
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json)
Hash identifier: Hi8Oi6zmzbogljX4jVYPJ/MuCugsUjvq+3JLgwGkJhA=
Subject key identifier: DB:04:62:1D:42:B5:2F:14:D2:0B:42:FA:32:D8:13:7F:70:C1:4B:15
Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
Manifest number: 0289
Signing time: Sat 13 Jun 2026 01:49:09 +0000
Manifest this update: Sat 13 Jun 2026 01:49:09 +0000
Manifest next update: Sat 20 Jun 2026 01:49:09 +0000
Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: aJP5+yQ7v2IOzyLadUCiicWK145RM+7i+2xftKlwTCs=)
2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: awkTPl26KI0rBiORXFgcUDdXb6GjlZiA17iIlANQPS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl
rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Validity
Not Before: Jun 13 01:49:09 2026 GMT
Not After : Jun 20 01:49:09 2026 GMT
Subject: CN=6a2cb715-457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:e8:80:bc:f0:4c:4a:84:2d:4f:9f:a9:1d:
70:96:97:7a:65:f5:c4:6b:50:4f:67:9f:28:4f:f8:
37:0b:f0:a0:59:00:a0:dc:b7:ab:c8:b8:5e:61:ad:
c0:b1:cd:a9:4f:99:e8:9c:78:9b:16:72:a3:c2:b9:
23:48:b5:c1:04:81:c1:85:75:e3:70:c1:e8:b8:d0:
e9:88:46:14:db:f0:53:b6:55:0c:a3:f3:2a:71:95:
49:59:85:cf:8b:f9:73:6b:ac:02:2d:35:82:d8:05:
2d:f7:45:97:d8:db:c6:ff:b5:3e:f6:aa:35:32:b8:
bc:9b:ac:b9:c0:12:98:69:91:ea:eb:17:78:2d:8f:
b1:7e:a0:3f:87:09:6e:12:02:3f:df:49:8b:b0:07:
eb:ed:e3:17:4b:97:2b:5a:3a:3c:36:d1:9d:22:98:
af:03:53:2d:db:2f:48:ed:2c:97:17:e0:13:d4:62:
5d:b9:c6:94:10:ac:7a:49:3e:0e:1b:0a:70:c7:bb:
22:16:bc:2e:f8:0b:99:f2:dc:73:80:0e:d0:71:04:
54:92:da:df:19:e5:69:06:0f:68:0c:1b:86:15:b0:
e6:e4:f3:a8:48:a4:da:36:fe:98:da:5a:4b:93:bd:
34:ac:eb:a6:f1:0c:61:38:d8:a2:7b:a7:c1:27:97:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:04:62:1D:42:B5:2F:14:D2:0B:42:FA:32:D8:13:7F:70:C1:4B:15
X509v3 Authority Key Identifier:
keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:80:5f:9c:b4:ca:d2:b1:53:07:bb:c7:23:48:70:0e:93:61:
25:5e:a8:da:48:0f:a6:af:a2:e9:05:9a:57:f3:03:62:d6:53:
65:0d:a2:aa:64:15:ae:a0:80:a5:43:f3:20:7b:6d:22:9a:cc:
07:84:23:09:50:27:72:18:7f:bb:ef:2e:a4:ef:bf:d2:01:76:
ec:e0:72:47:67:42:c4:ba:27:fe:62:54:ed:a9:08:51:ee:21:
d5:02:6f:95:8d:6a:fc:58:a1:45:8d:dc:15:1a:0a:c6:48:5d:
62:fc:8a:df:8d:b1:87:61:98:28:bf:1f:22:50:db:c4:d6:38:
21:b8:0c:d4:75:e2:8a:b2:89:06:c5:b7:c2:eb:56:9c:0d:4a:
5f:df:53:0c:25:ce:57:7a:7e:0a:4b:db:3a:e5:c2:2c:81:39:
53:07:0a:c7:3b:f5:ce:1e:6d:67:b8:50:86:4d:71:b7:2f:98:
24:4b:71:68:e9:f1:c2:90:f7:62:85:48:7d:54:21:d9:99:e4:
11:01:77:e3:6c:c4:f8:18:6d:3c:28:c2:de:8b:f1:cb:bc:e4:
ce:e8:84:38:12:72:f2:dc:9a:d7:93:93:ac:4e:84:d3:16:43:
87:40:c1:b3:95:c5:a3:52:b7:90:e3:63:04:77:05:55:54:3d:
c8:70:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:56 2026 by rpki-client