
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier: 3V6d3mW2iF2vrLVBSdAuPXFHsfw5qS3W+gAI1I0UQX4=
Subject key identifier: 64:83:4D:02:FB:04:CB:E3:40:54:B2:57:22:04:C6:B6:14:24:FA:0E
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial: 0B76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number: 0B51
Signing time: Sat 28 Mar 2026 19:10:01 +0000
Manifest this update: Sat 28 Mar 2026 19:10:01 +0000
Manifest next update: Sat 04 Apr 2026 19:10:01 +0000
Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: E6fClvlClLuF6gbThVK9mXF8S075me/tHKWlr0w5dPY=)
2: 76D38708D64611EE98C44371C4F9AE02.roa (hash: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=)
3: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: BPfB/XTTgtvHGk3VIxBnFhEcnL04DxqHE/nHRVwjG7s=)
4: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: mmuNJzdQc+EMG4vi6YI8GL1XWoSarik/6NrUTgT3yPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Apr 2026 19:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2934 (0xb76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Validity
Not Before: Mar 28 19:10:01 2026 GMT
Not After : Apr 4 19:10:01 2026 GMT
Subject: CN=69c82789-029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:a5:8a:d3:2d:45:15:f7:25:9f:b0:b4:dd:
8b:0b:27:81:26:b9:c7:cf:22:4f:8f:97:29:5e:4c:
38:bc:2c:a9:97:0d:71:c9:08:ed:50:c9:78:10:1b:
a3:39:ce:be:0f:56:c8:d3:ea:2e:c4:18:9d:c1:a0:
c6:43:13:59:60:f8:a8:f4:89:73:ef:70:6b:a3:39:
66:56:50:7f:11:49:b5:6f:35:87:d9:72:c6:2d:fa:
7c:d8:8e:55:b5:9a:9b:c1:6b:04:4e:38:f3:9e:e3:
6c:77:0c:b7:96:3f:b4:ff:8b:e4:3e:b1:68:c9:e6:
24:d4:c6:e7:a6:a4:fe:fb:63:02:1d:e1:2a:e1:db:
23:5c:a0:05:bd:ce:2e:01:81:91:1d:a0:d3:fd:d5:
f9:53:c9:09:0e:da:5f:ed:5a:c8:e8:a2:88:a2:70:
85:36:3b:45:dd:a3:15:fc:11:9b:ed:56:27:48:01:
ea:62:10:19:24:d9:ab:28:ca:a9:a0:72:1b:3b:72:
fa:1f:66:4f:ef:49:83:28:15:06:90:d2:e5:40:fa:
48:a4:e1:04:65:60:82:83:84:99:93:f3:7b:96:50:
5c:d0:9b:87:20:ea:49:0a:37:27:31:05:2d:96:26:
8c:64:a7:8f:22:c6:a3:70:65:50:c4:dd:ce:60:57:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:83:4D:02:FB:04:CB:E3:40:54:B2:57:22:04:C6:B6:14:24:FA:0E
X509v3 Authority Key Identifier:
keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1a:91:57:8c:48:79:7a:76:26:75:ac:39:d0:84:24:9b:53:
df:34:7c:3e:dd:d9:7d:8f:c0:e6:57:b8:c9:ca:fe:39:44:74:
41:88:ec:a5:77:0f:ad:01:ed:0c:e9:7f:67:0a:99:22:02:16:
a9:13:6d:87:91:26:3f:0e:fd:a5:48:c3:e3:ce:f3:36:a2:10:
10:38:98:b1:92:2e:b3:94:5c:46:a4:ca:78:51:67:e7:8f:47:
9e:34:59:d3:95:d6:bc:dc:22:a0:e8:e4:28:cf:d0:86:61:ea:
05:5a:23:98:21:df:33:7b:47:9b:8f:cd:4f:8a:4d:e2:b2:fd:
d9:f9:6e:50:8a:f7:af:f3:b7:57:bf:b6:0a:df:6f:7b:b7:75:
aa:79:29:4f:23:51:2d:4c:73:e5:49:9d:0a:85:c7:49:ba:85:
0d:bd:14:bb:b1:e0:b1:38:14:e0:ae:0d:f8:20:e0:fa:fa:8a:
61:b6:a2:17:5f:9a:f5:be:b5:67:69:78:36:06:f6:f3:fa:9e:
35:e3:47:ae:ed:ac:1c:c3:02:30:4e:87:07:25:42:86:e0:61:
ea:f5:b2:ff:e3:57:f8:04:8f:ca:a6:33:b0:d4:d0:5c:3b:f4:
79:a1:9e:d7:1f:b4:6f:ff:89:f6:68:c0:3a:9f:08:ce:0a:b6:
65:b6:e6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 11:13:52 2026 by rpki-client