
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json)
Hash identifier: Q5guO8TsKzpEEEoK8Ccca5ByGyO1MFrFqpzeUkuePE8=
Subject key identifier: 84:C1:66:03:37:40:65:87:90:37:29:C0:31:89:17:6A:DB:A7:38:11
Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D
Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
Certificate serial: 02CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
Manifest number: 02C6
Signing time: Sun 05 Apr 2026 01:11:03 +0000
Manifest this update: Sun 05 Apr 2026 01:11:03 +0000
Manifest next update: Sun 12 Apr 2026 01:11:03 +0000
Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: XQQjSuT8e6tVI7wSyMho9yRhIXASWs+xkpMP4vyVja4=)
2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: ee5kf95O1pSuX6zOaS7RlxiHE9MMTxZvjrB5o5eebL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl
rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
Validity
Not Before: Apr 5 01:11:03 2026 GMT
Not After : Apr 12 01:11:03 2026 GMT
Subject: CN=69d1b6a7-d8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d4:ed:65:5f:37:33:85:80:8c:2a:a0:9d:21:
97:2d:cc:70:e0:0e:aa:fa:c6:84:ac:00:a8:27:d4:
d6:b1:49:86:a0:86:84:87:bb:0c:16:18:d0:37:02:
86:01:68:7b:16:af:1f:a8:79:a2:f3:52:2f:15:f5:
cb:60:8b:73:61:b5:5e:88:44:b6:18:4d:5e:0a:6b:
7a:ed:4f:2f:b8:af:75:e4:22:a4:65:0e:e3:da:bc:
e5:2b:b2:03:7e:a6:ed:35:f4:2c:35:b6:03:ee:de:
a6:7b:a3:42:c9:d7:8f:36:4c:f2:2a:ea:d3:31:01:
b6:01:98:34:43:2e:86:76:21:9f:b6:f5:48:2e:da:
75:50:c9:a3:69:d7:0f:25:76:53:25:33:a0:25:fb:
60:8a:6e:c8:60:43:8b:f2:c6:d7:6f:fa:f8:55:5c:
25:6c:9f:66:29:1f:e9:5d:7d:b5:d4:21:6c:f3:05:
35:45:f4:6f:7a:c8:a0:de:18:1f:41:28:71:1f:ea:
e6:2d:b6:27:a5:ec:98:e3:f0:b5:0e:63:02:6e:76:
1a:84:66:ff:c0:c3:31:7b:6e:ec:e6:91:ba:d7:d7:
a5:e9:1e:09:af:fd:a2:67:20:a0:bb:d3:0b:81:de:
bc:99:bd:4a:fe:96:f0:55:fc:87:59:ad:b2:0b:f4:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C1:66:03:37:40:65:87:90:37:29:C0:31:89:17:6A:DB:A7:38:11
X509v3 Authority Key Identifier:
keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e8:fa:0c:96:4a:fb:b7:b9:dd:07:01:08:e7:48:cc:fb:60:
19:4d:17:e9:88:19:cb:ec:0a:18:8e:fd:eb:74:cc:64:e9:7d:
19:83:5d:49:35:5c:91:28:3e:d3:fc:0f:c6:00:23:72:81:bc:
cb:9e:fb:47:fe:e2:cc:e4:b9:a1:8b:e6:a7:58:d8:1b:b4:01:
e2:c9:2e:71:4d:67:3b:a6:85:1e:16:8d:31:19:de:ed:84:21:
16:7c:ba:fb:4a:fb:c3:0a:38:d2:4c:fa:64:99:06:30:a2:68:
50:73:f0:42:40:c8:8f:a2:6c:e6:80:2c:f7:2d:9e:ee:16:dc:
70:e8:b4:db:95:08:3a:bf:f2:c7:52:99:7d:20:6a:6e:43:67:
29:78:2b:fe:d9:69:1c:c4:f7:e6:4f:65:08:83:dd:b9:79:cc:
c9:62:eb:ed:b3:3e:f0:e8:06:54:03:56:6a:88:43:5e:cb:a3:
c4:95:1c:5d:aa:8d:ff:ca:99:25:da:40:7e:5c:af:da:93:36:
d1:59:d9:69:f6:71:83:e2:72:68:c8:b3:ca:78:13:b5:a7:33:
c1:aa:f6:11:dc:2b:24:8a:c8:92:ec:02:87:5b:3d:1e:22:d8:
83:65:1a:c2:69:01:fb:99:04:11:e9:93:54:4f:18:b7:d4:58:
0b:b7:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:49 2026 by rpki-client