
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json)
Hash identifier: gaKk+SlS+EwI6KLfKp9FbaVfWeXCa1jMjgM+swkFSYM=
Subject key identifier: B2:51:1F:C0:E5:B4:AB:1D:49:1A:7B:C9:AB:2E:78:B1:6F:22:D7:98
Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57
Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
Certificate serial: 0C5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
Manifest number: 0C53
Signing time: Wed 20 May 2026 18:44:33 +0000
Manifest this update: Wed 20 May 2026 18:44:33 +0000
Manifest next update: Wed 27 May 2026 18:44:33 +0000
Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: B9MgfzljEpiUmhDO8LMpNafQTJyTW/KU38PURyhsZLA=)
2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: 05Ptx/86GPO/lhad6zk3MbGdkqRjiz5wYtBGze/jKII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl
rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
Validity
Not Before: May 20 18:44:33 2026 GMT
Not After : May 27 18:44:33 2026 GMT
Subject: CN=6a0e0111-ecd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:5b:b2:e2:44:d8:35:8d:05:06:6e:f6:0b:
e9:f9:e6:13:e4:83:ca:12:8d:26:9d:6a:94:2e:d4:
25:3d:f2:a7:2f:c4:87:00:13:54:6b:af:06:5b:1e:
b7:14:c4:ef:66:82:e7:b7:0d:45:fe:98:ce:b9:fc:
e5:db:1e:d2:ae:80:c4:2f:21:ff:af:a7:2a:60:3b:
59:ba:39:07:53:a8:55:7a:ab:bd:d7:49:29:e1:ca:
3f:30:7e:45:39:65:72:a0:f9:51:1f:43:96:a4:72:
73:8f:5e:e7:ee:74:16:57:7a:b8:4d:ea:c0:b0:98:
fb:4f:00:47:81:dd:cf:fb:dc:80:52:1e:84:93:61:
4e:93:28:62:f1:16:ae:40:8a:6f:5e:54:a5:5b:07:
51:61:a8:cc:0f:a9:a6:d7:86:fd:f4:f8:6f:0e:93:
93:a1:57:52:ed:da:d0:20:b4:5d:29:18:6d:d0:af:
05:1f:c5:42:3e:74:71:91:ef:84:40:39:32:ad:39:
04:df:ea:9d:0b:65:82:97:61:0e:b6:a8:07:13:4f:
2c:2a:b2:5e:d8:9f:22:65:2f:83:3d:a1:eb:f4:ca:
ef:27:6c:f3:49:9d:b0:2b:91:2a:8e:db:1a:af:f8:
8b:b9:32:1b:bf:25:b0:c5:a0:75:e5:0d:bd:bc:1d:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:1F:C0:E5:B4:AB:1D:49:1A:7B:C9:AB:2E:78:B1:6F:22:D7:98
X509v3 Authority Key Identifier:
keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:a3:39:1b:7c:cd:f1:84:73:db:de:a6:c8:a7:85:a4:e4:
ee:84:72:47:84:e7:5d:2e:c8:8c:d2:97:bc:9e:f6:f9:c3:a5:
2d:24:c0:0b:91:de:59:9c:8b:15:00:ca:49:f0:02:3b:18:ab:
f7:a5:4d:cc:a1:e4:e0:ab:a1:e3:e4:f4:8d:5c:50:13:2b:03:
c6:a4:20:83:cc:61:61:f0:93:21:a0:8e:83:75:e3:1f:1b:ed:
2b:47:49:63:a7:37:2c:98:70:eb:c0:70:bc:44:f4:e0:08:e5:
c8:94:8a:de:37:5e:ba:ef:d4:6e:11:77:e3:f0:04:9e:49:58:
ea:2e:fa:ee:bb:15:2a:90:84:3f:f7:e1:5e:3a:4b:ee:55:a4:
c1:76:a5:4a:c9:13:07:07:85:4e:e5:61:29:c5:2e:23:a1:e0:
43:d2:84:1f:d3:fe:5b:12:51:59:fd:f7:ea:2e:a9:d1:b5:f6:
20:5b:34:59:01:f9:03:df:2a:f8:21:ce:40:df:4c:7b:18:ef:
05:ec:6f:c9:e0:5c:ec:08:88:1b:94:85:1d:42:22:b2:4a:61:
28:ef:30:69:d2:19:ea:d8:35:2b:1f:78:46:b0:15:08:76:d3:
3e:3b:51:1c:9d:15:3c:86:db:5e:e1:12:5e:63:95:2a:c7:28:
21:6a:87:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1
ODZENDhGNTcwHhcNMjYwNTIwMTg0NDMzWhcNMjYwNTI3MTg0NDMzWjAYMRYwFAYD
VQQDEw02YTBlMDExMS1lY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArj5bsuJE2DWNBQZu9gvp+eYT5IPKEo0mnWqULtQlPfKnL8SHABNUa68GWx63
FMTvZoLntw1F/pjOufzl2x7SroDELyH/r6cqYDtZujkHU6hVequ910kp4co/MH5F
OWVyoPlRH0OWpHJzj17n7nQWV3q4TerAsJj7TwBHgd3P+9yAUh6Ek2FOkyhi8Rau
QIpvXlSlWwdRYajMD6mm14b99PhvDpOToVdS7drQILRdKRht0K8FH8VCPnRxke+E
QDkyrTkE3+qdC2WCl2EOtqgHE08sKrJe2J8iZS+DPaHr9MrvJ2zzSZ2wK5Eqjtsa
r/iLuTIbvyWwxaB15Q29vB1yCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJRH8Dl
tKsdSRp7yasueLFvIteYMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2
M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa
bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALDKjORt8zfGEc9vepsinhaTk7oRyR4TnXS7IjNKXvJ72+cOlLSTAC5HeWZyL
FQDKSfACOxir96VNzKHk4Kuh4+T0jVxQEysDxqQgg8xhYfCTIaCOg3XjHxvtK0dJ
Y6c3LJhw68BwvET04AjlyJSK3jdeuu/UbhF34/AEnklY6i767rsVKpCEP/fhXjpL
7lWkwXalSskTBweFTuVhKcUuI6HgQ9KEH9P+WxJRWf336i6p0bX2IFs0WQH5A98q
+CHOQN9MexjvBexvyeBc7AiIG5SFHUIiskphKO8wadIZ6tg1Kx94RrAVCHbTPjtR
HJ0VPIbbXuESXmOVKscoIWqHBA==
-----END CERTIFICATE-----
Generated at Thu May 21 11:59:10 2026 by rpki-client