
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json)
Hash identifier: wu+uIEg2WuADVQqAgg3kVNnoLDoijoK1ELwgjY4D670=
Subject key identifier: 46:F8:37:85:28:2B:BF:13:D4:72:71:CF:50:23:66:42:A0:30:0C:EA
Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
Manifest number: 01A0
Signing time: Mon 21 Sep 2026 04:13:38 +0000
Manifest this update: Mon 21 Sep 2026 04:13:38 +0000
Manifest next update: Mon 28 Sep 2026 04:13:38 +0000
Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: awYGwHqJBvh4AUQWG4McvBS0kWpZfzqaccKRBnF0E6w=)
2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: hxVPrb830azs0lN0PgHfZWp5ALPZT3k8NudZmcYdzUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Validity
Not Before: Sep 21 04:13:38 2026 GMT
Not After : Sep 28 04:13:38 2026 GMT
Subject: CN=6ab0aef2-d1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:9a:77:dd:03:df:21:d4:b1:ec:13:44:a3:
4f:93:07:18:64:bc:11:bc:19:7b:ec:bc:71:52:9a:
d5:16:d2:9a:91:92:3e:11:e6:f1:4e:cd:15:03:b8:
b3:6e:ba:00:b9:9e:ac:1c:4a:aa:0a:f5:ae:68:2e:
88:04:31:4f:d8:03:a6:98:2d:bd:72:e0:1d:7b:76:
b0:2e:a1:57:26:34:7d:1c:05:d7:20:14:c0:c3:c9:
b2:0f:7e:d1:6d:37:3b:73:d5:7c:e1:a9:5e:56:ff:
51:cc:67:78:a4:de:39:2f:02:8d:ae:85:d1:9e:38:
b6:88:80:23:22:87:5f:92:5c:a2:50:0f:a5:dd:93:
19:41:c7:01:7b:6a:39:5b:a7:6e:ac:e8:a5:e6:ba:
f2:7f:27:15:02:20:b0:cc:c9:28:15:34:be:ed:14:
11:1f:82:4c:72:4c:d7:ea:7a:a0:7d:64:70:dc:a4:
4a:57:2e:92:66:73:ad:ef:2f:01:9b:5b:a4:9e:d9:
80:26:c8:bf:47:ab:48:01:12:a1:03:90:fd:1d:58:
aa:59:e9:9c:6a:97:b2:b1:cd:f4:24:cd:38:72:31:
3a:18:e8:d3:14:ac:90:99:ab:6f:80:a4:19:fc:10:
26:03:bb:d3:ba:ba:00:d0:55:d9:f5:da:19:8e:93:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F8:37:85:28:2B:BF:13:D4:72:71:CF:50:23:66:42:A0:30:0C:EA
X509v3 Authority Key Identifier:
keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:29:9b:3d:96:e2:44:1d:73:58:11:f2:b2:e7:26:c7:00:3d:
db:7c:8a:18:f5:63:6c:82:75:49:91:6e:14:96:fa:10:79:76:
59:1f:f6:52:d2:b6:03:f4:d3:84:ea:7e:03:70:90:c9:df:bd:
22:4e:ed:f0:ac:1d:46:00:31:4b:62:c2:5a:e1:ef:af:93:99:
fe:df:c8:01:fb:d8:8e:54:f0:56:bf:28:96:ff:95:00:2d:84:
85:26:06:04:4f:af:9b:1b:a4:fe:e3:eb:e9:72:64:f0:47:3c:
e7:17:d2:d8:9d:13:37:fc:af:9d:ba:09:73:1e:fa:b5:fc:6c:
76:cf:bd:70:f2:cb:cb:0d:f8:22:cf:3f:73:b9:be:65:f3:9c:
aa:e0:5a:05:d3:29:01:8e:72:2d:f7:c3:13:27:53:49:cb:4e:
af:6a:e3:39:80:9a:0a:32:4b:85:0d:8e:d9:2d:a1:0e:3e:f6:
76:f0:4a:ed:21:29:07:cf:b3:93:35:51:e4:c5:fa:a2:e1:1e:
ad:80:76:ec:75:b4:c5:4a:8b:00:0c:9a:e2:c1:66:f2:59:b7:
d4:af:c6:09:e9:08:b8:40:a0:44:ec:4f:2e:08:be:f1:1a:99:
29:72:5e:ab:c7:be:bf:15:c5:dc:3a:8e:5f:de:c5:c2:07:18:
46:f0:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:48:53 2026 by rpki-client