
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json)
Hash identifier: nye8/25L0KQPkKf1G041COoiENTLGELruoA5SKqMAdI=
Subject key identifier: 49:CF:89:BE:B3:28:C8:CA:62:81:A3:97:D6:22:94:8C:B4:B6:4F:F2
Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Certificate serial: 05C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
Manifest number: 05B3
Signing time: Sun 20 Sep 2026 22:58:27 +0000
Manifest this update: Sun 20 Sep 2026 22:58:27 +0000
Manifest next update: Sun 27 Sep 2026 22:58:27 +0000
Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: X7EPrxfSBSGUxYfEuf9Bc9mx4bXnVw6XJZQbC/QqaZ0=)
2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: ymE3NF3mNxbc0n3cw24HjyP+vV1nrdP5Yd7pXRaMI6Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl
rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1472 (0x5c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Validity
Not Before: Sep 20 22:58:27 2026 GMT
Not After : Sep 27 22:58:27 2026 GMT
Subject: CN=6ab06513-6ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:e9:77:29:6b:86:57:be:42:c5:ea:8a:b2:
2e:a4:aa:09:93:fd:98:72:04:e5:e5:16:6c:99:68:
cf:e1:13:38:d7:c7:cd:70:f3:bb:ba:59:b2:65:01:
a6:a5:ab:0f:59:96:82:b8:7d:70:d7:79:82:47:05:
78:03:24:2d:70:36:4f:06:ca:01:0d:97:4f:54:47:
c2:27:ac:b2:63:4a:07:45:d9:e5:5e:06:f1:3d:0d:
41:90:66:4d:e2:28:e5:94:f3:63:7c:d5:81:f6:51:
6e:a2:96:15:1b:ba:9f:5d:c8:43:a9:85:94:66:de:
fa:f4:54:79:bc:58:c4:e6:bc:90:d9:81:7f:a7:22:
2d:69:c9:41:35:dc:cd:94:9d:84:90:75:98:1c:ce:
8f:c1:76:ef:51:68:30:5d:09:cb:63:d0:3d:96:f2:
67:52:5e:3b:36:8d:e0:5a:76:16:5c:27:19:37:d2:
ec:c7:f9:be:5c:b6:bd:58:d6:46:e5:09:7f:30:84:
1c:e5:e6:cb:3e:d6:c7:cb:c2:d7:9a:f8:8d:6c:71:
a6:46:51:ca:2b:fb:66:b3:51:ce:25:2c:a0:ac:36:
1b:6b:36:c3:9f:b9:8c:8d:55:3c:85:16:e5:00:20:
19:4b:55:63:f2:68:08:69:7f:70:41:8c:3f:e3:8e:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:89:BE:B3:28:C8:CA:62:81:A3:97:D6:22:94:8C:B4:B6:4F:F2
X509v3 Authority Key Identifier:
keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:62:97:d6:4c:6d:cf:8c:5d:88:28:d2:01:8e:91:9d:53:4e:
ef:1b:9a:56:8f:06:04:b7:03:f6:02:e7:0d:d3:e8:c0:86:d3:
9e:17:63:98:06:55:09:f8:35:50:7b:1a:e3:6f:d0:fa:a8:1b:
c8:4f:18:01:7b:87:78:01:a2:5c:e0:e6:83:7e:87:fc:e6:c8:
a0:ea:63:af:66:8e:eb:6f:89:6e:fd:59:90:e4:8c:09:fe:45:
50:8e:6d:64:cd:4b:d1:d1:2b:13:ed:4f:78:4f:18:73:66:0d:
d8:3b:62:2a:84:e7:3b:0a:e1:f7:82:0c:18:ab:f0:4a:43:12:
6b:1d:ad:0a:f9:3e:31:b0:bb:c8:de:bb:91:0d:39:4d:1b:55:
78:21:8b:9b:d9:56:a1:c6:19:5e:71:8b:89:cd:1a:80:e8:07:
6f:bf:14:46:67:1b:c1:a4:22:c4:2a:64:36:99:58:a0:d2:6f:
1e:e0:d8:99:4b:5f:ec:1d:b1:85:d1:7c:1a:f0:1a:d7:11:f2:
42:28:b5:3a:90:b7:be:e1:38:c8:cf:82:99:a8:37:41:5e:81:
6d:43:52:83:1f:9d:ad:6b:d7:fa:6a:a3:d7:2f:91:63:39:ef:
ec:14:04:f9:ab:ec:f9:75:23:de:2d:9d:76:8d:cc:d8:17:0d:
1f:9a:3c:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5
OUY5RTMyMEUwHhcNMjYwOTIwMjI1ODI3WhcNMjYwOTI3MjI1ODI3WjAYMRYwFAYD
VQQDEw02YWIwNjUxMy02YWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/vpdylrhle+QsXqirIupKoJk/2YcgTl5RZsmWjP4RM418fNcPO7ulmyZQGm
pasPWZaCuH1w13mCRwV4AyQtcDZPBsoBDZdPVEfCJ6yyY0oHRdnlXgbxPQ1BkGZN
4ijllPNjfNWB9lFuopYVG7qfXchDqYWUZt769FR5vFjE5ryQ2YF/pyItaclBNdzN
lJ2EkHWYHM6PwXbvUWgwXQnLY9A9lvJnUl47No3gWnYWXCcZN9Lsx/m+XLa9WNZG
5Ql/MIQc5ebLPtbHy8LXmviNbHGmRlHKK/tms1HOJSygrDYbazbDn7mMjVU8hRbl
ACAZS1Vj8mgIaX9wQYw/444q7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnPib6z
KMjKYoGjl9YilIy0tk/yMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC
RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0RCQS8yOEVCNzE0NjJCRDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdn
S3hlRVJPWF9JdmlaLWVNZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfGKX1kxtz4xdiCjSAY6RnVNO7xuaVo8GBLcD9gLnDdPowIbTnhdjmAZVCfg1
UHsa42/Q+qgbyE8YAXuHeAGiXODmg36H/ObIoOpjr2aO62+Jbv1ZkOSMCf5FUI5t
ZM1L0dErE+1PeE8Yc2YN2DtiKoTnOwrh94IMGKvwSkMSax2tCvk+MbC7yN67kQ05
TRtVeCGLm9lWocYZXnGLic0agOgHb78URmcbwaQixCpkNplYoNJvHuDYmUtf7B2x
hdF8GvAa1xHyQii1OpC3vuE4yM+Cmag3QV6BbUNSgx+drWvX+mqj1y+RYznv7BQE
+avs+XUj3i2ddo3M2BcNH5o8Ag==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:17:05 2026 by rpki-client