
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier: aPNbGkMQy/hJWfokDeJyaYbCda+v7lKjn3wkEMCANWI=
Subject key identifier: 69:43:18:86:40:4B:60:7F:12:2B:FA:F1:D9:C3:C2:E2:33:1F:FA:D5
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial: 0289
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number: 0282
Signing time: Thu 21 May 2026 01:55:30 +0000
Manifest this update: Thu 21 May 2026 01:55:30 +0000
Manifest next update: Thu 28 May 2026 01:55:30 +0000
Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: QfTJsI/v2mYKWqSztMaqbG0hxCHBlKWatYdT1MTFBns=)
2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Validity
Not Before: May 21 01:55:30 2026 GMT
Not After : May 28 01:55:30 2026 GMT
Subject: CN=6a0e6612-91ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:7d:69:24:50:15:99:6d:23:3e:d8:b0:4a:
49:8b:78:cc:93:71:86:37:42:f7:6d:b3:32:ac:ef:
68:bc:37:b8:6d:55:75:59:41:1e:7d:e4:e1:bb:20:
6b:41:77:df:4c:88:78:ae:f8:56:10:90:79:7a:da:
87:7b:10:19:8e:c8:37:32:79:2e:fe:26:3d:b7:88:
73:03:23:12:11:8b:08:bc:ff:02:55:4e:c8:6b:25:
63:5c:82:69:44:14:5a:81:e8:b3:37:cb:b2:4a:21:
8f:5a:cd:b8:ee:81:3f:b6:29:65:04:23:59:9b:57:
22:cd:70:81:7e:ab:24:d8:0b:73:f6:2d:63:15:df:
8d:4e:92:6b:77:12:a7:44:cc:70:8f:1e:8e:91:c5:
42:18:a4:42:08:5e:da:4e:0c:65:d9:47:c4:6d:28:
3e:98:55:25:44:e5:fb:f1:73:e2:b2:b1:6d:25:a0:
cb:f0:2e:bc:30:d9:1c:eb:fb:b5:d1:82:92:fa:c0:
2c:32:99:46:fc:91:c5:ca:4f:21:fb:88:34:88:25:
2a:b2:1a:ef:75:ef:49:75:71:13:f7:cd:91:44:33:
44:60:30:63:7b:04:23:66:63:3f:ae:a8:d0:d3:3f:
2c:69:b4:39:f1:e7:f0:a4:38:06:bb:fd:50:fc:d0:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:43:18:86:40:4B:60:7F:12:2B:FA:F1:D9:C3:C2:E2:33:1F:FA:D5
X509v3 Authority Key Identifier:
keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:94:a8:22:8d:e9:8a:91:a1:df:84:71:f8:91:67:51:ec:83:
97:eb:ea:0e:26:ea:79:9f:86:95:69:3b:54:dc:86:65:d2:ee:
e5:00:df:c4:91:55:1a:4c:37:8a:2b:c0:56:7a:58:55:0f:05:
5d:66:e7:a0:dc:11:8b:a9:e6:30:c3:02:f8:f6:5b:17:08:95:
ce:c3:f6:10:63:c6:7c:93:82:76:ce:0d:11:18:a6:d4:3c:bd:
60:d8:26:33:e1:f1:a2:62:43:b4:ee:f4:ef:1b:11:05:65:44:
a7:b2:c7:28:c8:e2:48:9f:b7:68:9f:0c:a8:53:1b:11:bb:fd:
94:4c:1b:7d:42:4d:56:77:8e:af:22:e5:57:4e:ce:33:7d:be:
f7:f5:8f:91:c6:00:ea:6d:7e:5f:25:fd:72:61:65:f8:e5:ed:
29:18:34:5a:a0:30:2c:a0:f8:e6:08:6e:1b:ec:e0:31:3f:45:
df:45:ea:2e:bb:4a:e3:ba:ca:ed:48:f4:0b:ff:de:69:41:50:
e2:1e:77:74:56:18:fb:1c:ed:ce:5f:9e:2c:91:da:5d:74:ba:
f4:b0:7a:34:26:66:48:11:fb:0b:8b:96:dd:3d:27:ec:12:6e:
a1:35:9d:10:4a:a0:e2:dc:a3:7e:4f:9e:ce:38:04:d1:dd:56:
64:15:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:36:07 2026 by rpki-client