
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
File: 4hHNheByVQ4z5MyGpj-8360dNTI.mft (raw, json)
Hash identifier: u+c44nHSs/uxpr8D37+tT5k0oIPMJi5W3xrfTXZAPcQ=
Subject key identifier: 99:17:50:F7:FD:76:D4:59:2C:94:57:B9:C3:D6:64:39:D9:BB:32:A4
Authority key identifier: E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
Certificate issuer: /CN=A91F85CD/serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Certificate serial: 090D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
Manifest number: 08F5
Signing time: Tue 28 Jul 2026 20:44:22 +0000
Manifest this update: Tue 28 Jul 2026 20:44:22 +0000
Manifest next update: Tue 04 Aug 2026 20:44:22 +0000
Files and hashes: 1: 4hHNheByVQ4z5MyGpj-8360dNTI.crl (hash: tFPSFsyQhLziUxOTZERWLWbdKswhEngx/HqsU2PcSek=)
2: AF3304C65E6F11F18B912BC3147AAC22.roa (hash: mugZ6N0u6WAwoUu9/alz8CzePymZa9nygy/+jo0Dw6g=)
3: 624086E2E99611EA930A5B74C4F9AE02.roa (hash: gGjRkko3vUXG2uHIO8NHVPfpIWdSndydd5tBp7Lr7bM=)
4: 0694DE925E7011F18D994AD5147AAC22.roa (hash: 1VTps7TMblVtTtQQmFdN1wLLHWYElV09OvYdQPb9W90=)
5: 57BDB7A85E7011F1A73FCCD7147AAC22.roa (hash: D1vi/CU/2Qa3UAwk8ROF6/81kLEg5XQ0HrFSPG7aFBg=)
6: CEDD71FAE48811F09BEEC367446F56BC.roa (hash: v+w6FMXM2xR0r2SO7jbmxEeAiii0dpp5GEOdFjQ8hTM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F85CD, serialNumber=E211CD85E072550E33E4CC86A63FBCDFAD1D3532
Validity
Not Before: Jul 28 20:44:22 2026 GMT
Not After : Aug 4 20:44:22 2026 GMT
Subject: CN=6a6914a6-a301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:4f:6e:87:11:71:00:f9:bd:8d:86:28:d6:
d1:1d:82:5d:0d:7f:f3:7f:a6:42:dd:52:cd:87:73:
75:a8:16:61:2e:a5:3d:f1:6e:ac:e1:0c:79:a9:5a:
2e:cf:68:9f:d9:6b:46:5d:81:f4:bd:05:6f:a1:29:
c1:1f:21:f5:87:f5:66:d5:b0:02:81:ef:79:b9:de:
8d:3f:d4:8d:a3:7e:23:fb:09:61:59:3d:9f:ee:ad:
33:78:f7:4e:bc:bd:52:f6:33:93:42:22:0d:64:0a:
3b:f5:25:31:e8:ef:4a:09:f6:f5:b4:63:24:0c:2d:
f1:3c:22:5a:3d:0d:70:14:b2:01:54:4e:86:7c:58:
bd:83:fd:81:17:48:2f:21:e1:d0:d3:32:d1:5f:f6:
fe:01:b9:f1:48:60:66:52:01:33:b4:ca:66:52:7c:
1b:1b:a8:22:6b:75:9c:73:fe:79:dd:8f:5c:c4:f7:
e5:ca:6d:b5:56:f9:60:9a:a3:05:3a:b0:6e:c6:75:
7e:a2:4b:f4:ed:f7:21:9a:1c:7c:c4:c6:97:f9:06:
74:c4:52:4d:a7:99:97:59:74:b4:11:3e:c6:81:84:
a7:56:12:0f:85:05:8c:fd:34:77:85:a0:7b:0b:ce:
fb:b4:1b:74:b1:1b:5b:a0:b8:89:af:db:b1:15:20:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:17:50:F7:FD:76:D4:59:2C:94:57:B9:C3:D6:64:39:D9:BB:32:A4
X509v3 Authority Key Identifier:
keyid:E2:11:CD:85:E0:72:55:0E:33:E4:CC:86:A6:3F:BC:DF:AD:1D:35:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4hHNheByVQ4z5MyGpj-8360dNTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F85CD/8A505588DD1911EA94D26011C4F9AE02/4hHNheByVQ4z5MyGpj-8360dNTI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:6c:53:b7:24:61:64:ff:e8:0e:95:9c:5f:72:4f:86:6e:
83:3c:fe:a4:42:50:68:3c:1a:03:e0:73:2b:68:f1:65:40:2a:
50:39:a8:03:55:2a:79:7f:70:3e:cb:e2:c3:cd:9d:8e:3e:0f:
17:1e:5d:23:85:d9:b3:81:68:a9:56:c1:5e:e1:b2:7e:11:93:
83:88:6e:30:e2:8e:f0:9f:ba:5c:27:11:2f:2c:d4:fe:bd:a8:
b2:9f:e2:00:12:a3:d7:97:91:2c:e5:3b:86:69:fb:70:51:a0:
5b:24:5a:89:21:c5:b0:b5:37:93:6e:77:cd:44:74:78:3e:d4:
8d:dd:fb:fc:27:7e:01:aa:d8:f3:25:f1:4b:9c:9f:49:7f:1c:
50:4d:78:88:6e:ef:90:63:ec:0a:be:12:6f:dd:29:d0:83:c2:
42:fd:b4:1c:06:65:db:b9:8d:56:08:02:a0:2c:73:12:a5:b8:
3f:78:29:bb:0c:6d:ce:a6:c0:3c:05:d0:a5:bb:05:3f:bc:6e:
da:d8:c8:ab:9d:1e:de:ee:1e:d2:c7:79:dc:53:73:da:2a:03:
7f:d9:61:2e:b8:78:a9:eb:85:b7:cb:ce:44:43:72:39:ad:e3:
fb:e0:c8:8f:11:fe:a2:c1:78:27:f0:bd:44:a5:c3:2e:0a:5f:
25:65:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:30 2026 by rpki-client