
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: Car9Y3L8imb2k0zowPXodLkU+/j0f7HMIow+kuQup0w=
Subject key identifier: 61:44:AD:7D:D1:FD:12:2B:6E:AC:B4:D7:64:7C:48:AA:E4:7D:E3:E4
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 02DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 02D3
Signing time: Sun 27 Sep 2026 01:25:53 +0000
Manifest this update: Sun 27 Sep 2026 01:25:52 +0000
Manifest next update: Sun 04 Oct 2026 01:25:52 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: WSvUFPwsI1e39rOHPqChVZvCGXCngvacse8NFO2UDgY=)
2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=)
3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 01:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 733 (0x2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Sep 27 01:25:52 2026 GMT
Not After : Oct 4 01:25:52 2026 GMT
Subject: CN=6ab870a0-4ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:1b:4d:b0:ee:05:6c:68:27:4e:2c:cf:fa:
40:35:b2:32:a8:7a:63:94:13:b9:71:8b:c3:0b:f4:
5f:a1:ca:67:21:2a:72:d6:5e:f9:73:0f:a7:84:bb:
d7:6d:75:00:ee:7e:94:f9:b9:ee:fa:f1:64:44:32:
1f:20:da:cc:ca:9c:4b:76:8f:69:94:86:7c:9b:db:
f1:28:48:19:64:f5:03:6c:27:ec:c1:23:db:d1:f4:
38:76:1c:2f:e0:23:5a:ad:59:7d:ae:f4:df:e1:e6:
89:b3:45:9d:62:7e:6b:86:bd:d0:6c:bc:fd:2c:bd:
b8:24:a3:77:5e:dc:92:42:cf:03:e4:b9:d5:26:9c:
82:71:f0:e0:35:87:0e:25:04:0b:8e:24:65:bc:71:
6e:c7:2e:5f:ce:7d:1e:e9:77:56:bf:84:3a:32:de:
af:67:76:1f:27:55:fe:57:81:39:aa:c5:c7:a3:97:
9c:2c:71:5e:81:be:05:c9:58:20:e5:a9:10:e5:f1:
0d:b3:47:a3:fd:e6:9f:b0:42:df:00:dc:f3:a6:e2:
43:3c:8f:10:1d:14:6e:4d:db:a2:ac:f0:8f:7b:86:
2c:43:a8:e3:7f:cc:5f:7f:f8:b0:08:c8:4c:32:89:
88:36:99:2a:63:57:56:41:8e:76:3f:f2:3c:ad:ab:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:44:AD:7D:D1:FD:12:2B:6E:AC:B4:D7:64:7C:48:AA:E4:7D:E3:E4
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:f6:d6:b9:6f:7b:6c:5c:d2:50:9a:f2:bf:65:b0:ed:50:
d0:71:7f:83:49:e8:0c:71:ea:ed:a6:8e:da:91:9e:9a:0d:44:
71:44:43:92:14:6d:24:09:7e:e7:d7:bf:4b:15:64:21:72:7d:
c4:ab:b3:e4:2b:9c:51:f7:4f:2a:45:81:2d:6c:23:5a:c4:53:
2b:94:8a:fb:e9:9b:00:af:6b:75:61:61:88:17:c5:90:93:a0:
a1:a6:17:a8:39:94:0b:22:3e:71:ab:2a:a5:74:a7:56:ed:a1:
14:e2:9e:6b:3e:60:b6:43:5e:d7:99:71:53:9f:5e:2f:64:31:
6f:b5:07:5f:75:52:1a:f7:44:14:9d:07:83:34:6c:3e:8c:f2:
e2:09:c4:35:79:5c:98:10:37:56:55:74:d7:90:ce:27:bd:d0:
8f:38:98:c0:72:42:b0:c0:95:5b:84:89:00:1f:44:42:27:de:
5f:1d:e7:fb:e0:fc:d1:a8:77:d9:b7:ad:a5:2a:17:6e:38:fb:
bb:00:81:03:35:de:b1:9c:35:cd:d1:28:08:57:e4:1e:01:66:
80:e7:b9:50:52:d3:b4:f3:c2:2b:dc:ea:4a:8b:19:28:ec:dc:
0c:90:ed:a3:ef:ef:95:d3:9e:5c:09:d1:bd:54:5a:7b:eb:11:
dd:99:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:52:14 2026 by rpki-client