
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft
File: md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft (raw, json)
Hash identifier: YiQYqjyk6CrseJnCeCq1eDxdQaW6vBwq3kuA/E/Zqxo=
Subject key identifier: 6C:A3:CF:F4:BA:AC:4A:B5:1B:04:3D:BF:03:2C:BA:C7:03:B5:9E:4B
Authority key identifier: 99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D
Certificate issuer: /CN=A91B08F7/serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D
Certificate serial: 180C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft
Manifest number: 1CB1
Signing time: Sat 04 Apr 2026 16:26:18 +0000
Manifest this update: Sat 04 Apr 2026 16:26:17 +0000
Manifest next update: Sat 11 Apr 2026 16:26:17 +0000
Files and hashes: 1: md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl (hash: 4N0n1NTJbmNjGeE1CLzD1qQgtYkiIUN1dqIXs5hK0qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl
rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6156 (0x180c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B08F7, serialNumber=99DE2C37D1A62BA8B97B5A1CFD2CD2940B0D4D0D
Validity
Not Before: Apr 4 16:26:17 2026 GMT
Not After : Apr 11 16:26:17 2026 GMT
Subject: CN=69d13baa-e6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:77:92:7c:17:c8:dd:8b:41:69:ac:bb:bb:
97:7a:2a:d6:2c:1e:60:78:75:1f:dc:45:13:26:a4:
40:53:79:1c:e5:26:10:77:fe:9b:2c:52:44:92:5b:
22:69:fc:f1:2e:c2:e4:68:51:27:81:e7:16:ef:2e:
2a:66:40:62:f5:f0:44:95:12:5a:86:2a:59:25:5a:
3d:4a:75:4c:f2:ec:43:9d:4a:36:bc:b6:d9:c5:d0:
c1:e3:e8:13:af:c0:21:63:34:db:81:7d:43:e2:d4:
b0:69:2f:34:0a:e3:2a:07:ed:22:a3:5a:1b:b9:ba:
ce:ff:24:69:d8:02:49:ae:9a:c2:86:0e:1b:f3:4d:
82:ec:16:5b:3a:3e:3c:2b:db:c4:99:b4:e5:74:6b:
52:5c:57:df:a2:42:d3:ac:f3:d0:30:ca:8b:6e:3b:
08:df:da:9a:a9:95:84:38:71:9e:19:cd:67:28:5d:
ca:e1:1d:83:cc:67:53:9e:87:0f:53:ce:4a:95:b7:
0f:4f:81:b8:00:63:41:94:b8:a9:cd:26:c8:42:81:
0f:e8:1f:31:53:16:2c:1b:c3:a9:ac:6e:03:a3:5c:
ff:87:ab:e6:5a:3a:e5:f4:4d:3e:40:4d:9a:f8:9e:
e4:d8:b7:70:1c:84:2e:14:16:c5:e7:91:e5:66:81:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A3:CF:F4:BA:AC:4A:B5:1B:04:3D:BF:03:2C:BA:C7:03:B5:9E:4B
X509v3 Authority Key Identifier:
keyid:99:DE:2C:37:D1:A6:2B:A8:B9:7B:5A:1C:FD:2C:D2:94:0B:0D:4D:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md4sN9GmK6i5e1oc_SzSlAsNTQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/md4sN9GmK6i5e1oc_SzSlAsNTQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:02:08:67:37:d8:8e:11:b1:1d:b7:6a:bd:1a:2a:49:6f:4b:
a0:80:f8:ff:98:91:af:48:50:5a:9f:1d:87:ba:55:c6:20:27:
a6:de:52:2a:23:e9:a4:a5:17:2f:fe:e2:9c:9c:a2:00:84:a6:
cf:56:54:f2:8a:19:a0:62:aa:cd:f0:74:aa:96:6c:20:8e:30:
b2:53:b8:b2:32:f3:7f:d9:04:90:38:43:a9:71:19:84:d1:e4:
f0:62:1c:3a:f5:26:e7:57:b9:0a:80:e3:da:34:f7:1a:af:c3:
9e:8c:2a:9e:d8:0d:d3:36:3c:e3:e7:81:5e:ac:52:4a:7f:34:
97:57:82:61:3d:8f:73:7e:f7:8e:1b:e8:af:a8:53:86:77:68:
d3:5a:ce:14:93:7e:89:47:90:d4:da:ea:bc:b9:78:b4:cb:12:
53:b8:f3:2c:75:28:ec:61:e0:d6:f4:6b:4c:ce:0d:ff:64:7f:
a3:f6:b1:f8:70:e7:14:25:59:d2:7e:25:81:f1:5b:78:c2:8d:
4b:60:77:a6:e7:09:65:bc:c3:9d:8a:37:89:77:c9:f5:44:6d:
d6:5f:0c:b3:d4:2a:0d:a8:99:35:64:ec:41:58:48:a6:28:cd:
6a:0e:ec:c3:fa:20:6f:06:14:0a:52:8d:70:e2:1b:2b:86:ca:
6a:ca:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:33 2026 by rpki-client