
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json)
Hash identifier: rLBXMqiXTohgOqw225bUUVV6cYwd1hZbcBCsqwrDtKs=
Subject key identifier: 3F:CA:48:73:B7:C0:8D:B6:C9:0C:DE:30:8D:7B:DA:86:82:10:DC:64
Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Certificate serial: 0DB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
Manifest number: 0DAA
Signing time: Fri 12 Jun 2026 17:54:40 +0000
Manifest this update: Fri 12 Jun 2026 17:54:40 +0000
Manifest next update: Fri 19 Jun 2026 17:54:40 +0000
Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: CQeiOZ7acePaZce1vo7hfIJPvPvLYn10SSsTf7LL27A=)
2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 4+Ac/qmp1PMvnSJouQnIg3+M0ch95gCYSQtb1scOlcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3513 (0xdb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Validity
Not Before: Jun 12 17:54:40 2026 GMT
Not After : Jun 19 17:54:40 2026 GMT
Subject: CN=6a2c47e0-2cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:7f:cd:cf:68:34:c6:31:7d:3f:ec:7d:de:
7c:17:d0:32:76:b1:0c:a8:a0:92:34:6b:bc:fa:1b:
8e:8b:08:78:58:63:1f:ff:fd:bc:f0:7e:e4:68:f2:
5b:9f:9b:dd:67:81:9c:5f:42:3c:f6:ec:92:35:31:
0b:ba:51:3b:e0:4a:76:d8:07:11:7d:29:b1:f5:c4:
ed:3f:ed:eb:09:a6:57:48:fe:d3:ca:55:07:96:d0:
4f:4e:50:ef:1e:4f:03:1b:48:5e:a6:2b:1f:10:b0:
dc:ae:34:3b:32:85:42:f0:f5:f3:dd:ea:c7:69:b9:
8a:b1:ff:cb:e8:7a:a8:70:1b:9e:ec:89:5a:fe:44:
d2:4d:7d:d0:fe:bd:ee:a9:7a:34:e5:8d:be:2b:ba:
12:e6:dd:19:0b:b6:4f:48:56:18:32:58:2e:b2:28:
64:82:5e:1a:86:db:a7:ce:40:8a:e0:6e:19:c4:76:
7d:68:c6:03:e0:a4:d6:82:5b:8e:25:8b:f8:18:cf:
8d:ad:d4:b2:68:6f:ad:2e:36:71:c3:bc:cd:31:f0:
15:0d:74:15:47:c4:1d:f6:a1:a5:12:5e:9a:d7:af:
b4:3f:5f:92:ee:ee:37:0c:50:e6:e5:f2:74:0d:8c:
ae:d2:97:11:9f:56:0d:84:4a:a9:ff:e7:5c:14:a1:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CA:48:73:B7:C0:8D:B6:C9:0C:DE:30:8D:7B:DA:86:82:10:DC:64
X509v3 Authority Key Identifier:
keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:07:e7:0d:59:17:e5:4b:9f:1a:ed:de:63:b1:ea:b9:ef:f9:
bc:14:54:d4:3b:c5:c4:74:88:d7:66:2f:7f:a3:e9:5a:69:19:
15:b7:35:6d:65:bd:4a:e1:49:61:5a:bb:ab:35:c9:36:1b:18:
e3:a0:1d:a0:8b:ee:9a:6a:63:6f:a0:d0:b0:f7:4b:1b:f9:0c:
06:b0:b0:86:2b:32:98:7d:02:10:ce:88:6b:c7:f1:31:96:2c:
e7:70:c4:63:1c:77:de:62:55:80:7d:4b:ee:3a:34:88:25:e4:
08:27:c1:92:de:76:57:d3:34:52:2f:5d:89:91:21:52:7c:54:
43:0d:f9:6f:b8:f1:bd:ca:eb:23:5c:83:d1:1d:a6:65:fd:73:
42:ab:8d:34:3a:a9:3c:ff:80:3c:b3:a6:4b:2f:d8:2a:22:7a:
35:65:e5:65:ed:c5:56:b7:d1:8f:06:00:b6:79:6e:ff:9a:f8:
07:55:d2:f4:38:74:64:26:01:52:ae:db:3e:58:25:f1:ba:fb:
20:f9:34:16:e1:5e:fc:f5:98:7c:c3:45:df:5d:eb:6f:ff:53:
b6:87:0b:58:f4:c7:51:3f:22:f3:11:f8:a3:7f:47:8a:f0:9a:
2b:5a:e5:02:38:0b:ab:29:c2:05:60:37:e5:9b:86:a6:81:bf:
58:ed:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:04 2026 by rpki-client