
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
File: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft (raw, json)
Hash identifier: NPUpmzxRUdx8los/t2zrBKsT4Vz9kVjFrt7OiuSzq5s=
Subject key identifier: 77:C9:06:80:9A:42:F1:69:CD:71:D0:E2:04:0E:08:A1:B2:8F:76:09
Authority key identifier: 4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
Certificate issuer: /CN=A91ECC52/serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Certificate serial: 0887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
Manifest number: 087F
Signing time: Wed 14 Oct 2026 21:01:51 +0000
Manifest this update: Wed 14 Oct 2026 21:01:50 +0000
Manifest next update: Wed 21 Oct 2026 21:01:50 +0000
Files and hashes: 1: S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl (hash: tRWWyHW3P2g/7mK8qcXSTbe6x3YszhLj3/Ta8ddowHA=)
2: 65D706B213FA11EB92A6FE61C4F9AE02.roa (hash: uOMbohBjqYkrJACqTf93OXW7s4M6jLEwG//Jh6twRk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl
rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183 (0x887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECC52, serialNumber=4B8567FB387BFD74076B5097700132C7AC86E620
Validity
Not Before: Oct 14 21:01:50 2026 GMT
Not After : Oct 21 21:01:50 2026 GMT
Subject: CN=6acfedbf-fa2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:17:5b:25:64:0d:d5:50:51:24:b0:50:3f:
b2:a6:4f:66:82:97:a1:1b:3b:9d:e7:fc:c0:27:b3:
ed:ff:01:f2:b1:6b:ba:9b:5c:75:dd:25:25:57:49:
45:a3:d7:ac:6f:e7:46:fc:f5:6a:75:5f:94:2a:d0:
65:66:5c:d8:8e:6b:9f:9e:1e:ff:d2:c6:58:3d:14:
9a:22:1a:53:b7:0e:97:cd:25:e5:d4:98:c6:92:5b:
94:a8:7a:10:ac:c3:9c:c9:47:57:ab:90:ad:0d:a4:
55:84:e5:17:cc:9e:ea:06:47:ac:77:05:e6:be:6f:
55:a6:b9:a5:2b:e8:ff:69:12:7d:28:5a:39:12:5b:
30:9f:62:90:80:65:e4:ce:79:42:0b:4f:0b:6b:e0:
5d:30:ed:96:05:d9:ac:66:a5:5f:72:aa:64:f4:1b:
eb:e9:1b:b2:9a:5d:54:22:6b:c0:30:bf:79:6b:c6:
3a:df:b2:81:43:18:8a:55:ed:b2:0d:fc:13:78:03:
53:6c:f7:6d:65:e3:0b:b5:47:c7:8d:f3:71:2e:e8:
5d:01:82:6e:fb:71:ab:48:8d:d0:cb:b7:47:ad:85:
77:2c:7e:bd:21:b7:ae:21:26:63:5e:73:31:93:27:
d0:16:1a:df:c4:94:53:39:e1:3b:04:ea:87:99:39:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C9:06:80:9A:42:F1:69:CD:71:D0:E2:04:0E:08:A1:B2:8F:76:09
X509v3 Authority Key Identifier:
keyid:4B:85:67:FB:38:7B:FD:74:07:6B:50:97:70:01:32:C7:AC:86:E6:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC52/652836E8138A11EB97AEB420C4F9AE02/S4Vn-zh7_XQHa1CXcAEyx6yG5iA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:5b:ee:34:82:af:c2:3e:25:a9:27:13:39:1c:5b:5c:c0:
df:4b:38:d8:46:ef:14:be:52:43:32:1c:82:27:b4:d1:eb:6e:
d8:cc:d3:2b:8a:7c:ae:5b:14:97:5b:59:f6:8c:90:ab:dc:12:
c1:bf:1a:fe:58:ab:d9:ce:07:65:76:ab:45:6a:d1:fa:77:1e:
1f:68:d6:ee:bd:62:01:4d:ce:1f:59:bf:4e:95:a6:9f:c0:0e:
14:1c:63:ed:1b:9a:be:7d:ad:ca:82:59:00:aa:2e:95:41:7a:
8e:5e:7d:17:43:19:4b:cd:99:8e:9d:80:84:3e:4d:e7:87:e0:
79:e1:ed:1a:5f:ae:62:4c:14:3d:b1:9a:b4:32:30:8f:f1:e7:
18:d5:ea:b6:38:0a:8f:e8:82:e3:27:d2:fa:fe:07:90:07:7b:
ce:1c:a8:89:df:dd:e3:eb:8c:41:eb:6d:0e:26:18:38:a7:80:
0d:05:4d:b8:1a:2b:89:85:dd:8a:07:34:23:48:e0:dd:fc:a9:
01:b3:a4:2e:a2:5d:7b:ff:d9:34:76:e8:28:c0:fe:5c:f9:94:
7a:78:b0:18:21:ca:44:21:60:86:65:e4:af:e7:51:0d:94:74:
f9:6b:8a:43:f9:81:c5:a7:40:b3:0a:26:a9:8a:a7:61:e5:8d:
32:01:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:15:50 2026 by rpki-client