
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json)
Hash identifier: kzfaBdN0k9mKLJzd3Jna94dFzyD5YvVZhKnP/bgWGYs=
Subject key identifier: BD:81:2E:20:60:E7:3C:4E:18:F8:27:35:6C:42:66:A3:69:EF:A0:3C
Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
Manifest number: 017D
Signing time: Mon 27 Jul 2026 06:29:16 +0000
Manifest this update: Mon 27 Jul 2026 06:29:16 +0000
Manifest next update: Mon 03 Aug 2026 06:29:16 +0000
Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: euvsx5oOXXx+JS0Qoe0fupU5w9o8LP6K33qvBVrtSCI=)
2: 47C532D045B911EF93633071C4F9AE02.roa (hash: Hl209KOZgglZ4+SCqzKmdcJ+m6OFPPd68T8PhDnGZH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Validity
Not Before: Jul 27 06:29:16 2026 GMT
Not After : Aug 3 06:29:16 2026 GMT
Subject: CN=6a66fabc-923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:6a:3c:b4:43:a5:97:c7:4c:69:fd:81:0c:
75:68:f0:9b:01:e1:a0:b0:05:c5:71:ae:b9:ce:48:
d2:ee:b8:4a:cf:06:84:5e:64:9c:af:2b:b5:3d:c3:
16:3b:d2:15:14:2d:5b:8a:6a:1d:96:af:ba:11:a1:
37:0a:ff:7f:4b:d7:7d:d1:1d:63:5f:ee:28:22:12:
ff:24:26:07:99:3f:9e:db:76:c8:0f:2c:25:bd:37:
6d:15:ce:bd:1c:3b:5e:21:83:14:3d:4b:4b:5c:db:
25:3f:71:84:d5:51:14:9b:24:fe:bf:05:c1:40:17:
39:f7:53:80:58:cf:1a:62:62:19:fb:f9:12:c4:8e:
cd:3c:97:18:ca:2b:b6:51:a0:ee:6b:e7:11:b9:47:
df:2d:c8:e5:09:5c:d5:8c:fc:c6:ea:ae:73:90:6d:
19:9f:96:45:0a:5d:64:77:c0:32:82:b3:6c:a3:86:
40:4a:bb:e7:f0:92:63:e3:4e:49:9d:7a:c1:de:d6:
d5:31:30:0e:6f:44:8b:54:97:9f:0a:36:8c:d8:a1:
b2:3c:6c:e3:fe:24:97:e6:82:95:53:02:7f:85:6f:
b8:c9:4d:a5:f4:de:94:6a:14:f8:23:dd:f8:d8:81:
2c:a7:8e:0d:e4:33:29:18:ae:27:9c:21:37:32:7c:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:2E:20:60:E7:3C:4E:18:F8:27:35:6C:42:66:A3:69:EF:A0:3C
X509v3 Authority Key Identifier:
keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:f9:ba:12:84:19:5f:07:b2:56:7d:2e:25:b4:ee:78:d9:96:
16:22:6d:69:fb:72:e1:7a:e4:f9:c1:34:23:16:5c:b7:69:51:
92:2d:1c:9a:86:91:a3:93:17:18:39:53:da:ad:00:62:ca:8b:
d8:62:87:a9:6c:c4:48:fc:5a:e1:1a:c9:4a:37:f3:36:3c:b0:
1f:8d:58:04:9b:38:d6:e6:5a:34:f3:5a:73:5b:6b:04:86:d7:
13:96:64:cc:d0:b8:19:f2:1b:87:42:e5:dd:99:6d:2d:8d:42:
36:75:29:6e:e0:89:4e:76:0f:1f:5f:11:24:d2:94:b9:28:71:
95:36:df:67:c6:91:43:bb:97:dc:82:21:2a:f8:1c:6f:7b:3b:
04:e8:69:65:5f:b3:ea:c0:5a:04:6e:11:70:0a:d6:31:5a:6b:
87:c1:16:87:ed:0a:3f:80:bb:24:7a:61:58:3f:2f:0e:8f:bf:
eb:36:be:a7:a6:32:be:36:b7:5e:77:a2:3c:b1:79:0a:49:2a:
1c:21:0a:15:72:45:20:f9:b7:4b:ae:79:dd:cf:3d:1c:a3:14:
9a:f8:41:5d:cc:48:29:d8:a5:ed:9d:82:3c:a4:0f:c6:a6:2c:
e9:1d:67:ff:33:2c:6a:96:fb:66:c9:34:7e:38:c6:eb:f0:6c:
b9:c9:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:42 2026 by rpki-client