
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json)
Hash identifier: IRmukDbCvOLhPIG0MuHBLcCyrGRQYPlPp26Naq6fkgo=
Subject key identifier: 56:D6:EC:FA:F5:61:84:FC:BE:EE:A4:E9:AF:45:B4:36:CB:38:A1:05
Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24
Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
Certificate serial: 0B87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
Manifest number: 0B7E
Signing time: Fri 12 Jun 2026 19:10:19 +0000
Manifest this update: Fri 12 Jun 2026 19:10:19 +0000
Manifest next update: Fri 19 Jun 2026 19:10:19 +0000
Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: ArbpJo2ZhwcorBOb7cGIFoM9MJOmNRrwiCJjvWnHPsE=)
2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: a6wavOgKoP5md5rS3aTV8AwOSfSYTGywa/u0ciPrNLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl
rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2951 (0xb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CA1, serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624
Validity
Not Before: Jun 12 19:10:19 2026 GMT
Not After : Jun 19 19:10:19 2026 GMT
Subject: CN=6a2c599b-9af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:53:f3:d3:10:47:c1:cc:de:ea:2f:0b:7a:
69:35:8b:dd:ca:9f:92:61:94:a8:19:b1:1f:b3:57:
52:e1:1f:1a:85:eb:85:48:30:d8:3d:20:db:8b:5b:
ff:dd:28:b1:3e:15:14:78:00:77:9a:f3:d0:60:9f:
d9:b9:22:e6:51:9f:8d:c7:a3:d3:b6:18:01:57:0a:
8b:9a:df:94:40:6a:85:3f:83:f5:20:d0:26:43:fb:
47:55:1a:96:0b:6b:a3:97:63:76:22:47:1a:3c:6a:
09:3c:ce:88:9d:54:98:30:b1:df:0f:b9:74:a6:a4:
fd:41:05:9a:fc:69:55:6d:6a:41:b3:7b:8e:67:4b:
34:8c:1c:50:cb:db:37:77:a2:57:63:75:ac:75:40:
d1:07:d4:9a:89:ff:ca:30:11:fe:26:dd:81:f5:c0:
08:3d:26:76:dc:6b:36:cb:2d:11:d8:e1:d4:60:2c:
de:83:39:8c:4c:ff:89:f7:26:3b:87:56:63:27:6a:
af:0d:58:c7:17:71:57:16:bc:3f:9e:2c:0f:51:83:
8c:7f:74:c1:30:e2:3b:4e:15:8f:c0:f8:ec:1b:1f:
d1:a3:b6:42:30:65:80:b0:42:dc:79:5b:38:d1:e9:
ac:db:8f:e6:d3:50:a6:54:15:6d:66:c3:a3:b9:22:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D6:EC:FA:F5:61:84:FC:BE:EE:A4:E9:AF:45:B4:36:CB:38:A1:05
X509v3 Authority Key Identifier:
keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a2:9a:20:6d:e6:67:79:8d:3a:2f:c8:fa:f7:87:97:39:f5:
ee:da:22:37:74:90:04:1e:bb:c9:dd:13:df:c0:aa:57:fd:10:
af:45:b6:fd:2d:16:3b:c3:55:6d:2e:22:77:b6:1b:f8:ed:8e:
89:ba:26:a0:24:55:66:5c:bc:c2:61:5c:2b:4e:73:f1:37:5b:
84:43:83:06:75:c0:2b:df:2d:75:ef:8a:3a:af:9c:e4:3d:81:
22:75:b4:30:a8:da:77:14:07:c1:0c:5b:3c:13:5c:e0:d1:67:
55:02:74:ec:e9:09:45:61:81:3d:b0:ee:35:06:be:01:4f:9d:
a3:4a:f8:2b:ab:00:b1:15:5c:9f:85:ca:fd:5e:ad:3f:12:9f:
d0:53:6e:35:69:ef:13:d9:94:35:4e:96:18:ce:6c:0d:06:49:
8d:49:ee:0f:5c:37:d1:f0:87:ac:28:65:56:ae:f8:3c:c9:98:
b0:67:03:06:d2:c1:1b:09:bc:2b:7f:10:ed:1f:b1:f1:2a:94:
31:ef:f8:7b:6a:0a:3a:52:9a:21:c2:89:d6:cc:72:31:df:18:
bd:6f:aa:36:77:4c:8c:08:8f:d7:f4:ce:fd:13:04:16:60:a8:
a9:34:b1:f5:20:4e:26:a6:87:76:e8:5a:7d:6e:78:5d:e1:9a:
72:ff:12:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy
NDlDRDM2MjQwHhcNMjYwNjEyMTkxMDE5WhcNMjYwNjE5MTkxMDE5WjAYMRYwFAYD
VQQDEw02YTJjNTk5Yi05YWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA165T89MQR8HM3uovC3ppNYvdyp+SYZSoGbEfs1dS4R8aheuFSDDYPSDbi1v/
3SixPhUUeAB3mvPQYJ/ZuSLmUZ+Nx6PTthgBVwqLmt+UQGqFP4P1INAmQ/tHVRqW
C2ujl2N2IkcaPGoJPM6InVSYMLHfD7l0pqT9QQWa/GlVbWpBs3uOZ0s0jBxQy9s3
d6JXY3WsdUDRB9Saif/KMBH+Jt2B9cAIPSZ23Gs2yy0R2OHUYCzegzmMTP+J9yY7
h1ZjJ2qvDVjHF3FXFrw/niwPUYOMf3TBMOI7ThWPwPjsGx/Ro7ZCMGWAsELceVs4
0ems24/m01CmVBVtZsOjuSIYAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbW7Pr1
YYT8vu6k6a9FtDbLOKEFMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy
M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD
bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO6KaIG3mZ3mNOi/I+veHlzn17toiN3SQBB67yd0T38CqV/0Qr0W2/S0WO8NV
bS4id7Yb+O2OibomoCRVZly8wmFcK05z8TdbhEODBnXAK98tde+KOq+c5D2BInW0
MKjadxQHwQxbPBNc4NFnVQJ07OkJRWGBPbDuNQa+AU+do0r4K6sAsRVcn4XK/V6t
PxKf0FNuNWnvE9mUNU6WGM5sDQZJjUnuD1w30fCHrChlVq74PMmYsGcDBtLBGwm8
K38Q7R+x8SqUMe/4e2oKOlKaIcKJ1sxyMd8YvW+qNndMjAiP1/TO/RMEFmCoqTSx
9SBOJqaHduhafW54XeGacv8S/w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:35:25 2026 by rpki-client