
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json)
Hash identifier: glar6TYnF8JZ8xu37dX1EcCr/7Mhi13l3hDgayjRZiY=
Subject key identifier: AE:3F:52:7A:25:3F:9A:8C:1C:A5:13:E0:D5:D7:29:A6:63:05:FC:5C
Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Certificate serial: 05A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
Manifest number: 0594
Signing time: Mon 27 Jul 2026 00:08:04 +0000
Manifest this update: Mon 27 Jul 2026 00:08:03 +0000
Manifest next update: Mon 03 Aug 2026 00:08:03 +0000
Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: xk1s8cSUzc1nJGuRGaR+zpR4WTodHzZbj9/CQiQYsck=)
2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: GjQyrBrtjLGGx1Z0J/WzD76UJKpZKFLKZW1IsmAIl18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl
rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 00:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1440 (0x5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Validity
Not Before: Jul 27 00:08:03 2026 GMT
Not After : Aug 3 00:08:03 2026 GMT
Subject: CN=6a66a164-6b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:b4:2f:d3:1a:51:b2:03:be:4a:45:b5:f9:
43:87:4f:d9:9b:31:47:43:ee:56:da:cd:b5:53:57:
a9:16:25:01:dd:1d:7b:e6:d6:8d:4f:77:02:59:39:
d3:ed:3b:ab:99:8b:4c:3c:cf:32:e8:91:43:df:02:
63:41:69:fd:3a:e7:d2:89:c4:d4:62:1a:dc:bd:d9:
24:86:72:70:0f:e2:3b:96:d3:49:23:7c:b3:9d:a1:
22:d2:91:6e:3d:15:a1:ba:e8:24:ba:84:37:ed:78:
f4:fd:0f:73:74:3f:f8:10:d7:57:3d:25:9d:bd:71:
bc:43:d3:f5:1c:70:3a:66:fa:0a:9a:2b:c9:f8:b6:
f0:b2:a8:b7:35:0f:b9:85:fe:53:a2:08:53:1c:fa:
9c:7f:98:00:8b:1b:d7:55:3f:ca:10:a9:cf:fe:8d:
04:fd:61:a4:b9:6c:d5:13:36:55:de:0e:5c:ac:e6:
56:a4:71:1c:db:38:84:c5:73:14:04:65:23:33:14:
41:05:cf:4d:d9:c8:69:d5:3d:0c:75:d5:16:c2:19:
73:9c:23:a7:39:bc:6d:e3:80:d6:61:51:41:b8:fa:
31:d4:79:81:2d:bd:6a:e5:cc:11:e4:0c:43:61:26:
b6:c6:a2:65:9c:14:93:f7:69:0d:90:4e:af:4c:98:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:52:7A:25:3F:9A:8C:1C:A5:13:E0:D5:D7:29:A6:63:05:FC:5C
X509v3 Authority Key Identifier:
keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:15:47:e3:ff:91:47:f6:d0:80:bb:1b:f4:d0:35:c2:64:a6:
c8:2a:0a:44:c3:fd:65:29:c8:45:45:02:00:22:8c:8c:83:03:
c3:e6:08:92:4b:41:e4:80:7d:8c:72:53:ca:5b:c3:69:f2:fb:
a6:67:73:f4:d4:89:d2:76:d0:e6:6d:ed:93:9f:a4:65:20:ce:
24:84:22:36:ce:29:ad:76:e5:85:9e:f4:3f:f5:96:a3:f4:85:
70:e4:64:38:25:86:77:52:ef:77:58:a3:46:79:67:bb:f6:ad:
77:96:2f:d0:18:28:30:e3:a1:67:41:21:ca:67:08:f2:22:1a:
77:25:12:1d:74:bf:10:44:f7:98:e2:77:05:f0:e2:7e:48:72:
87:0b:d1:85:e9:91:ee:aa:69:5b:c6:81:5b:fb:47:8e:e4:01:
7e:c1:80:12:a9:63:b0:39:a0:eb:36:94:82:a1:ef:ec:3d:64:
ba:2f:4f:ec:db:dc:be:bc:8f:99:af:a1:a4:6a:41:b6:42:67:
2c:de:6f:50:2b:9a:ac:7a:1c:6d:2b:af:fe:c2:b7:73:a0:81:
f9:1f:96:f6:52:01:2d:bd:8a:38:79:0e:43:13:f9:d2:99:c5:
f3:c9:f7:2a:a1:0d:aa:72:16:6c:65:d3:19:ce:87:a8:0f:d6:
e2:b4:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:19:45 2026 by rpki-client