
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json)
Hash identifier: jN03B5Ec3AJK1NfmOIKRS48+2HlIagUd/mA0D36rgpY=
Subject key identifier: 43:77:18:83:8D:E9:C9:AA:4B:38:5C:7C:CD:CC:17:14:03:3E:93:0D
Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5
Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5
Certificate serial: 13D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
Manifest number: 13BD
Signing time: Sun 20 Sep 2026 16:54:26 +0000
Manifest this update: Sun 20 Sep 2026 16:54:26 +0000
Manifest next update: Sun 27 Sep 2026 16:54:26 +0000
Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: XbF/y7g0ZwvmC2sojVBTLrr/KpEmZ5dUlkQz9oK9Vi8=)
2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: O9w5ukmDcrFDcEjD6HiwQa6Y82NCxJ277Oe6QTyQjzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl
rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5073 (0x13d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5
Validity
Not Before: Sep 20 16:54:26 2026 GMT
Not After : Sep 27 16:54:26 2026 GMT
Subject: CN=6ab00fc2-33e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8c:b1:fb:25:d1:80:bf:c7:3f:d6:57:6a:0f:
c2:59:bd:16:85:71:2d:4e:7e:28:67:93:0a:8a:b5:
18:61:14:41:6a:ce:2f:bd:fe:98:78:c8:45:5d:a8:
af:c8:0f:c0:04:b7:47:cb:3d:32:22:c1:c4:8f:5f:
eb:4b:50:8d:65:d8:ad:7c:cf:fc:76:e0:d7:79:26:
ab:a8:e8:5f:9e:79:6b:c3:12:07:01:e7:9b:8b:82:
5f:99:f5:cf:bf:af:d1:22:2f:5d:23:07:ca:cf:88:
42:26:a2:3a:bf:88:7b:39:78:41:07:da:b4:ee:76:
a0:a6:1a:f7:bd:8a:53:6d:c9:44:09:9b:da:17:ae:
98:dd:03:ec:58:b4:73:90:5b:5f:ed:d6:bd:07:e8:
ec:6c:9b:c0:1d:00:cb:aa:7d:54:7e:f4:f0:9e:e1:
56:a0:e8:40:16:45:a3:f8:c0:35:4d:b5:9e:29:6d:
82:52:fb:cf:9e:0e:3f:c9:ac:c3:7b:7a:6d:a3:23:
5f:da:4a:10:67:fc:7d:0c:37:a8:a7:d1:63:63:f0:
e5:d8:93:93:05:3a:60:d4:bb:07:33:46:50:10:90:
7e:93:59:70:a8:57:4f:da:5e:22:38:b2:ae:85:52:
92:b2:08:aa:b6:88:ce:6d:f1:7f:ad:8a:29:1e:3a:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:18:83:8D:E9:C9:AA:4B:38:5C:7C:CD:CC:17:14:03:3E:93:0D
X509v3 Authority Key Identifier:
keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:32:58:90:d6:06:67:a7:17:16:85:c1:2a:4a:05:24:eb:93:
c7:e7:4b:25:56:fa:fc:02:25:11:c6:9c:16:f9:f4:7d:c7:35:
e0:da:b8:67:aa:7e:2f:71:f9:75:bd:96:cd:62:09:17:14:0d:
ee:ad:e3:9f:63:02:9c:e3:6e:ee:18:26:b2:29:4f:46:12:48:
e7:6c:f1:a2:07:ca:ec:aa:49:b6:54:a4:a5:e0:52:bf:77:f3:
c9:70:7d:90:1d:8a:1e:a5:82:8f:74:0d:40:62:ff:11:f5:d5:
89:85:d3:8f:bc:ab:84:90:3e:3b:c5:cb:99:f7:e5:0e:54:62:
69:31:34:e6:bd:71:a6:3d:af:ec:9c:4d:03:18:f5:51:d0:ff:
19:6d:6d:c4:10:9f:0b:18:3d:5f:cc:9c:3b:7e:d0:f0:fb:3b:
32:cf:86:34:ff:79:cd:7d:ee:5a:a0:0f:6b:7b:d0:e6:71:af:
46:b1:fb:7d:fa:3c:8c:df:b7:f9:04:f0:9d:38:94:cd:36:17:
92:40:1a:26:bd:e8:8e:01:00:8c:ff:36:2b:db:89:cf:aa:39:
21:bd:00:db:02:48:7b:b0:f5:a0:96:07:48:fd:5b:91:ed:a0:
98:4a:05:8d:7a:cd:f9:73:58:60:e1:88:be:a9:1f:8a:8f:92:
03:c9:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:38:01 2026 by rpki-client