
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json)
Hash identifier: 2bvJtt/DXa/ZrkfXANsE1ZEWE3y1E2LbI6YZTzSBK1g=
Subject key identifier: BE:44:CC:FE:54:D7:39:D0:1A:48:A9:E1:3A:E0:64:B0:70:EA:71:7B
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial: 09D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
Manifest number: 09C1
Signing time: Mon 28 Sep 2026 20:03:59 +0000
Manifest this update: Mon 28 Sep 2026 20:03:59 +0000
Manifest next update: Mon 05 Oct 2026 20:03:59 +0000
Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: WVvdendLhh+suDGGhdyD7aloqqyp63lRzM8iI/xrHgw=)
2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: GufOAmUmbBgvjXc0J89UeBy8dF93N+oEnJbdHPQ6yc0=)
3: 7A54F40C4F8911F18D85090792833773.roa (hash: o6p3iw3rhONzEiNetLEQUPFvD7H7C0JPmrzCOJSNgfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 20:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2517 (0x9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Validity
Not Before: Sep 28 20:03:59 2026 GMT
Not After : Oct 5 20:03:59 2026 GMT
Subject: CN=6abac82f-b4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:46:33:34:a2:38:9a:05:db:54:33:a0:32:
97:69:34:d1:a9:be:91:e9:6f:9a:2e:8f:f6:50:58:
4d:18:6e:24:5c:c7:3e:74:2e:99:25:f2:ed:78:4b:
ee:18:cd:7f:b5:a5:6d:dd:a2:b5:c1:73:c3:41:4a:
17:ca:95:5a:c6:27:50:77:2d:9e:4d:65:c4:28:4a:
b1:01:e8:f4:cf:93:5c:dd:fd:8f:53:75:bc:1a:07:
ec:9f:a1:95:85:8a:ed:e3:fd:ed:ca:5c:cf:03:f5:
d8:19:f8:2e:db:95:7c:5c:0b:c2:dd:eb:69:b9:ce:
ea:f6:b5:65:88:c6:84:d5:3a:10:9b:93:0a:f2:08:
b8:df:d1:59:e5:f3:60:90:66:dc:af:a7:14:6a:9f:
30:d0:50:29:bb:a7:a1:fc:d5:05:44:79:3e:28:b2:
61:f4:44:1e:45:1e:18:2c:40:91:bc:94:3b:cc:49:
89:6c:3b:74:15:56:79:f8:19:c0:2c:fb:f0:cf:95:
7f:b9:26:84:cc:04:fe:8f:01:84:e2:e9:fb:64:33:
94:5b:08:7e:5b:68:83:1a:ee:04:c8:2b:42:88:d1:
0b:0e:27:83:da:2d:d0:d7:e5:1d:98:e0:90:82:ef:
4f:18:9c:cc:19:e2:1f:d4:05:ba:36:26:b8:de:99:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:44:CC:FE:54:D7:39:D0:1A:48:A9:E1:3A:E0:64:B0:70:EA:71:7B
X509v3 Authority Key Identifier:
keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:c5:f4:c9:0a:37:7a:28:47:b9:b0:48:d3:e8:c4:c5:6a:07:
2d:c3:29:83:8e:88:de:4e:7f:18:4e:f1:ed:14:71:4d:2d:df:
2a:c8:fe:67:52:19:15:11:53:56:8d:6a:8b:08:f8:c7:e5:fd:
e3:0c:fa:df:0a:d4:4d:af:73:db:3d:0a:18:4d:bc:46:5b:7f:
03:60:6f:17:c9:96:89:1e:1c:fb:46:af:63:1f:08:c3:d9:d3:
39:97:4e:cb:55:7a:f1:90:80:cd:08:79:d4:11:20:ee:05:11:
e2:6c:3a:63:96:63:cd:7f:09:a4:6d:df:66:c1:05:c5:84:09:
20:88:c1:4f:8a:fd:bc:da:97:af:b5:1a:c6:f8:16:d7:a0:94:
77:f0:f3:43:07:a4:28:af:ac:23:f9:eb:18:94:69:c3:97:99:
47:56:20:bc:76:3a:27:1f:ba:eb:c1:49:41:e8:37:75:de:ad:
17:d0:6e:f5:91:55:c9:ae:81:0e:61:c1:36:34:0a:34:03:7b:
e4:22:fe:d9:46:d4:1f:a7:ae:7a:62:69:e4:f3:e7:95:5b:3d:
d7:9c:76:3e:5b:7f:14:a1:70:3f:ee:28:0b:29:e4:fa:eb:90:
5e:b3:48:b1:94:f6:31:eb:4a:02:12:72:e0:31:a0:ba:56:3e:
77:3f:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:24:47 2026 by rpki-client