
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier: 4fa/txHMjCON3ybG9Nhb8y91cPtPWN95jzo6r/a4AQA=
Subject key identifier: 56:FC:3B:C7:34:89:B3:1C:CB:2E:E7:90:C1:DB:FA:FD:B3:17:89:41
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number: 95
Signing time: Mon 02 Mar 2026 20:22:30 +0000
Manifest this update: Mon 02 Mar 2026 20:22:29 +0000
Manifest next update: Mon 09 Mar 2026 20:22:29 +0000
Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: fZXlZ03YWKcy2xH4io9Ew3lgFB9cHhtTTVUvrX7uySQ=)
2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: Rx4vAlWyTLV0daFrUy6DuCo/+UjTzyGK5tVT0zVpxsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Validity
Not Before: Mar 2 20:22:29 2026 GMT
Not After : Mar 9 20:22:29 2026 GMT
Subject: CN=69a5f185-c76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:c7:b6:5a:78:e5:17:59:22:2d:76:95:ca:
7c:66:f7:25:6e:9d:b1:53:05:57:46:10:c7:80:b4:
21:84:25:c7:0a:35:9f:b0:4f:c4:56:03:97:81:95:
b9:c6:af:b9:e4:6a:a3:3d:31:f6:bf:b3:12:cb:0f:
0f:cf:a5:d7:7d:92:87:4a:6f:df:eb:28:8b:95:f3:
0d:09:63:da:96:33:54:0b:11:9e:ac:8c:12:b6:55:
81:f0:22:e4:9c:94:5c:15:b7:20:0c:3c:16:18:d7:
da:ac:3a:d9:bf:9e:3e:fe:83:60:9a:4e:73:cc:ab:
51:f1:3b:2b:e7:53:b6:c6:28:5c:af:05:eb:fa:f6:
26:0c:ee:0d:20:b1:b0:ac:2d:a1:d1:72:2c:b2:fa:
40:55:19:a6:2f:f4:33:7e:ab:33:dc:3c:6e:91:f9:
17:8c:f4:7a:fb:ef:d0:6d:7a:43:d0:1c:f1:98:e2:
9e:06:9f:1b:85:f4:27:64:6a:e9:cf:25:63:dd:e0:
dd:ce:6e:51:9e:b4:b1:c7:d8:20:97:f3:29:96:4a:
91:e7:91:19:c6:9e:55:ae:e6:1c:34:c0:36:31:92:
4b:0b:55:97:86:ea:34:85:b0:b1:87:0b:c1:2e:22:
f5:28:04:15:d9:94:1f:b3:b5:3b:17:dc:2d:cf:69:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:3B:C7:34:89:B3:1C:CB:2E:E7:90:C1:DB:FA:FD:B3:17:89:41
X509v3 Authority Key Identifier:
keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d9:0d:c5:0d:61:1f:de:c0:71:bf:01:29:3b:3e:b1:ee:ca:
65:1e:72:ec:20:4e:9e:bf:05:c7:ba:4d:41:54:03:24:1e:da:
93:ee:ed:af:a0:c8:f3:fe:d3:98:83:54:8d:8d:95:1c:4e:f6:
e0:61:fa:dc:d8:81:89:70:24:58:f6:95:b0:6f:aa:1e:8c:b1:
e1:da:cd:5f:6f:f3:c3:ee:ec:9d:d4:89:38:da:f6:6f:aa:26:
7f:a5:96:f5:d3:8e:b1:85:9a:59:76:aa:d2:d2:9f:47:61:bc:
11:54:1e:cc:a7:6d:ea:a8:6e:08:20:8b:04:f5:15:50:6f:9c:
96:80:1f:f1:ff:ab:9a:5e:23:13:9b:04:ed:14:5a:a4:17:bb:
95:58:cb:bd:6d:a7:67:40:ed:e2:ab:b2:ad:46:58:f6:93:0c:
88:69:92:25:31:5c:53:52:72:98:29:e1:15:8e:3c:a8:a5:74:
f9:54:1a:d9:7e:ad:ea:a9:28:74:c2:f7:3d:32:28:80:7b:47:
0b:34:81:e4:4f:e8:ad:f7:b3:3f:99:19:cf:4b:5c:67:a4:35:
18:62:e5:96:96:de:53:d3:90:55:20:9f:93:7d:da:d1:14:d9:
8a:ca:24:a1:8e:7f:95:6b:2f:19:60:2f:59:f1:54:29:5e:99:
6c:76:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:02 2026 by rpki-client