
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier: EYyIN3ETeJWBp8XZtNc0Of9XIrLm2PfQcGxhDZdQZ/0=
Subject key identifier: D1:C8:EA:37:D9:53:52:A6:FF:78:04:8C:5A:C1:AA:A7:45:A1:C4:68
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial: 0263
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number: 0251
Signing time: Mon 21 Sep 2026 02:24:39 +0000
Manifest this update: Mon 21 Sep 2026 02:24:39 +0000
Manifest next update: Mon 28 Sep 2026 02:24:39 +0000
Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: 0PH/PF9GkREMM+cOZC44dt0RSQavJn+J1fi1zwNSITM=)
2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: oIFWU2U3FpoDzzLzWPnxsOr677OIj+OUoCa9oBm5yVg=)
3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: pEZ4PzrQv6b6ndP0HpfE6ghr1BZrsxRE21MGz3Ej87E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Validity
Not Before: Sep 21 02:24:39 2026 GMT
Not After : Sep 28 02:24:39 2026 GMT
Subject: CN=6ab09567-3812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:fa:db:8b:80:ad:17:7a:08:9a:4d:d6:2a:
f2:de:70:fb:3b:e7:4f:af:2a:8f:37:75:c2:35:c6:
4c:3e:f9:b4:21:01:31:b1:60:04:a2:31:a7:f9:ca:
aa:81:b6:33:b6:7b:64:f1:e3:f0:34:e3:78:66:2f:
8f:ef:a4:ad:03:d9:46:8f:fa:b3:66:d7:f2:6e:e5:
ce:ca:b3:5d:7b:3a:53:0c:a6:9c:b4:d6:c6:49:e6:
e8:86:21:e1:30:84:58:f0:04:7b:3f:d3:21:c4:9c:
ac:45:c4:41:0d:29:40:c7:dd:46:1b:6e:17:39:51:
bc:02:94:1e:34:f5:27:73:10:9f:3e:df:4a:c6:3c:
a5:54:e3:4d:8e:82:8e:25:56:e9:08:0c:54:1e:65:
25:7a:2d:06:54:ac:d6:73:93:20:8f:81:5f:d0:3b:
4a:e6:da:f7:ac:1a:32:99:22:da:bc:52:17:c9:03:
bf:67:fa:a0:af:80:6d:be:96:a1:d7:46:b4:e8:33:
ac:7e:88:c8:30:a3:89:0e:af:03:f4:e6:ef:98:6c:
16:2b:54:45:2f:ad:59:1b:f8:e0:01:63:95:85:b5:
c7:00:5c:35:b5:bb:08:7b:c3:c3:3d:2a:48:40:5b:
84:24:33:67:69:65:f3:16:34:77:72:e2:ea:ae:69:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C8:EA:37:D9:53:52:A6:FF:78:04:8C:5A:C1:AA:A7:45:A1:C4:68
X509v3 Authority Key Identifier:
keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b7:d0:40:43:23:93:d3:98:c8:88:01:ef:f7:8e:f9:a2:62:
32:1c:34:69:d2:4d:76:6a:dc:ba:c2:89:81:0b:e6:51:4d:a1:
2d:d6:f3:21:2e:f6:cf:f3:b3:19:b6:26:27:93:91:f9:15:2c:
10:be:1f:bc:d1:b4:44:0e:cf:2c:52:23:f8:f3:d7:44:ed:6f:
4c:f5:f5:a5:e0:d4:ac:ce:46:68:63:a2:f9:fc:c0:b7:53:67:
ac:8a:a0:f8:36:f7:84:ee:bc:9a:e4:20:3f:7b:4f:07:be:f8:
6d:91:43:df:e1:98:2e:3c:09:2a:9f:3d:92:63:3e:67:2a:36:
fb:fe:c1:f8:3b:88:e3:29:01:b6:e5:ac:3f:3d:2a:12:37:92:
ad:71:9d:05:4d:bc:6a:3f:24:47:2f:e0:4d:35:94:76:64:0d:
03:5b:1b:ed:cf:4b:e6:aa:ef:b0:6f:07:38:4d:a6:a8:70:63:
cd:e2:1d:2c:f9:ac:6f:82:6b:71:f1:ff:40:b3:2d:48:46:31:
44:9e:3f:58:9e:46:5d:80:da:bc:fe:9a:14:42:75:9a:e3:b9:
e4:93:da:f0:57:be:95:89:50:96:ae:0c:83:72:7c:7f:64:37:
f0:d8:9f:3f:dd:f1:af:be:c2:6d:bc:b6:95:8e:41:79:60:c1:
0a:2c:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:10:31 2026 by rpki-client