
$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier: Fua+77k3sMPsbVmDcGEvhxa7eNLdgFWJfkS9jjC9j7I=
Subject key identifier: 65:31:B6:42:09:6E:68:77:25:BC:7C:4E:DF:37:84:9A:BC:CD:1F:BA
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number: 63
Signing time: Thu 21 May 2026 08:09:32 +0000
Manifest this update: Thu 21 May 2026 08:09:31 +0000
Manifest next update: Thu 28 May 2026 08:09:31 +0000
Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: 2j7Ee0II+oPOmXEhfSpHoNYNW+sFT2BylI29WntC2NE=)
2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Validity
Not Before: May 21 08:09:31 2026 GMT
Not After : May 28 08:09:31 2026 GMT
Subject: CN=6a0ebdbc-fc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:75:04:18:e0:de:a0:3d:a4:db:2c:28:c8:
a4:dd:59:92:85:74:2f:56:0f:e5:86:1a:92:92:5a:
74:14:e3:cf:03:c4:a8:e9:3f:3a:c3:d1:ba:ef:21:
10:d1:fd:62:00:fe:db:ed:2f:de:fa:2d:e2:25:76:
65:fe:60:48:e2:24:aa:b9:0a:fa:42:c3:f0:4f:09:
74:c5:d6:85:1d:bd:62:2b:9c:09:2e:96:a7:58:3b:
ba:3c:42:6e:6e:35:74:85:24:25:f0:0a:aa:ea:7f:
e7:0d:3e:ea:4b:bd:69:de:32:d3:39:2b:f5:c5:01:
fb:e8:87:50:fa:88:7c:68:79:77:63:68:24:1c:67:
d4:18:85:6c:35:47:e9:e9:cc:14:e9:1a:3f:e2:7c:
87:fa:87:c9:af:05:ce:b7:36:72:93:a8:9b:e4:05:
66:48:de:e1:2f:d8:b1:f5:54:c5:e5:c7:96:92:94:
85:5c:25:4e:1d:d1:66:5d:0e:97:18:7a:4b:4a:27:
e6:93:18:17:d0:a8:9d:59:5d:08:74:42:37:dd:a5:
58:8d:b1:86:6a:6d:9c:98:f5:3d:35:3e:a3:68:7c:
ed:0d:ac:ad:62:0f:3c:ba:0c:0d:39:8e:29:b6:17:
13:d5:92:4e:e2:fc:fb:e3:f1:65:01:db:15:54:04:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:B6:42:09:6E:68:77:25:BC:7C:4E:DF:37:84:9A:BC:CD:1F:BA
X509v3 Authority Key Identifier:
keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:05:de:c9:8c:25:25:57:c8:de:ce:5b:37:11:22:b4:97:ac:
21:d9:88:e0:82:94:94:59:d9:0d:79:81:bc:fd:5d:89:da:5d:
dc:e4:f4:42:ba:ff:38:65:93:52:ad:7c:63:54:e5:69:b2:5e:
cf:01:d6:a1:2f:ea:e3:a3:3e:05:b8:d7:a0:d7:4a:45:c3:5a:
b3:e9:15:af:30:94:30:d6:04:8d:84:00:9e:94:3a:a6:90:c3:
8c:3d:8a:e2:56:8b:b9:de:c3:b6:d5:13:c0:d2:03:d0:59:f4:
03:d5:eb:1b:46:c9:58:e6:ff:09:1e:b4:21:99:95:5e:67:fb:
c3:07:f6:6b:bf:d3:8a:bf:6e:1f:cf:c4:77:c8:65:bd:01:12:
24:57:5c:03:69:53:9e:dc:fb:fa:d5:fc:6f:83:f1:02:25:92:
2f:64:08:ad:d6:bc:e2:aa:29:03:70:a5:59:77:16:49:52:e1:
97:67:28:02:c7:23:44:77:72:ac:81:dc:f4:c1:7a:a0:98:68:
bd:34:91:f5:e1:a7:e2:30:be:8d:e1:6e:64:a5:81:e1:96:90:
c3:bb:f2:25:ef:df:d9:69:ab:4a:bc:c6:5a:f4:7d:43:ab:0d:
74:64:7e:56:5b:74:d3:3e:b9:d7:54:7b:e7:0d:f8:de:ba:1b:
48:36:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:21 2026 by rpki-client