
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier: hdyL2xfxOGdLm11VJbfBkGzwjmlrb24e4YvcTTT4emM=
Subject key identifier: F1:4B:C4:A9:11:3B:6E:D6:2C:8B:C7:97:78:A3:28:7F:68:75:7D:1A
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number: AD
Signing time: Sat 18 Apr 2026 20:21:05 +0000
Manifest this update: Sat 18 Apr 2026 20:21:04 +0000
Manifest next update: Sat 25 Apr 2026 20:21:04 +0000
Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: sSZqIu7EpyTCB2IeH13OGpaSOaKlGJjHtJG/wfb77Ko=)
2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: Rx4vAlWyTLV0daFrUy6DuCo/+UjTzyGK5tVT0zVpxsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Validity
Not Before: Apr 18 20:21:04 2026 GMT
Not After : Apr 25 20:21:04 2026 GMT
Subject: CN=69e3e7b1-394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:3d:80:0c:c9:96:37:41:cb:c4:79:24:03:
8b:ff:0c:c5:83:b7:a8:a1:ef:53:8c:96:e4:ce:aa:
aa:82:fb:63:1c:78:fb:22:39:62:73:c4:f4:d9:c1:
67:d2:9a:dd:3a:ed:51:7b:ad:6e:e4:80:28:09:57:
5f:34:9d:36:81:95:73:91:a1:90:7d:16:56:bb:cd:
2e:b9:5f:c8:c8:3e:16:fe:f2:6e:05:4d:d3:b7:c9:
88:10:c3:0a:ae:ac:66:07:ac:d8:5e:b6:4c:c7:1f:
ae:a1:61:58:65:88:1a:e6:65:73:8d:bd:f6:52:6c:
40:08:6b:db:6e:25:3c:9c:32:9e:76:25:22:40:8f:
e0:f0:b5:33:7c:7c:77:a4:e2:25:44:29:70:c7:02:
ef:5a:dc:88:cf:b4:19:a2:70:b8:ce:b5:ab:ee:16:
3a:2f:9a:bd:e9:72:86:15:c0:61:f3:22:19:05:79:
4a:54:c8:18:27:39:5a:12:94:cb:35:7b:7f:88:54:
97:4e:53:b5:b7:61:60:a2:21:c6:db:0e:64:a6:ec:
87:d8:18:95:31:e1:b5:ee:f5:22:16:99:0a:d5:1a:
0b:48:9f:cf:1d:45:a9:c7:29:3d:66:e5:12:d3:36:
63:9e:68:e0:fe:8f:fe:0e:a7:c0:b2:cd:99:e3:85:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4B:C4:A9:11:3B:6E:D6:2C:8B:C7:97:78:A3:28:7F:68:75:7D:1A
X509v3 Authority Key Identifier:
keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:51:d3:df:ba:a1:db:8d:e8:28:f3:6e:13:2b:b0:e4:1a:ba:
7b:c5:11:b7:9f:70:a7:38:27:fe:35:1c:e8:5d:23:bf:3d:dd:
15:a2:e7:6e:6d:fe:e7:dc:f0:cb:65:be:6c:b1:6f:2e:11:25:
9d:0c:7d:35:e0:7f:5b:88:fd:fd:7d:7a:a9:b1:12:14:b7:35:
b0:12:68:03:1c:c1:f7:12:6b:e9:81:11:37:a0:3e:e0:2e:53:
73:b2:b5:d0:3f:ef:71:d7:38:e2:25:8f:fe:49:67:ea:12:94:
0b:4f:d8:5e:ef:2c:44:76:71:17:16:d5:70:80:f1:36:be:81:
b8:a9:3a:6d:f1:f9:f5:32:a1:e6:74:1e:f5:bc:de:99:1e:9b:
44:14:32:1c:ae:b0:e6:f5:69:d7:e5:99:5e:f0:4a:43:44:bc:
ce:7d:7a:fa:7b:ad:ba:7f:68:fc:bf:38:b5:30:a1:58:d4:43:
bf:80:d8:e7:e0:f0:7d:c4:59:4f:d3:9c:2e:5c:c6:cc:a3:3f:
5f:29:09:50:ca:c7:1f:88:1c:14:a4:34:38:83:21:d5:45:94:
d8:e2:64:ee:e7:f4:69:2a:bf:23:87:4d:d1:25:90:a4:9f:a5:
7b:c2:8a:44:19:9b:e1:9f:68:e7:2c:02:0a:38:fe:a6:b9:cf:
57:73:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:23:53 2026 by rpki-client