
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json)
Hash identifier: lM98uDcm5YnoEXGAOaoWS4Eozp1uEdfUvsHukvZ4up0=
Subject key identifier: 8C:04:36:60:F1:72:09:21:B3:E7:FF:FC:FB:B5:57:A6:C4:53:2A:7A
Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82
Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
Manifest number: 0127
Signing time: Sun 05 Apr 2026 05:06:04 +0000
Manifest this update: Sun 05 Apr 2026 05:06:04 +0000
Manifest next update: Sun 12 Apr 2026 05:06:04 +0000
Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: cWrjINsaC18F2fWFNbO6K85NvaY+HMHsFQdEf/0tyiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl
rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882
Validity
Not Before: Apr 5 05:06:04 2026 GMT
Not After : Apr 12 05:06:04 2026 GMT
Subject: CN=69d1edbc-1014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:47:3f:6b:1f:92:9f:8c:3f:7e:6b:53:71:
6b:2e:48:15:e7:ac:ef:6f:29:ec:d8:93:cd:9c:f6:
59:6e:bb:75:8a:71:c0:d7:87:6d:71:8e:c7:c9:8c:
97:dc:dc:b8:1d:5e:7c:c1:3a:68:b1:4f:f2:7f:3d:
dc:2b:1c:47:c1:f6:fc:54:5e:87:25:03:f3:37:ff:
a9:55:19:fb:71:99:f0:5a:7e:2b:22:82:60:50:0d:
5a:7e:f5:d9:2e:d2:a8:2a:a8:44:a4:44:d1:a5:90:
a2:16:23:51:cc:1d:d9:ea:80:88:32:f3:23:c8:3d:
68:a8:04:5e:11:d1:60:53:49:c8:a2:b3:f5:17:fe:
25:48:e8:0e:92:d3:72:49:76:ed:92:c1:46:3c:c4:
ab:17:c0:5d:41:3b:82:08:19:d4:42:1e:96:ad:4e:
9f:71:5b:09:02:34:b3:cb:7e:4e:d6:e5:23:8a:bf:
1e:c8:d9:e7:f1:e0:29:f7:68:60:14:e6:a1:f2:40:
6a:dd:81:9c:ba:fc:47:f0:75:de:a9:4a:20:a5:2d:
18:45:01:3c:bf:bb:9d:4a:74:28:12:dc:fb:8e:27:
5c:c5:86:b1:6a:82:b2:10:70:20:ec:4c:aa:fc:d8:
80:70:da:7d:b0:b8:98:6f:0d:e7:33:20:28:2d:99:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:04:36:60:F1:72:09:21:B3:E7:FF:FC:FB:B5:57:A6:C4:53:2A:7A
X509v3 Authority Key Identifier:
keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:86:d8:ba:f9:84:e2:2f:ea:42:95:f4:64:e2:d1:b3:15:f2:
0f:52:3d:89:03:57:c9:f8:32:9c:bd:d9:a4:05:75:8b:b5:73:
c3:3f:22:8b:43:75:d6:25:53:5a:fb:ff:95:b0:be:a2:16:8e:
e3:62:c7:1d:f0:ee:b0:76:70:0d:3b:c9:6b:7b:90:20:26:de:
bc:fd:32:95:91:26:08:0a:23:80:7a:6d:b1:0f:1b:32:02:aa:
8b:4d:ce:8b:76:f1:95:46:2f:9e:75:65:29:9c:40:bc:3e:32:
52:7f:d5:55:48:ce:23:57:ce:f5:b2:0f:ec:8e:32:a3:40:4f:
43:6e:94:0c:0b:5c:ad:49:f3:05:1f:d0:ff:90:6d:0d:b5:42:
77:19:d5:c0:27:49:3c:f1:87:24:bf:51:2f:47:68:e4:97:f3:
6d:d4:3c:06:0c:39:86:94:ef:a5:50:25:8f:40:10:3f:ef:8e:
ae:0e:5e:1f:ab:8a:d4:53:5d:e7:24:9f:37:8c:00:c6:c6:4b:
92:cb:00:8f:d8:f2:64:aa:1c:e1:6d:94:f6:00:7f:15:53:f4:
52:23:d0:36:7b:85:c9:2e:4b:92:f2:f6:cc:c8:44:e0:65:cc:
0c:6d:24:87:60:5c:1b:34:8c:bc:ad:50:8c:07:f8:e5:c5:20:
f7:65:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:58 2026 by rpki-client