
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier: 52oMjvqMVSK8mqeg/zErFg6B9yFuaOWy5Dz6NePF8M0=
Subject key identifier: 98:B9:5D:41:5D:4F:63:ED:FD:D0:B4:0D:BD:8F:E9:18:B8:44:81:14
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial: 19BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number: 19AC
Signing time: Sat 04 Apr 2026 16:17:51 +0000
Manifest this update: Sat 04 Apr 2026 16:17:50 +0000
Manifest next update: Sat 11 Apr 2026 16:17:50 +0000
Files and hashes: 1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: PVffWQxLrw5+KdrDfK2/6XAyF46b0ndIpPlkjPSWyzU=)
2: 09C0DFCE202011F098619934C4F9AE02.roa (hash: wOYzNzzIS0paJhEaL4lnWRrHmB69EScSsL5hsvt2zxE=)
3: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: f0Q1Azb+EY8V4HrdxVOXBmjzrSvFe4VSQb8ZAnHoPpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6586 (0x19ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Validity
Not Before: Apr 4 16:17:50 2026 GMT
Not After : Apr 11 16:17:50 2026 GMT
Subject: CN=69d139af-8546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:4b:bc:d5:29:d4:86:2a:e1:d1:6c:fc:ec:
d3:d7:80:f9:19:65:fa:9a:2b:b0:d3:5b:83:10:a9:
cd:14:9c:a2:d5:a2:19:fa:af:5e:3b:0c:27:56:39:
22:31:bc:63:40:4e:e9:2f:04:06:0a:84:33:89:04:
5c:29:10:a9:de:85:7a:f6:5b:c6:fd:44:35:95:02:
c0:76:60:89:a5:ac:d9:5e:b8:8c:5b:f3:c5:11:28:
90:3f:82:ed:f4:fa:87:81:4a:a2:25:6e:a0:39:fd:
e5:c3:dc:19:f6:50:d8:88:67:62:c9:a8:bd:f9:02:
08:46:e1:ec:26:77:49:0d:49:e1:48:70:a1:1f:ad:
95:e4:f4:57:9c:cf:e1:b2:aa:07:b9:7c:83:06:d0:
b0:72:95:44:a3:ea:39:45:76:50:42:5f:5f:a4:cd:
21:c2:b4:e8:48:5d:5e:90:e8:4a:9b:64:9d:9c:ba:
59:a1:b4:dc:6c:d4:58:a6:04:ba:76:63:a8:3a:7c:
78:77:af:6a:6b:3f:39:2e:fd:fa:3b:1e:e5:b9:5c:
51:c9:45:6d:c4:35:25:99:0f:90:a4:20:2a:75:03:
e2:68:b4:78:27:88:00:2a:81:b6:1d:dc:1f:94:cb:
df:9c:b1:63:b7:7b:69:fb:b6:d4:87:8c:6c:83:ac:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B9:5D:41:5D:4F:63:ED:FD:D0:B4:0D:BD:8F:E9:18:B8:44:81:14
X509v3 Authority Key Identifier:
keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f9:05:2b:e7:0c:c7:85:4c:97:66:a9:d9:3a:f2:62:f6:ad:
9c:df:7c:e3:df:fa:fb:2c:7c:57:96:d2:c1:bc:d5:23:7a:fb:
32:b5:6d:92:74:29:0c:a7:79:16:cb:c2:a3:b0:62:3d:93:ec:
cf:19:23:67:24:47:a8:6b:7c:91:ee:81:a7:76:b7:64:70:04:
86:b1:15:2a:de:63:c7:eb:c1:b4:96:17:ee:68:ec:bb:12:e5:
61:08:95:49:f1:94:32:ae:0e:81:66:5f:9a:45:b6:2b:77:8c:
de:58:31:46:b1:95:60:fa:74:54:03:38:e2:75:4d:a7:97:f4:
7a:9f:1d:15:a1:ca:67:7c:7b:3f:99:7f:87:3f:90:ba:31:ed:
dc:51:18:fb:25:5c:aa:79:19:f8:ed:a4:46:02:98:27:b8:dd:
8a:01:f2:74:4d:8d:45:c8:54:8c:71:71:a1:70:f3:ec:32:c6:
24:00:05:e6:60:70:dc:1d:a2:18:1e:1a:61:3a:35:d9:dd:89:
cb:f3:db:88:e9:39:ee:27:91:04:37:d3:92:c8:21:fe:7c:42:
58:44:e5:7d:a1:e5:49:91:a1:72:be:b2:6b:02:64:e7:4b:27:
55:ef:0a:88:bb:22:0d:d2:b6:b7:6c:6f:66:6e:d6:7e:78:b4:
8c:5c:3a:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1
RjMwMzEyMUEwHhcNMjYwNDA0MTYxNzUwWhcNMjYwNDExMTYxNzUwWjAYMRYwFAYD
VQQDEw02OWQxMzlhZi04NTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUlLvNUp1IYq4dFs/OzT14D5GWX6miuw01uDEKnNFJyi1aIZ+q9eOwwnVjki
MbxjQE7pLwQGCoQziQRcKRCp3oV69lvG/UQ1lQLAdmCJpazZXriMW/PFESiQP4Lt
9PqHgUqiJW6gOf3lw9wZ9lDYiGdiyai9+QIIRuHsJndJDUnhSHChH62V5PRXnM/h
sqoHuXyDBtCwcpVEo+o5RXZQQl9fpM0hwrToSF1ekOhKm2SdnLpZobTcbNRYpgS6
dmOoOnx4d69qaz85Lv36Ox7luVxRyUVtxDUlmQ+QpCAqdQPiaLR4J4gAKoG2Hdwf
lMvfnLFjt3tp+7bUh4xsg6zEVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJi5XUFd
T2Pt/dC0Db2P6Ri4RIEUMB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz
Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTMwNi9GRTQ5NzQ5ODgzQ0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3
bUpyc19vYVhUanhmTURFaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyvkFK+cMx4VMl2ap2TryYvatnN9849/6+yx8V5bSwbzVI3r7MrVtknQpDKd5
FsvCo7BiPZPszxkjZyRHqGt8ke6Bp3a3ZHAEhrEVKt5jx+vBtJYX7mjsuxLlYQiV
SfGUMq4OgWZfmkW2K3eM3lgxRrGVYPp0VAM44nVNp5f0ep8dFaHKZ3x7P5l/hz+Q
ujHt3FEY+yVcqnkZ+O2kRgKYJ7jdigHydE2NRchUjHFxoXDz7DLGJAAF5mBw3B2i
GB4aYTo12d2Jy/PbiOk57ieRBDfTksgh/nxCWETlfaHlSZGhcr6yawJk50snVe8K
iLsiDdK2t2xvZm7Wfni0jFw6Fw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:41:07 2026 by rpki-client