
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json)
Hash identifier: 2YFNh60k17jW3hPpB+ZCSDZB3kNLvsUSFn/zAzVHyVA=
Subject key identifier: 7B:F8:4A:C4:05:6F:F6:40:4D:E1:75:12:85:88:F9:83:AE:E6:5C:3F
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial: 083A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
Manifest number: 0826
Signing time: Mon 02 Mar 2026 20:50:13 +0000
Manifest this update: Mon 02 Mar 2026 20:50:13 +0000
Manifest next update: Mon 09 Mar 2026 20:50:13 +0000
Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: Zl7cPAU4C+Hn+7BcZA/jbOMy5Q4nSPEpiW8xLbyZghs=)
2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: g7qg1j/BlXjx4IL6IJ73Vzos8b7yBkmpoG+vbhDXfpI=)
3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 2R/fqixLYXQj2CN0sqD6jpnwoixSqADSrbi58jnvIx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106 (0x83a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Validity
Not Before: Mar 2 20:50:13 2026 GMT
Not After : Mar 9 20:50:13 2026 GMT
Subject: CN=69a5f805-358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:e0:8d:81:b2:99:2f:d1:2b:62:26:84:08:
ac:ca:ee:52:18:c7:ce:95:55:3f:3c:fc:b0:47:99:
fb:61:13:c8:45:6d:78:ff:ce:9e:b4:f6:0a:b7:98:
25:e8:9e:2c:f6:2b:12:bd:a9:6f:9c:ba:27:c2:39:
70:7b:bc:bf:e4:7b:dd:86:ab:c3:8c:2c:fe:3b:90:
e2:10:b0:a5:3b:72:ce:56:92:4f:d2:2f:91:dc:fd:
8d:1c:05:e1:1d:da:5d:15:12:5d:c2:1a:6f:41:86:
d3:d9:87:d8:27:c0:5f:98:fb:a3:35:c6:97:19:4a:
df:ec:48:ae:46:65:a3:f6:78:91:44:80:45:7a:86:
c7:cd:53:ba:96:e9:96:c8:00:c9:a4:9c:9d:cf:46:
46:9a:3d:82:66:e3:28:36:5d:aa:f1:82:51:13:5b:
75:6c:b6:0f:fd:ca:5f:48:62:9a:09:cf:c0:0b:5c:
fd:29:03:cb:a5:77:f3:f2:e7:3a:ff:54:46:a9:e8:
fa:6f:58:2e:e1:8a:95:ef:05:28:48:88:88:08:24:
2b:e7:1b:99:83:e3:4a:00:50:68:0f:61:64:26:35:
7c:ac:7b:65:78:79:66:21:41:04:e3:b5:89:3a:d2:
32:45:12:a2:9d:60:c3:3a:3d:09:a3:d3:6c:60:dd:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:4A:C4:05:6F:F6:40:4D:E1:75:12:85:88:F9:83:AE:E6:5C:3F
X509v3 Authority Key Identifier:
keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:07:bf:b3:e1:d6:a9:3a:31:04:c8:e0:90:86:ce:b1:8d:0b:
49:15:c3:36:6d:7b:bd:5f:45:c6:47:5e:f3:17:95:48:21:2a:
63:70:a3:07:0a:24:3b:fa:4d:13:ec:82:68:f2:e5:80:d9:a4:
87:39:b9:37:1c:d9:98:c5:d3:e0:0c:c4:5c:33:be:7b:cd:64:
95:b6:f0:78:af:48:18:10:f6:71:d2:7c:07:9a:68:1c:a0:eb:
9d:ad:32:73:a1:09:36:90:77:5d:e0:40:24:d9:7f:df:bb:87:
7a:44:bd:8c:63:e9:17:84:78:d1:72:e0:54:63:bf:2e:19:91:
85:d1:27:16:90:4c:45:f1:f2:2c:ae:4a:c6:5f:52:4d:04:e9:
0b:2b:05:19:27:45:36:90:56:f1:c8:6d:df:f3:ad:53:9f:33:
ed:4d:2a:58:41:a8:f7:e8:92:40:50:4a:7e:3c:a6:a9:a4:1f:
25:09:44:80:9b:6f:60:eb:55:0b:21:00:46:d1:cd:45:7b:4d:
ea:e7:57:08:62:03:e0:a5:c4:f6:3d:cc:f5:13:40:35:61:b8:
e8:72:ca:62:cd:fe:fa:31:0a:c1:cc:de:88:e5:53:e6:60:e7:
a7:f7:3d:cf:3a:d5:27:80:63:2f:19:2e:d6:9c:e1:08:82:78:
81:22:03:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:53:53 2026 by rpki-client