
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json)
Hash identifier: UwBAax1OrjXAXtYBga1kw/BBhpmTnHqvz0aPt4QbXqM=
Subject key identifier: 93:4C:8D:B7:0F:83:54:4D:6D:4C:72:C2:34:D5:5E:0C:4B:C3:5C:7A
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial: 0975
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
Manifest number: 0964
Signing time: Sat 04 Apr 2026 19:54:49 +0000
Manifest this update: Sat 04 Apr 2026 19:54:48 +0000
Manifest next update: Sat 11 Apr 2026 19:54:48 +0000
Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: DkAgw48jE7ub+7+g/Zi5hA+yBHUTGoMfKR/b2+N8iwg=)
2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: KShq5BmuPEepsEU7x+JbRfGgfm8cmEzXAADusI8In3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421 (0x975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Validity
Not Before: Apr 4 19:54:48 2026 GMT
Not After : Apr 11 19:54:48 2026 GMT
Subject: CN=69d16c88-c8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:a2:be:20:c8:8f:0d:76:59:74:00:87:4a:
26:0d:de:7d:2e:a7:98:d5:6b:0c:7c:4e:41:6b:98:
ef:e7:93:ed:ad:71:11:e6:4d:17:bd:c3:dd:8d:00:
d4:c0:e6:be:f5:fb:5f:8e:2f:1f:22:69:51:b1:20:
9a:4d:31:6f:53:db:bf:65:bc:09:f4:25:88:b4:10:
78:89:8f:3a:ec:47:09:71:0a:8b:4d:4c:a4:c0:e4:
25:6d:30:ba:d8:38:4b:31:f4:e8:d1:d0:05:6c:08:
25:69:6b:53:c4:87:99:76:ca:f0:0c:9c:df:9a:02:
ce:b6:fc:94:98:df:95:e8:91:2c:90:05:13:92:80:
97:b5:43:0b:f6:10:a7:d4:57:72:89:50:10:f3:cf:
2f:ee:d8:ed:c5:70:50:d6:7e:36:6d:b0:ec:9a:48:
5d:11:a1:93:4e:04:0b:b7:6f:46:46:a2:dd:a6:20:
a0:3d:60:38:5f:8c:af:9f:f7:bf:e0:f6:e3:e2:c1:
e4:08:a2:99:0f:54:e4:87:e3:b1:95:ed:a1:7f:4a:
21:68:47:de:d8:da:57:cd:8c:0d:1e:5d:ed:d8:a7:
cf:4f:1c:a0:e4:65:1f:0e:bb:02:f3:de:c7:e9:b6:
be:af:c1:fd:05:0e:36:e7:c0:30:31:52:6a:44:fb:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4C:8D:B7:0F:83:54:4D:6D:4C:72:C2:34:D5:5E:0C:4B:C3:5C:7A
X509v3 Authority Key Identifier:
keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:14:52:95:64:34:87:69:bd:72:6a:34:f6:da:ba:a2:ab:d6:
9a:b9:46:c2:3e:fb:8f:a1:fb:00:36:70:56:80:dc:52:f2:17:
28:46:e0:47:7f:f9:71:84:1a:af:11:80:de:34:0e:dc:e4:09:
16:57:5a:64:f2:fe:2c:d9:7d:45:ce:f1:15:25:0e:1b:2e:da:
2e:2e:b3:24:62:28:00:21:f1:0d:f7:1a:8a:b9:1f:46:89:fc:
a9:01:b1:2f:2f:09:2a:83:a6:c7:98:a6:17:0c:89:5f:12:84:
27:f2:a0:a7:ed:86:27:6d:11:7b:0b:80:27:84:43:5e:ef:3a:
7f:76:6a:7a:08:e4:1e:05:82:50:da:f3:98:e4:cb:9e:92:73:
42:0f:c7:6e:ce:2f:59:65:e0:b9:f5:f8:69:c2:51:ca:65:9b:
68:9e:be:43:12:68:12:53:63:f4:1c:7f:ac:f1:00:8c:e3:dc:
46:69:43:a5:85:02:b4:e1:12:10:12:26:0d:74:b0:a6:48:c9:
05:f9:9f:06:42:48:4a:10:d2:45:52:fd:5a:dc:1c:24:c8:b9:
c2:82:b5:87:e2:8d:52:9d:f2:66:b1:4b:bf:71:27:59:37:a8:
12:ba:46:5b:93:58:33:86:42:8d:a9:2e:a6:dc:60:f8:5e:9e:
ef:a0:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:41 2026 by rpki-client