
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier: 0VbuPRHDcuySlO202rvVBMfV+5UWw8KjOG38LRX8hrU=
Subject key identifier: A9:8B:B9:BA:38:AF:DE:56:9E:BB:34:0C:68:15:38:23:68:16:01:AF
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 08D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number: 084C
Signing time: Sat 14 Mar 2026 20:37:07 +0000
Manifest this update: Sat 14 Mar 2026 20:37:06 +0000
Manifest next update: Sat 21 Mar 2026 20:37:06 +0000
Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 6cpcVLebeDCecuqlxnKkh245POENFUrkRI64jb+HhRU=)
2: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
3: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
4: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
5: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
6: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
7: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
8: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
9: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
11: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 20:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263 (0x8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Mar 14 20:37:06 2026 GMT
Not After : Mar 21 20:37:06 2026 GMT
Subject: CN=69b5c6f3-5d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:9b:b9:fc:1a:80:60:ef:ad:99:30:6a:98:
e1:2d:38:55:63:ae:52:0d:ff:09:52:72:e7:9c:2a:
90:0c:6f:7d:c3:56:ad:87:f8:b2:d3:bf:df:e6:e0:
2a:e2:85:c4:3c:f5:9d:0c:74:d6:61:02:b3:f8:36:
31:03:78:55:58:86:35:3a:8a:a7:73:3b:57:19:e5:
b1:7c:04:cd:1d:ef:ca:50:8c:c4:d6:3e:69:2e:f3:
3e:ef:4e:cb:e4:5c:6b:f1:85:4e:db:7a:a3:e7:74:
29:a5:44:02:f6:c9:e7:ba:3c:c3:81:07:0f:12:ce:
91:55:be:f2:82:44:e0:02:7f:df:10:24:e3:f3:d9:
11:7d:8a:f7:e4:04:d4:e2:9e:5d:f1:5f:ad:58:43:
6e:bc:27:83:5a:5c:99:9d:95:d1:f2:c3:4e:a8:4b:
9b:d4:a2:f6:5c:08:98:98:23:ff:1b:52:43:a0:29:
b1:62:45:1e:94:a2:f4:b2:da:cb:b9:81:81:2d:96:
6d:51:30:e6:b5:ca:bf:a9:4c:37:a7:f9:67:fe:4f:
ef:b6:50:c2:35:3e:9c:97:43:bb:7f:37:fa:0e:df:
7a:c8:5b:c2:0e:fc:c5:98:0b:35:f1:40:c0:ad:1a:
88:4b:bd:18:bc:00:40:65:be:01:30:59:25:b6:e3:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:B9:BA:38:AF:DE:56:9E:BB:34:0C:68:15:38:23:68:16:01:AF
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:c1:5a:a0:ad:fe:d0:ed:8e:39:12:33:fb:dd:97:01:bb:94:
c3:8d:ce:cc:c8:c7:f4:8d:ac:59:cc:3f:07:31:d8:70:49:d6:
b5:61:81:96:be:b3:d0:3d:92:29:fd:d8:ea:5a:46:0a:55:35:
31:07:f9:14:74:69:42:3e:18:27:72:50:54:00:cd:ba:c4:31:
68:f9:9a:51:0b:07:a2:c5:66:b2:45:ec:59:30:29:12:42:bb:
9d:dd:c2:ed:be:b1:bf:f8:37:d9:8a:6b:ef:c2:24:37:64:4a:
de:6a:bc:f5:9e:dc:49:25:b3:34:f8:f8:63:bc:c2:44:82:ac:
33:b6:c0:d7:1b:45:5b:5c:d2:f9:e0:98:ad:89:a6:9c:97:d4:
06:af:83:c9:bf:f9:74:05:cd:08:c1:a9:2d:fb:1a:1c:bc:86:
b3:31:6b:86:67:f3:17:dd:c4:7c:be:fa:81:c9:fb:6d:4a:69:
35:2f:f1:24:af:3e:8f:04:83:69:f1:70:9a:b2:e7:ae:e3:80:
88:26:60:b5:b6:b2:24:04:a4:8b:c8:2b:c4:8a:85:e8:cc:5c:
32:19:bd:53:f5:46:47:d5:94:d1:9e:6d:85:f5:b8:c5:45:a1:
e0:dd:16:10:2e:1f:b1:3c:df:1b:32:99:74:0f:22:e6:c7:c2:
96:4e:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 13:44:36 2026 by rpki-client