
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json)
Hash identifier: 7kMYy+VAOQRYYGCifDyVccuDm4caLrfkIV+kde2z+/8=
Subject key identifier: 2C:65:56:19:F5:CA:B0:69:3F:A7:DA:0D:AE:6B:4F:47:3B:CB:8C:DB
Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
Manifest number: 019C
Signing time: Fri 25 Sep 2026 04:22:30 +0000
Manifest this update: Fri 25 Sep 2026 04:22:29 +0000
Manifest next update: Fri 02 Oct 2026 04:22:29 +0000
Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: xQq4cROIkNRBYOqyBtCUhZRF1c4vCKL80jle1YkkRM8=)
2: 47C532D045B911EF93633071C4F9AE02.roa (hash: Hl209KOZgglZ4+SCqzKmdcJ+m6OFPPd68T8PhDnGZH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Validity
Not Before: Sep 25 04:22:29 2026 GMT
Not After : Oct 2 04:22:29 2026 GMT
Subject: CN=6ab5f706-08c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:b0:50:b8:c8:9b:e7:84:26:a9:66:d7:7b:
5b:c1:14:0c:9f:96:c5:42:57:91:38:2e:40:6c:09:
81:4b:a2:c7:d8:90:ee:74:be:11:d9:f7:fd:bb:c2:
4d:ae:aa:33:8d:31:2e:9a:23:63:cc:f2:8d:1c:c6:
e3:fd:39:c0:4c:71:ec:7e:7c:e8:3f:c9:67:84:f5:
90:59:11:98:d6:01:7a:d5:b2:aa:93:84:cd:0e:95:
9c:92:c7:0d:29:0b:88:98:13:a0:12:a7:e0:2d:66:
54:33:fa:d5:1c:d8:db:bc:ce:7e:f9:2d:0a:d0:d5:
01:b5:83:4a:5c:a5:67:f6:23:f7:72:40:41:bf:4b:
ed:3f:78:5f:96:5b:a6:70:1e:0f:fc:a0:09:66:69:
c0:75:a1:5b:13:7c:36:1b:94:a1:70:79:a8:99:7b:
2a:d3:db:a9:b2:cd:16:35:4a:50:5f:ee:19:53:bf:
ad:87:34:ff:52:90:6b:bd:d5:0f:66:22:09:a1:1d:
08:09:eb:ae:44:1d:64:e9:b4:d4:97:4e:81:00:fe:
c0:a1:56:a0:f4:78:4a:b0:6c:4b:d1:74:9e:e7:8e:
b7:67:fe:5b:93:06:ed:19:d3:aa:b4:a0:46:d4:ef:
0e:00:5a:94:c6:68:33:6c:ec:26:ae:66:61:cb:41:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:65:56:19:F5:CA:B0:69:3F:A7:DA:0D:AE:6B:4F:47:3B:CB:8C:DB
X509v3 Authority Key Identifier:
keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:31:e8:77:7c:8f:fa:09:01:c6:02:9c:ff:1c:55:df:bf:
d3:2c:cd:43:36:75:64:70:d0:ca:e8:5f:72:8f:a9:5f:95:15:
08:5d:da:90:09:21:66:f1:15:29:cc:5a:06:ef:1f:5a:9e:f8:
d8:f5:15:6c:f8:13:68:96:f0:be:db:d6:9c:94:31:ff:12:65:
b3:c4:ff:97:d6:91:74:cf:c7:77:ca:04:b8:6e:59:06:94:e8:
e5:16:a4:d0:d7:cb:99:77:01:de:a5:b4:aa:df:59:2c:a2:c2:
9d:e3:d3:cf:9f:a7:ae:18:b2:db:3c:d2:b5:45:d1:90:58:cc:
f9:99:f1:3d:fb:80:b2:e4:cd:9a:96:98:ac:fb:f8:38:69:1a:
d3:de:97:6e:c5:13:bd:e1:af:5a:cb:51:77:a6:d5:df:d0:75:
e8:c8:1f:48:ab:53:4b:fd:84:e5:07:50:6d:a2:96:5a:47:da:
64:1c:80:5d:1e:d0:3b:dc:20:37:a9:c8:2e:b5:b9:85:12:63:
9c:a4:3c:f8:ee:f0:e7:74:b8:85:e6:e5:5a:1e:fd:e2:8d:c5:
62:f9:8c:4f:16:c7:5f:7e:e9:fb:76:e2:5a:be:e2:4e:70:0c:
89:d3:25:34:e5:63:a2:ad:93:2e:35:c5:8e:d6:2a:1a:db:7f:
90:d0:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:58:15 2026 by rpki-client