
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json)
Hash identifier: SmJnuFKxQxJsb5XNjzYQKnLoJpT3VRpm9vRYhFsCFKw=
Subject key identifier: E6:B5:48:30:2E:D7:C5:DB:0C:0E:FB:87:7A:EA:F8:BC:17:CE:72:85
Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
Manifest number: A3
Signing time: Sun 05 Apr 2026 06:40:03 +0000
Manifest this update: Sun 05 Apr 2026 06:40:02 +0000
Manifest next update: Sun 12 Apr 2026 06:40:02 +0000
Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: dXwW2mJqSD1X5JuTaLkDD57wCjsbw5uvi0u2rAMhFSo=)
2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: ff9Hb3p8NVhNbBeRoRPoSLLnHieGzUbHBlT6U/ikvfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:40:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Validity
Not Before: Apr 5 06:40:02 2026 GMT
Not After : Apr 12 06:40:02 2026 GMT
Subject: CN=69d203c3-a5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:75:a7:d7:8c:72:ae:3e:34:b2:60:68:b6:
b2:60:56:3f:b3:1b:23:e3:f3:53:8c:71:a9:92:75:
b9:02:09:de:d1:51:76:e0:cd:5b:9a:c9:02:48:0e:
29:46:b2:91:e6:fd:e6:f6:52:93:24:0e:50:12:95:
72:e6:24:6c:5c:25:18:14:a9:80:3d:f3:56:17:aa:
62:4c:43:c8:90:0e:fa:4f:84:32:72:08:24:63:c6:
25:b2:bf:df:99:ab:b1:48:de:89:e4:ab:ee:c0:57:
e8:57:17:94:44:3b:02:1b:cc:47:e7:1e:dd:a9:e4:
85:31:b9:6f:53:33:cb:12:a0:97:e3:75:a6:7a:92:
3e:14:fa:63:5c:26:2e:8f:5c:18:99:06:9d:ca:c5:
b7:15:08:30:f1:95:7d:f0:a5:9b:45:b6:a6:61:42:
cf:ae:35:50:12:a3:e6:a0:4f:fb:40:51:bc:41:81:
3a:62:58:c2:23:88:67:27:13:ff:29:1d:40:c6:54:
46:7e:7a:65:f4:d9:94:55:ed:db:dd:c3:88:ec:f0:
e4:57:81:db:8b:8c:f7:04:56:b3:87:df:02:a9:fc:
7e:39:79:ec:a8:5a:28:81:30:98:ee:06:ad:b7:de:
d7:1c:d1:cc:89:91:51:af:f5:52:b1:d5:00:64:40:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:48:30:2E:D7:C5:DB:0C:0E:FB:87:7A:EA:F8:BC:17:CE:72:85
X509v3 Authority Key Identifier:
keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:c6:60:8e:5c:58:24:8e:6e:72:ec:cf:db:98:c3:62:e0:26:
d8:7b:8c:25:18:b1:36:02:ed:68:a3:39:1c:9c:34:d8:f9:8e:
5e:61:91:e3:86:7a:5c:5f:f9:fc:e6:e8:ab:31:64:fd:95:3c:
9c:f9:57:56:f5:2c:95:0e:01:1a:a0:0c:dd:1e:d2:e5:49:a8:
a8:32:33:3a:e1:02:9a:9e:42:61:a6:5b:d1:01:bc:18:14:1d:
cf:ba:c7:e6:8e:45:a5:41:6c:f7:7a:c2:68:d5:50:61:53:e9:
5b:3e:a9:e0:51:04:25:7a:86:3e:3c:ef:43:af:77:33:c7:53:
d2:ee:42:ff:5a:6d:cd:7a:ff:47:c8:59:57:8d:d1:0c:ad:72:
1b:7e:dc:7c:34:59:e6:d4:16:fb:40:cc:f9:8a:fa:50:6c:3e:
a9:bd:a4:89:15:d0:18:0f:ef:57:9d:af:17:a5:77:75:1a:f2:
5e:83:de:ff:57:0d:46:31:63:e3:07:36:34:db:a6:ca:8d:dd:
e4:11:bf:8f:d8:66:d3:22:0c:55:47:dd:97:a2:b0:c8:f0:91:
f8:c3:97:e9:96:ec:91:c1:2f:07:06:e0:d0:b5:78:1f:c7:8e:
75:f0:f0:4b:d6:ad:f1:2e:1d:0f:bd:4a:93:4c:45:2c:b6:72:
de:5e:48:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:01 2026 by rpki-client