
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json)
Hash identifier: rG7VufSDEbDC88C5Vllwx8GvNETySG/os8dJkQQQCPo=
Subject key identifier: C4:0C:12:CF:2B:8F:AC:FA:C1:1A:89:AC:D0:AC:BC:2F:0E:EC:DE:1F
Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Certificate serial: 7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
Manifest number: 78
Signing time: Mon 27 Jul 2026 10:04:38 +0000
Manifest this update: Mon 27 Jul 2026 10:04:38 +0000
Manifest next update: Mon 03 Aug 2026 10:04:38 +0000
Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: fq2OokvnVqU5yTkMtWQbPKLHYvVXIlyIacCpHvAEmvI=)
2: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: vhaf/68N75siwelbtPS2Tu3DEgGqynrrUITnReXj5p4=)
3: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Validity
Not Before: Jul 27 10:04:38 2026 GMT
Not After : Aug 3 10:04:38 2026 GMT
Subject: CN=6a672d36-9c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:71:ea:8d:cc:af:28:77:04:4c:b4:97:92:
31:b1:8f:73:fd:63:41:40:17:27:10:d0:a5:7b:1a:
af:07:2a:ad:82:ca:56:fd:5c:32:a8:ad:f2:56:6f:
9a:99:36:6e:96:7e:d9:cd:ff:10:dd:b6:26:fe:c6:
73:61:83:45:40:55:2d:4e:34:a9:e5:c2:2c:3b:37:
71:c0:d8:09:52:8c:68:7f:1f:2c:d0:33:8f:c8:a6:
16:ea:6f:ba:c2:e9:4d:c4:f9:16:b3:52:6d:62:77:
85:15:f8:f7:d7:70:b6:32:6b:05:56:aa:c5:00:ff:
12:49:6a:b3:fd:67:ae:b7:40:65:ab:23:78:b0:aa:
94:6e:42:2d:9f:36:c3:4a:9c:11:03:3d:17:64:76:
55:24:de:7b:d2:18:4d:c3:0f:0f:3c:9c:29:b9:4f:
a1:c4:9f:86:bf:dc:a3:d0:88:a7:1e:ac:c2:6d:a2:
1b:39:45:05:23:62:1a:87:4e:f3:99:bf:13:bb:0c:
c7:3c:a4:6d:b1:2f:78:e4:ac:b5:b6:f2:5a:da:94:
3b:f1:50:46:0a:ad:84:9f:90:59:d8:de:2e:b8:61:
8c:80:f5:b5:56:b3:75:4a:96:53:e6:a2:39:0b:da:
b5:f0:e4:e5:1e:df:36:f6:75:c2:53:f1:99:f8:41:
55:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:12:CF:2B:8F:AC:FA:C1:1A:89:AC:D0:AC:BC:2F:0E:EC:DE:1F
X509v3 Authority Key Identifier:
keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:6f:b7:bf:42:5b:39:d4:d7:bd:03:90:f9:00:5a:b6:86:2d:
43:d8:b5:af:32:1d:70:26:56:b8:2a:07:13:95:e7:b7:3e:03:
1c:ed:fa:a8:7b:39:70:f7:35:a9:5e:d7:bf:8c:35:87:25:ac:
92:0a:cd:58:41:79:27:b7:19:b8:ca:f3:6a:dd:cf:42:94:4d:
07:6c:90:85:1d:e4:d5:75:01:b0:db:95:bf:10:cb:6e:7a:e6:
52:05:5a:20:b5:4b:2d:26:39:dc:c5:8e:89:64:0c:42:fe:25:
9e:00:38:59:45:33:91:b1:d5:cf:35:13:7e:86:e5:10:c1:74:
0f:c3:89:83:a5:ac:a2:f6:2c:b0:86:e3:70:4b:6c:32:be:52:
f4:3e:71:15:23:58:47:9f:01:53:be:a0:4e:4a:72:04:7a:37:
ac:b3:4c:72:45:69:b7:b9:9e:70:56:44:67:51:67:f0:bf:b9:
36:f9:ad:1a:3b:bd:5a:b2:89:3a:ee:96:37:ed:f2:85:b7:9b:
14:e0:cc:1c:c6:79:ff:c4:91:81:d5:cc:3b:d9:45:6f:0f:40:
88:aa:e3:2a:5a:43:bf:50:14:51:94:cf:00:09:2e:fa:1e:0e:
81:19:90:8c:02:7b:87:9e:91:f9:97:16:ad:65:3e:a0:17:f1:
c0:7d:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:45 2026 by rpki-client