
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json)
Hash identifier: b0KATMzQ/SAkoMDNUKi0Nvp8uPow3PmCS/2MHZ6u7ns=
Subject key identifier: 73:9F:2D:F9:50:86:AB:25:0E:03:E6:DF:06:32:1C:25:5B:15:27:05
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial: 035C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
Manifest number: 0355
Signing time: Mon 27 Jul 2026 02:05:10 +0000
Manifest this update: Mon 27 Jul 2026 02:05:10 +0000
Manifest next update: Mon 03 Aug 2026 02:05:10 +0000
Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: N0OMEfLlnMQ35tFNKYxOHyiNCbRajkgESHnhHsuuO3o=)
2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: TRVZ/NM/BJRiha8eAPz94grzikRFW1KWfdpr0FjIAaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 02:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 860 (0x35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Validity
Not Before: Jul 27 02:05:10 2026 GMT
Not After : Aug 3 02:05:10 2026 GMT
Subject: CN=6a66bcd6-815c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:9b:ee:c5:89:24:ab:f6:8e:36:77:95:c8:
cf:ab:7c:17:f4:5f:20:6a:77:0a:d5:53:fb:bc:f3:
aa:88:03:40:56:7b:c0:89:7c:2c:2a:67:8f:56:a1:
b3:42:38:96:14:b9:0a:a8:f0:84:8f:83:91:fa:53:
8a:b0:68:f2:7a:af:37:e2:69:db:6c:7d:c8:56:60:
f9:11:30:3c:21:55:ca:d5:f4:8e:cc:8d:96:70:b4:
fd:a0:b7:c7:0b:f2:1e:9b:65:dd:d9:3e:d6:9b:bc:
8f:b5:78:04:bc:4a:d3:96:6b:07:e3:2a:c4:cc:56:
32:e0:37:c6:b0:4f:ec:d6:ff:30:48:b9:fc:0d:91:
f0:87:df:77:42:60:c8:95:71:32:bb:49:ce:77:c2:
5e:58:16:1f:03:ea:b9:a5:77:e1:ec:4e:d9:c2:63:
80:d7:7c:bb:ad:36:f1:59:1a:81:8f:ab:7f:0a:3d:
ab:a1:b0:82:ed:ec:f9:a4:dc:29:c8:c8:84:30:db:
4d:4a:f5:6c:fb:eb:e8:4c:ab:f6:59:51:fe:c4:65:
f8:0a:19:74:34:d3:a2:cf:00:e6:7e:73:73:90:ed:
3b:12:5f:6c:72:fd:c4:21:91:87:5b:95:48:43:f2:
50:e9:a8:b4:e0:82:eb:fd:9a:0e:51:49:49:05:e0:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9F:2D:F9:50:86:AB:25:0E:03:E6:DF:06:32:1C:25:5B:15:27:05
X509v3 Authority Key Identifier:
keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:02:bd:75:ab:35:88:28:ea:c7:d1:7c:6e:d1:73:e3:c8:d9:
b0:ec:d9:6e:93:6e:67:e6:20:d7:2d:de:60:7b:62:e9:3c:fc:
e5:8b:bd:50:a4:b3:3c:e8:a0:9f:69:fd:1b:8e:8f:80:88:ea:
b3:8a:de:21:17:8d:38:4e:97:9c:65:ba:f0:69:98:41:42:00:
fa:96:84:5b:8d:0a:76:97:27:9e:ea:b5:e0:50:bb:97:27:d6:
b5:51:a3:c6:85:e1:b7:02:22:86:6e:69:c8:19:82:4a:72:7e:
cf:58:b6:36:d6:da:24:7b:4d:ad:e3:8b:1c:9a:67:37:d9:1a:
66:8e:2e:de:44:43:fa:8a:84:04:b4:82:c3:b4:a8:2b:db:ea:
c0:fd:49:78:9d:d5:8e:69:18:aa:39:cf:91:13:b4:cd:60:ef:
9f:92:b2:7c:b1:82:36:82:c7:2c:21:0a:e9:60:4c:e4:89:fd:
15:91:d5:7a:d9:ce:b2:48:07:88:74:3f:bd:6e:2f:07:7e:f0:
c6:ad:23:c0:73:e5:c9:35:52:bc:6e:ef:2b:11:c0:c3:4d:7a:
ff:6d:47:80:c7:81:65:6d:91:fb:d2:27:a4:6e:c9:b8:0d:ee:
b2:a1:ca:ed:cf:13:8c:53:d3:f4:69:2e:f6:8a:ac:96:d6:c6:
22:0b:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:48:23 2026 by rpki-client