
$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
File: 4RvPp2LU9ssvatCdA6lA4P6qAfg.mft (raw, json)
Hash identifier: bfJqlpFlD/geGYbLyJTJGcU5bbGPp9FUKO5qbnuUcPo=
Subject key identifier: 9A:E9:FC:35:57:50:0C:91:23:31:28:B4:B9:2A:8B:08:A7:1B:99:18
Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
Certificate issuer: /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Certificate serial: 1F84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
Manifest number: 1F7A
Signing time: Sat 04 Apr 2026 15:56:09 +0000
Manifest this update: Sat 04 Apr 2026 15:56:08 +0000
Manifest next update: Sat 11 Apr 2026 15:56:08 +0000
Files and hashes: 1: 4RvPp2LU9ssvatCdA6lA4P6qAfg.crl (hash: FfEN8UyAoWQ6D6Owas74XSIrpnxcbwuQTG1Ef07rFnw=)
2: DB92DE200AEF11ECB7243C0FC4F9AE02.roa (hash: xGGqt7PonDXd5/R0eJ3zZiprAo1GTVFsIsSPuxegtug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8068 (0x1f84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Validity
Not Before: Apr 4 15:56:08 2026 GMT
Not After : Apr 11 15:56:08 2026 GMT
Subject: CN=69d13499-317d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:3a:0c:18:d1:8e:4b:2b:50:ab:f2:87:65:
c0:88:17:09:12:8e:b6:a9:20:ea:73:53:07:ed:8d:
4b:08:98:84:bc:fc:77:6e:f5:f3:96:08:01:b3:3b:
71:9c:02:8a:ff:34:f5:e9:93:be:64:09:cb:d8:82:
9c:f8:d8:43:27:ea:b8:3b:dd:67:12:2b:be:80:95:
8b:e8:0b:cc:15:6c:09:7f:35:82:7c:66:0e:15:73:
b9:83:d4:e4:2e:7d:c0:57:fc:c7:08:a6:ee:2a:e8:
54:76:60:bd:97:be:7d:46:40:9a:ac:d0:9e:64:7a:
00:a0:2e:e2:50:d0:88:b7:dc:28:b4:c8:fc:71:d6:
30:ec:8a:dc:8d:ff:04:53:e0:af:5c:8a:fe:d4:d0:
ba:e6:ce:66:7f:62:04:0f:21:ed:3d:7b:62:a3:fd:
aa:80:da:d3:07:b3:9a:b5:3e:af:a5:54:38:be:21:
a2:ef:05:5d:b4:a6:8e:41:99:4c:c9:ba:2f:fc:1f:
97:98:d0:9e:cc:32:70:c8:08:a0:bb:84:d6:0f:1f:
4a:f1:c5:a9:e4:61:e8:7a:e0:a4:7b:b9:3b:6f:df:
8e:bd:b5:1b:3d:b4:18:0b:74:32:89:22:09:8f:47:
e0:59:17:92:03:41:a0:d5:b4:3e:c9:2d:54:9a:7c:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:FC:35:57:50:0C:91:23:31:28:B4:B9:2A:8B:08:A7:1B:99:18
X509v3 Authority Key Identifier:
keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:e2:bf:c3:ce:15:89:76:cc:8d:ab:08:c5:7d:a2:bd:51:e2:
01:ad:e3:c7:d0:f9:7f:0b:7b:b8:e6:b4:9f:48:d8:da:91:cc:
b0:ce:87:5a:ed:2b:12:d0:74:0f:bf:8e:96:dc:d6:e9:aa:73:
9a:79:1d:8d:30:e3:43:40:65:91:72:18:90:bf:1f:22:94:f9:
bc:00:66:a1:59:23:9f:a1:2e:2a:ff:ce:fe:45:80:89:69:32:
c3:de:bf:55:c6:ea:89:c6:ed:11:8d:8f:93:da:1f:3a:63:d5:
2c:69:af:2c:d6:96:0a:ce:40:0b:b1:0e:10:5a:6f:9a:21:64:
cc:ce:e4:f9:84:b7:83:0f:89:d4:72:d3:b9:d9:88:b1:66:82:
d3:43:ee:2b:47:0c:b8:76:4b:ee:73:6f:54:03:5c:27:4d:dc:
a7:8a:2d:98:85:bc:49:38:1f:24:cb:02:1e:59:f9:80:6c:eb:
94:97:03:2c:b5:b3:db:b6:3f:46:88:98:7d:57:53:64:d6:cc:
85:2b:23:7e:b9:38:4c:39:c8:17:9a:da:3c:b1:cb:fc:33:f7:
59:3e:c1:69:d1:a2:c8:c6:a3:28:7b:82:61:b1:a1:64:82:01:
92:38:01:3d:57:68:68:e4:39:43:25:8a:e2:1e:67:2a:8d:e5:
9b:ad:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:57:20 2026 by rpki-client