
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier: /9XLE9bhQRJ5xkm685yeBp4mKBsNXsphhlOZKnTm4BY=
Subject key identifier: DA:55:B5:B1:B3:79:42:ED:67:3D:2E:77:13:7F:69:44:63:F9:57:64
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial: 0C97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number: 0C7E
Signing time: Sat 04 Apr 2026 18:26:46 +0000
Manifest this update: Sat 04 Apr 2026 18:26:45 +0000
Manifest next update: Sat 11 Apr 2026 18:26:45 +0000
Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: 1D6z2NDvr2pAJeFAzKTkwaMVPrLDbfyLOH6KmK0oatw=)
2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: mmYtVC6pA0xQGYtEhv2t2oPHHPFtT0oBTCui3h88ftY=)
3: 398848523A0011EFB7007939C4F9AE02.roa (hash: RuZgiCZxEAf3Xl/8VUs7ZvEmESPbH1fM/aP5m0qwSvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3223 (0xc97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Validity
Not Before: Apr 4 18:26:45 2026 GMT
Not After : Apr 11 18:26:45 2026 GMT
Subject: CN=69d157e6-7f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:77:ff:b7:f8:70:d3:06:79:1a:83:ed:b1:
0b:ae:b6:96:37:3e:f6:4c:f1:ac:73:53:0d:4f:85:
3b:0d:87:2d:57:32:be:93:e5:f3:c2:e2:e6:01:5c:
95:0f:5d:17:65:c6:7a:4b:e5:3e:8a:46:71:d3:50:
03:26:67:d3:d3:3c:f9:b7:cf:5b:45:09:36:35:e4:
3b:8d:a0:91:7e:6b:0e:ff:68:8d:a0:cf:28:9c:c3:
b8:9e:b6:8b:e5:df:9a:c8:39:23:a3:07:86:3c:b2:
c2:a6:6a:35:7e:31:1a:40:8a:31:12:44:26:4c:d5:
d1:9b:de:3e:2b:81:a1:1a:af:6d:e9:3e:46:27:48:
13:d0:b0:c9:69:21:af:66:72:c1:49:b6:3b:9c:62:
c6:07:6e:da:97:55:80:17:d4:de:3d:61:f0:b1:93:
89:e5:22:0d:46:ef:a5:1b:41:23:e7:d8:29:8b:50:
7b:19:df:c9:ba:ce:d8:99:7b:ca:45:03:22:92:1e:
db:66:c1:b7:1b:21:f9:7e:cb:ce:08:08:34:00:75:
c2:79:bb:4f:0d:e2:5a:ab:e8:1b:63:08:1b:83:3f:
8d:a0:e1:51:09:8b:5e:66:70:3c:aa:4c:39:98:74:
71:fa:c0:0a:93:c8:4a:9c:76:06:72:42:44:d6:8d:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:B5:B1:B3:79:42:ED:67:3D:2E:77:13:7F:69:44:63:F9:57:64
X509v3 Authority Key Identifier:
keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:77:d8:9a:b3:2d:ac:62:4e:07:33:60:05:4b:a3:ba:a7:2c:
40:0a:76:6f:6e:95:ad:68:af:66:79:8d:b0:4b:32:ba:11:95:
b8:20:86:4b:d0:21:0e:de:19:1f:91:27:c7:86:c4:69:14:32:
eb:99:34:9a:ae:cb:ce:f0:5d:c0:05:7b:b1:eb:5f:1c:92:64:
cd:05:7e:0c:05:af:ef:ed:b3:1c:b3:c5:33:ef:66:94:6c:7b:
b7:0c:8c:2b:98:a2:77:1b:73:71:89:de:6b:0c:d5:5c:15:7a:
0a:b8:aa:5d:25:3a:cf:f0:2c:61:1a:93:7c:ea:41:73:2e:4f:
6d:97:9d:52:2d:31:e6:de:bb:80:28:5c:3a:20:c5:1e:b0:f4:
2c:85:f7:08:4c:78:d9:39:be:e2:0b:07:6c:52:22:4a:08:72:
55:9b:2f:f6:ca:3e:2d:64:aa:46:34:c6:14:40:5a:87:bf:a5:
dd:b2:06:b1:1e:4b:c2:07:9a:f4:b6:60:e2:99:81:f4:14:5a:
3c:25:e7:bb:f5:02:ce:b2:b8:68:ef:1a:c0:14:4f:ef:36:e0:
07:8c:11:90:3d:24:f3:b3:27:8e:a9:8e:6a:b9:e0:43:7a:df:
44:af:b9:2b:83:62:1f:f2:64:9a:2d:31:df:60:fc:5e:f8:1b:
f3:98:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:07 2026 by rpki-client