
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier: OVulwHsd1C1GZ11TrWFo+2oTKdrruxOktwJX2nJi6xc=
Subject key identifier: 1B:A0:D1:64:56:0F:B7:1E:28:1C:D5:34:8E:DB:8E:9B:2F:26:3A:E5
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number: 0234
Signing time: Mon 27 Jul 2026 04:10:40 +0000
Manifest this update: Mon 27 Jul 2026 04:10:39 +0000
Manifest next update: Mon 03 Aug 2026 04:10:39 +0000
Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: saPTcxEUHApnz6/qJk5r7C0ij7U2VjU/JNGSdqRfKdI=)
2: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: pEZ4PzrQv6b6ndP0HpfE6ghr1BZrsxRE21MGz3Ej87E=)
3: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: oIFWU2U3FpoDzzLzWPnxsOr677OIj+OUoCa9oBm5yVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Validity
Not Before: Jul 27 04:10:39 2026 GMT
Not After : Aug 3 04:10:39 2026 GMT
Subject: CN=6a66da40-d290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:95:14:4c:00:74:c7:61:2b:66:7f:22:06:
96:01:40:95:43:96:92:01:df:80:6f:9c:c8:17:55:
ec:e1:b4:3d:16:a9:6c:bd:6f:0b:30:ad:87:fd:c9:
b7:a1:e0:f7:b3:8e:4a:c6:73:80:2d:bc:dc:00:a2:
d4:49:d9:82:09:01:4e:23:e1:5a:cc:17:c1:f1:2c:
ab:35:12:df:17:48:7c:77:b6:af:ad:d7:3f:52:97:
e2:34:94:7b:1e:41:ef:92:4a:07:9b:bc:06:01:80:
93:98:16:00:1d:58:29:c3:d8:19:11:8e:74:d9:75:
27:5f:a5:19:9d:39:1c:0c:7b:c1:27:d6:ff:70:5d:
11:07:73:87:26:5a:72:c4:29:cf:4c:66:a2:fc:b0:
f2:87:a5:2c:50:dd:5e:15:70:5e:b6:89:ae:0d:9f:
49:07:e0:7c:24:4c:9e:c0:56:0a:ad:e3:ef:18:43:
da:a6:8b:1c:fc:97:2e:0b:e8:2b:3a:3d:dd:e5:16:
09:66:65:6c:37:b9:33:a6:05:69:6a:12:c1:11:98:
fa:8a:70:65:ff:19:81:be:a0:31:1d:93:e9:03:af:
1f:24:af:da:ec:18:c8:58:30:2e:94:41:93:aa:59:
3c:7f:8f:95:65:af:80:c5:86:a7:ac:43:3a:f5:34:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:D1:64:56:0F:B7:1E:28:1C:D5:34:8E:DB:8E:9B:2F:26:3A:E5
X509v3 Authority Key Identifier:
keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:12:64:5f:59:ec:de:67:14:7d:91:a1:ac:68:8e:93:87:77:
e3:05:5a:9b:5e:90:50:11:ec:0a:ca:83:d9:14:c7:29:3e:ed:
23:22:11:c6:b5:91:fb:d7:32:c3:2c:6a:b7:cb:9c:84:34:ec:
d5:ad:20:de:2c:0c:95:a0:94:ec:a2:43:f4:e2:72:b7:b8:9a:
88:f7:75:b0:3a:7c:b3:df:7f:2e:dd:de:f7:5f:29:7e:85:e9:
0c:93:bb:22:44:c2:48:52:1d:f8:bc:1b:68:af:01:41:90:bf:
f9:ce:99:ea:1b:5a:63:09:b1:27:cb:a0:0c:63:51:a4:e2:5b:
cc:25:c6:78:5e:3e:b8:76:dd:e0:fa:6a:a6:f0:e8:a4:9e:ef:
fb:cb:e7:cb:be:6f:73:6d:b2:d9:76:2b:ea:a7:3e:f7:9b:7b:
aa:84:0c:52:8d:2f:13:2f:80:22:8e:8e:ca:fb:d0:52:97:c1:
cf:d8:3b:b4:21:c8:83:e0:f5:d7:65:03:d8:c0:a4:5a:5f:cd:
0e:7c:69:43:4c:6b:d2:7c:c2:56:85:50:38:bb:5f:93:9f:86:
fd:bb:f3:a1:bc:af:c5:b8:c9:64:68:44:16:63:52:0e:bc:36:
51:b5:07:dc:97:9c:18:3b:36:dc:31:37:15:31:66:5e:57:db:
f6:3f:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:21 2026 by rpki-client