
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier: AfXIgsM32pZ5D3r7lypSMi78Oz18kXwGoPJSvJzL21o=
Subject key identifier: AE:22:BD:A9:09:FB:C3:22:F0:D1:60:B3:94:DB:47:65:02:48:1E:74
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 27F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number: 2795
Signing time: Sat 04 Apr 2026 15:36:16 +0000
Manifest this update: Sat 04 Apr 2026 15:36:16 +0000
Manifest next update: Sat 11 Apr 2026 15:36:16 +0000
Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: FP+TfZtqZQu8jqNs7o2NzHhQz56lNxBxtKV/ImPHlXg=)
2: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: m8LjRReURkNYQlFbq8Oxyk7Q/R4DlXQJo+P+UmQjlpk=)
3: 79393030926D11F0B792FC45C4F9AE02.roa (hash: xTWQ2YY51Yjv1sC0QX+NsLpLvl8JaZ7NwJLpiNVnw2Q=)
4: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: W4I7YPOuWVvwmHp1ZJLPAJvoqNMOXVHgJ7mR8552CZw=)
5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 8d/EsyvXZ0sZ4UIJJOhDUVw09qD8ry/nM19Udtp/aCs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10228 (0x27f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Apr 4 15:36:16 2026 GMT
Not After : Apr 11 15:36:16 2026 GMT
Subject: CN=69d12ff0-60ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:e7:12:91:20:24:fb:b6:1c:de:2e:97:5d:
7a:7c:e6:38:37:83:bd:8c:84:c6:a9:92:b6:4d:27:
ea:24:ae:ca:10:23:d3:04:9f:c3:18:0e:e2:ac:01:
23:1b:2a:96:eb:c3:18:37:53:c6:13:cb:de:14:7e:
6e:91:99:95:cb:41:76:d3:5b:e8:52:15:3f:11:ac:
f9:80:fa:ba:0d:3f:0c:56:08:7d:a9:d2:51:8f:74:
4e:13:6a:4a:16:bf:b0:34:bd:97:10:cb:2a:03:28:
b4:18:49:3c:b3:fc:45:63:0d:81:80:72:49:3d:b3:
a0:ef:76:07:3f:19:09:51:22:54:6a:0a:d8:dd:a8:
44:7a:80:16:56:80:d9:90:2a:f0:ce:72:48:fa:d6:
dd:15:92:1b:a5:fd:81:a8:62:e0:09:28:66:5f:2c:
9c:cd:18:de:31:18:60:50:e8:69:5f:26:0b:bf:49:
fc:29:a3:72:3d:7d:b8:3e:e5:44:7f:0f:66:3f:24:
e6:b4:7c:c8:25:cd:0c:21:9f:3a:40:b0:dc:b0:78:
22:98:f2:c8:b4:ad:4a:63:87:59:82:b5:c4:bf:6b:
30:50:21:64:c8:be:8a:0e:b0:95:15:6e:c8:c2:ae:
d9:b7:d5:e9:17:97:5c:9e:3b:1b:0e:ff:dd:ec:4f:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:22:BD:A9:09:FB:C3:22:F0:D1:60:B3:94:DB:47:65:02:48:1E:74
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:f9:e1:ac:2f:20:20:28:d3:e8:b8:8e:8b:09:76:70:35:
6e:88:8c:34:f4:ad:09:88:e1:f4:0b:da:47:c0:54:d1:14:5e:
3d:87:db:5c:1a:3c:6d:d5:db:a5:eb:09:85:af:4c:54:97:86:
4f:35:6a:1c:3b:9f:07:4f:af:9c:a1:85:8a:3a:5f:a4:97:86:
62:c1:82:4a:66:96:c2:d1:99:b2:21:49:0a:ed:af:b9:1c:c2:
b7:27:a7:45:7c:e7:3e:75:df:57:27:50:2b:7b:2c:2a:38:a3:
ee:3c:3f:5c:26:1f:2e:e9:e5:2c:97:34:f9:12:eb:54:3e:96:
37:f6:b1:7b:74:a0:7b:13:ae:5c:e1:47:3c:ae:78:7a:ea:c5:
c1:fd:61:a4:fb:b8:77:54:f0:fe:ed:45:d5:19:1a:89:bf:26:
c3:9d:52:c2:be:7f:01:41:16:11:cc:c9:76:fe:dc:20:92:a3:
59:d7:e1:af:8f:42:d5:06:f2:4c:fc:7a:c3:58:a1:83:d5:ed:
75:ef:35:ec:7e:b1:37:58:c9:14:2b:b7:4e:79:6f:94:47:1f:
26:13:d7:2c:d2:76:13:e2:d0:78:e2:b6:3b:fa:75:2d:6a:13:
70:99:3a:61:77:67:cc:6d:d9:ca:c8:ee:5b:3b:77:47:36:a1:
32:10:8f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:01 2026 by rpki-client