c:
5a:8d:57:c8:76:f0:24:d2:be:85:e5:15:e5:ca:ba:
d0:ca:cf:a3:93:ca:1b:79:1d:73:60:ea:a4:86:37:
47:18:ca:fa:c1:9e:20:5d:4c:f9:30:ce:eb:a9:5b:
19:df:d1:d0:6e:f4:cc:0f:77:c2:d0:92:8f:48:81:
fd:55:aa:5f:44:9c:3a:e8:49:77:f6:6b:5a:f8:da:
8a:53:ed:f3:d1:7b:45:a4:24:ae:28:5a:e5:d1:b1:
98:33:85:e2:dd:ff:8d:7e:28:af:d2:9d:ca:9b:cf:
91:10:aa:07:0e:41:5e:8a:e9:f9:f5:36:c0:8d:21:
fe:8c:34:21:1d:4d:8e:ee:b5:aa:89:b7:c3:65:66:
54:d9:d2:0b:ca:fc:63:7a:37:22:25:73:6d:83:3b:
2b:d0:5b:ec:3b:fd:41:b3:f4:f8:2b:ed:5a:ed:5c:
22:18:a7:ae:7e:5c:fa:69:0b:eb:b5:06:8c:12:0f:
2f:40:27:ae:a3:6d:fe:7b:17:5b:16:56:a1:ec:34:
37:36:f9:30:a4:79:2a:c1:a3:43:85:49:c5:d9:bb:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3F:25:90:87:A1:71:40:8A:DF:CF:3D:5E:30:80:5F:60:D3:19:49
X509v3 Authority Key Identifier:
keyid:E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7f:ee:e4:0d:29:00:a4:ff:f3:b2:42:84:05:a3:66:e1:06:
07:a3:74:ac:68:e7:aa:f0:f7:9e:99:5d:19:57:05:35:49:c0:
32:77:90:ff:e3:a7:19:7a:6a:60:b9:00:87:83:49:45:4f:e8:
29:15:4a:6d:0b:2d:81:82:86:e6:7e:de:b1:20:0e:9d:ad:fb:
b3:d7:cd:77:6b:7f:25:db:cc:91:8b:a2:25:18:e5:d8:42:e6:
af:99:b2:d3:53:cd:e0:c5:68:9b:88:20:b7:14:2c:57:3d:d7:
8c:a2:71:9c:ad:32:c2:a2:2e:9b:8f:11:f7:aa:c1:91:1f:16:
f4:b9:7e:bd:6b:ac:b3:b2:af:06:eb:83:f9:78:ff:a3:e7:bc:
45:aa:c9:e6:de:68:e8:46:5f:99:0c:b2:a4:c0:84:96:b5:13:
17:9c:2f:ff:05:f5:9a:0b:7d:87:d3:a0:73:0a:22:b0:6a:5b:
da:1c:93:a1:01:a8:95:e2:0e:00:cb:04:a2:13:73:c5:b2:4f:
1c:1d:3f:ba:25:cd:88:28:94:72:e0:c2:61:3e:58:2c:e5:2c:
e8:c6:5a:10:73:d8:0f:fd:1f:68:66:a9:0e:0d:57:22:de:5a:
45:da:c4:cb:6e:48:4d:7d:ed:2d:06:33:88:aa:e0:e8:13:66:
96:aa:06:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlBOEQxMTAvBgNVBAUTKEUxOEY5RTg1NzQzQUJFQ0FDMDQ2MkI4RkRGNDNBN0RC
NEE2MjhGRjkwHhcNMjYwNzI3MDA1NDAzWhcNMjYwODAzMDA1NDAzWjAYMRYwFAYD
VQQDEw02YTY2YWMyYi0zMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyu2tPhSGFmEWzv8/SUjlu6XSeA4FZ+b0o/43re8StgIv6lXNiCaRF9n6EVxa
jVfIdvAk0r6F5RXlyrrQys+jk8obeR1zYOqkhjdHGMr6wZ4gXUz5MM7rqVsZ39HQ
bvTMD3fC0JKPSIH9VapfRJw66El39mta+NqKU+3z0XtFpCSuKFrl0bGYM4Xi3f+N
fiiv0p3Km8+REKoHDkFeiun59TbAjSH+jDQhHU2O7rWqibfDZWZU2dILyvxjejci
JXNtgzsr0FvsO/1Bs/T4K+1a7VwiGKeuflz6aQvrtQaMEg8vQCeuo23+exdbFlah
7DQ3NvkwpHkqwaNDhUnF2bvrLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBU/JZCH
oXFAit/PPV4wgF9g0xlJMB8GA1UdIwQYMBaAFOGPnoV0Or7KwEYrj99Dp9tKYo/5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUE4RC8zMkYxRjRDMjgz
RTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZzckFSaXVQMzBPbjIwcGlq
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRZLWVoWFE2dnNyQVJpdVAzME9uMjBwaWpfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUE4RC8zMkYxRjRDMjgzRTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZz
ckFSaXVQMzBPbjIwcGlqX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHn/u5A0pAKT/87JChAWjZuEGB6N0rGjnqvD3npldGVcFNUnAMneQ/+OnGXpq
YLkAh4NJRU/oKRVKbQstgYKG5n7esSAOna37s9fNd2t/JdvMkYuiJRjl2ELmr5my
01PN4MVom4ggtxQsVz3XjKJxnK0ywqIum48R96rBkR8W9Ll+vWuss7KvBuuD+Xj/
o+e8RarJ5t5o6EZfmQyypMCElrUTF5wv/wX1mgt9h9OgcwoisGpb2hyToQGoleIO
AMsEohNzxbJPHB0/uiXNiCiUcuDCYT5YLOUs6MZaEHPYD/0faGapDg1XIt5aRdrE
y25ITX3tLQYziKrg6BNmlqoGoA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:38 2026 by rpki-client