
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
File: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft (raw, json)
Hash identifier: GiRhDaTl2o9nLt2Jtxg6Xcc+KLim02UL7rKCHO1Js8U=
Subject key identifier: 44:4A:8C:2B:0B:56:4B:80:66:66:7B:A5:F4:E5:06:6D:7F:C5:CD:2C
Authority key identifier: E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
Certificate issuer: /CN=A91E3441/serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
Manifest number: 2F
Signing time: Sun 05 Apr 2026 08:00:16 +0000
Manifest this update: Sun 05 Apr 2026 08:00:16 +0000
Manifest next update: Sun 12 Apr 2026 08:00:16 +0000
Files and hashes: 1: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl (hash: jOAkjM4eNhavamclAy3gkzIN0htbRJONwXjZdTt0jM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3441, serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Validity
Not Before: Apr 5 08:00:16 2026 GMT
Not After : Apr 12 08:00:16 2026 GMT
Subject: CN=69d21690-abb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:53:09:83:a9:b9:2f:53:a9:3e:95:f2:4f:
7c:94:1f:84:97:20:b7:eb:34:29:8e:63:70:63:ef:
4b:2a:6e:36:09:ee:0c:88:2f:24:06:2e:9e:7c:36:
16:d4:d0:83:ec:0e:46:c8:7f:f8:92:32:b2:26:67:
dd:00:85:4a:38:2e:d9:f3:46:eb:59:c4:ec:04:ee:
50:56:0a:a9:31:ca:68:da:2c:a7:19:3f:92:9d:36:
11:02:4e:bb:8b:3e:7e:99:e5:a8:f4:41:c9:db:9f:
45:6d:2d:5a:e3:03:17:37:a9:4b:4c:03:9f:71:5f:
1d:71:36:04:cc:14:29:f8:50:06:02:87:3f:6d:62:
52:5c:27:29:e9:34:69:43:b8:68:94:f1:f2:c3:6e:
b1:05:90:5f:f9:78:f1:68:9f:41:4e:13:dc:55:68:
b3:c0:a0:33:09:4b:91:b6:28:f7:0b:b2:c2:52:6c:
8c:55:19:67:a0:c0:af:19:13:cf:7b:7b:6a:4f:df:
81:f9:5f:ff:70:aa:94:3b:7f:07:a3:30:1a:ad:ba:
ea:01:1e:57:97:69:fe:96:b0:0c:63:b7:03:fe:6e:
83:10:34:96:3c:50:fd:c1:27:c5:08:ed:10:c9:f5:
1b:44:5f:a7:ca:5d:2f:6d:cb:99:36:58:d8:72:18:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:8C:2B:0B:56:4B:80:66:66:7B:A5:F4:E5:06:6D:7F:C5:CD:2C
X509v3 Authority Key Identifier:
keyid:E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:33:96:fd:ca:31:17:7a:62:a4:bd:8d:ef:f2:f1:14:36:ba:
a0:15:5d:04:85:3a:c0:26:20:f2:ae:c2:12:3b:db:f8:a7:7c:
4f:c5:84:d4:b8:d1:36:36:35:d1:20:0c:83:0f:aa:7e:ea:2f:
85:ea:6a:29:fe:e4:99:8b:79:24:b4:c0:35:6d:cc:9e:01:e2:
6e:7c:90:54:8e:b5:eb:03:24:6e:75:63:2c:f0:2f:fb:35:4d:
dc:aa:b0:df:12:77:c4:61:66:ef:59:96:84:49:8e:e3:1b:85:
72:32:e5:92:d6:a2:95:2c:fe:28:ee:cb:f8:13:96:9b:a4:4c:
95:c6:64:1e:ca:8e:d4:9c:dc:ee:a7:28:b3:e2:cb:c3:20:75:
09:be:da:55:5e:53:6b:10:fd:7e:02:14:e7:de:e0:90:c7:ab:
6e:60:7e:94:f1:99:82:f7:f1:b7:9a:c8:2e:95:5a:8d:76:b9:
74:ef:e4:72:b6:c5:15:bc:13:24:f6:fd:a7:36:4a:27:1c:eb:
0e:0a:08:79:57:b7:d1:ef:8e:bc:f1:9d:2f:4b:9a:82:49:1a:
d9:eb:0e:08:fb:15:fe:cc:5f:61:7e:1a:64:c8:2f:d2:20:2e:
da:2f:8e:b3:4d:e8:03:46:7c:f3:84:4a:9c:c3:68:14:a8:37:
12:ea:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:22 2026 by rpki-client