
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
File: 4Y0K0YMT4gIg3qG4cW37310JzPg.mft (raw, json)
Hash identifier: wWoEqwE5opdMGA86Cx4uQH+KzpJ7LES3ZZfGAj2T55g=
Subject key identifier: BD:26:B6:82:21:2E:93:D8:E6:CC:30:33:71:C3:F0:34:01:47:AC:5B
Authority key identifier: E1:8D:0A:D1:83:13:E2:02:20:DE:A1:B8:71:6D:FB:DF:5D:09:CC:F8
Certificate issuer: /CN=A91DBB66/serialNumber=E18D0AD18313E20220DEA1B8716DFBDF5D09CCF8
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
Manifest number: 0101
Signing time: Mon 21 Sep 2026 06:09:51 +0000
Manifest this update: Mon 21 Sep 2026 06:09:51 +0000
Manifest next update: Mon 28 Sep 2026 06:09:51 +0000
Files and hashes: 1: 4Y0K0YMT4gIg3qG4cW37310JzPg.crl (hash: AvJwImPSJ8+Im8xJPS/0d5Yq7rmWbsYHp/3plYnv1pA=)
2: 099A56FE2FB311F09E3A9373C4F9AE02.roa (hash: qvpf3tPeZUwo+lZY0cw/+448QOLDPYiAWRZZeAUm0FA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.crl
rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBB66, serialNumber=E18D0AD18313E20220DEA1B8716DFBDF5D09CCF8
Validity
Not Before: Sep 21 06:09:51 2026 GMT
Not After : Sep 28 06:09:51 2026 GMT
Subject: CN=6ab0ca2f-42a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:91:3a:92:96:b3:f7:16:60:6b:a5:a9:71:
e3:02:89:34:bf:c0:cc:3e:5e:f4:5d:e1:9e:4a:9a:
38:70:6c:51:1f:1d:b1:9f:30:e9:f0:6e:92:82:79:
db:af:3e:27:b7:c2:c3:1e:ae:86:fe:58:9b:5f:af:
43:f9:4b:90:e2:50:33:87:5a:29:61:60:43:8a:5b:
d3:5f:ab:d4:2e:c6:86:04:4d:44:b2:b5:03:d4:c8:
02:e5:05:b5:67:2e:64:3b:66:c8:30:ea:16:b8:55:
7a:9a:bb:ef:a3:a0:1c:30:b4:ca:8f:9b:af:d8:c2:
5c:c9:87:b7:c9:90:ee:72:2a:5a:27:e4:d6:fb:5c:
58:b7:89:66:1e:f6:91:9b:70:57:cf:6c:35:6c:f0:
5a:d2:c5:d0:5b:84:d2:d0:da:f4:23:a7:5a:f2:28:
20:5e:0b:cd:cb:dc:0a:f5:69:8f:9a:4d:7d:5b:40:
95:e1:f8:3d:3b:68:69:ae:79:10:60:30:6b:cc:33:
00:f5:c2:de:c6:f1:3f:be:88:15:6f:e9:2b:a6:04:
4d:d0:43:28:d7:69:71:dc:d8:38:5a:a6:c4:27:20:
9e:16:7a:84:e8:a2:9a:c0:da:ec:e7:d9:6b:7b:12:
d2:81:ff:0f:aa:ba:9a:5c:0c:4a:f4:11:76:6e:53:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:B6:82:21:2E:93:D8:E6:CC:30:33:71:C3:F0:34:01:47:AC:5B
X509v3 Authority Key Identifier:
keyid:E1:8D:0A:D1:83:13:E2:02:20:DE:A1:B8:71:6D:FB:DF:5D:09:CC:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:bf:5e:e8:0f:38:ef:c5:9f:06:ab:bc:08:43:fb:74:88:02:
0e:45:55:ee:d1:65:4e:fd:8f:8f:90:9b:95:c1:c4:8e:bd:97:
0f:61:bc:9c:ad:f6:f3:64:92:0b:dd:f7:59:a0:8c:05:6e:8a:
a3:35:cf:51:92:06:00:6a:85:6b:57:27:c5:56:2f:e3:a9:56:
d8:e3:1c:e9:e8:66:ea:5d:dd:da:b6:20:68:df:55:79:16:c2:
21:29:00:c0:f8:3a:2d:78:08:a5:3c:b7:2d:76:90:a5:cc:fc:
7c:ff:f2:78:34:56:49:7f:94:35:e0:bd:ab:c6:90:0e:1c:81:
4b:89:e9:f6:c2:da:e2:2d:54:17:30:57:7e:c2:57:78:0e:c9:
1e:7f:dd:6b:83:e7:74:6a:da:4a:33:e0:ef:69:ad:88:34:0c:
4d:dd:a7:9b:eb:c5:a9:da:6e:6d:20:2b:01:80:53:a6:a0:df:
18:81:03:6d:d3:64:1e:97:bf:7d:5b:7d:2f:b4:75:0b:5f:6f:
0a:cf:4c:56:87:bc:cc:e7:cb:65:3b:42:a8:a5:15:bb:a9:f1:
a0:cf:86:76:cc:55:37:2b:b2:fe:f7:3a:62:ce:17:f7:13:c5:
1a:26:e8:5d:f6:63:6f:c9:c1:5c:89:9c:82:68:71:99:2c:0b:
aa:c7:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:57:21 2026 by rpki-client