
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: MwzkZfcjL9/dvfzXMmlvZ75608lW5R1T2MrTGvEV0Bk=
Subject key identifier: 55:36:D8:00:1A:0E:79:D5:18:E6:FA:F1:EB:A1:4C:EC:F5:84:89:14
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 026F
Signing time: Fri 13 Mar 2026 01:14:51 +0000
Manifest this update: Fri 13 Mar 2026 01:14:51 +0000
Manifest next update: Fri 20 Mar 2026 01:14:51 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: yLDhXSbuKEta1uI41fB8iZBAh1ClvPSrquIt8A0HKDI=)
2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=)
3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Mar 13 01:14:51 2026 GMT
Not After : Mar 20 01:14:51 2026 GMT
Subject: CN=69b3650b-fa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:b7:ee:97:60:49:44:20:2e:cf:ba:6c:75:
64:96:bb:c5:6e:b6:3a:bd:97:e9:f1:84:3c:e6:70:
fc:ff:c6:43:14:29:18:94:cd:46:ef:0c:99:84:58:
36:8e:9e:21:0f:fa:b1:81:6c:5a:3b:bd:af:71:df:
ad:44:ba:68:56:bb:a3:45:6d:b3:5c:91:1d:01:d1:
cf:cc:b8:91:42:4e:e1:16:bc:a3:53:45:3d:41:4e:
5b:aa:bf:ce:52:d7:1b:f3:7f:74:50:f7:cb:59:58:
e5:f9:84:6c:93:f1:6a:d0:ff:54:ee:44:3d:96:35:
c5:5b:47:8b:a3:34:25:f5:b7:24:27:b3:7f:98:e4:
97:8d:83:00:b1:7b:1b:82:c9:d0:b0:e3:cf:69:cf:
b3:c3:e3:6e:0e:e6:f2:b3:9a:12:74:e7:4b:39:32:
e1:34:79:46:4d:8d:8e:4b:e7:62:76:d2:e8:7a:ed:
b4:eb:30:f7:20:68:7f:a0:ce:af:db:2c:8e:25:2d:
d0:31:33:ec:22:fe:3d:17:06:b6:ff:61:84:4c:2a:
87:18:8b:a0:5f:8a:45:aa:77:72:4a:7d:b3:88:00:
b7:55:fc:a8:90:1f:64:51:00:c4:9b:70:a2:14:ef:
54:f5:9f:09:e8:a4:70:54:08:47:18:e0:77:a6:8a:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:D8:00:1A:0E:79:D5:18:E6:FA:F1:EB:A1:4C:EC:F5:84:89:14
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:5a:ad:62:02:1b:36:f9:26:a4:c0:80:72:47:f1:d6:e2:c4:
8c:ac:76:7a:f0:95:79:45:cc:39:9a:a0:9c:c6:e0:94:fe:25:
c2:5a:f4:fb:ce:44:da:10:bc:9e:4c:3e:56:7b:5d:a9:2d:e5:
84:11:cd:6a:76:72:4c:97:ff:76:62:0b:cc:53:ce:1f:9e:78:
d5:f1:ee:4d:92:74:08:ea:b4:4a:12:d4:8c:94:a6:24:36:97:
be:95:91:d5:af:e2:bc:68:5e:fd:dc:b4:43:04:5a:22:36:a9:
0d:da:eb:40:77:a1:81:ac:4f:45:90:cb:23:b7:35:b9:d4:44:
5a:83:a4:8c:25:36:5d:b0:0c:12:e0:78:5f:0d:60:c9:1b:b0:
da:6e:32:d5:78:4b:30:fa:b1:7c:9f:b1:ee:6d:89:6a:ea:9f:
d7:30:b4:a4:51:84:4a:1f:eb:17:62:fd:a5:0e:b1:e8:68:ca:
24:45:fe:74:e4:39:68:0b:73:29:a2:77:6f:f8:f6:d2:33:b3:
e2:af:f1:e8:8c:d4:18:ce:9f:17:d6:f6:67:55:ba:2a:72:1e:
85:29:77:fc:bb:25:3f:bb:45:82:48:62:a8:9d:a3:d1:6b:4a:
29:32:f8:a3:78:36:27:25:15:65:83:d5:63:8f:a1:21:dc:52:
79:ab:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 07:41:09 2026 by rpki-client