
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json)
Hash identifier: 0aWNKHIqSkrmh8pbtjVbIFXLB3hBBYINgBJZx/td8RI=
Subject key identifier: 8E:FE:A2:BA:18:F2:26:95:11:34:CC:22:40:91:F9:2F:D3:FB:FB:B6
Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Certificate serial: 1BF3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
Manifest number: 1BE3
Signing time: Sat 04 Apr 2026 16:09:01 +0000
Manifest this update: Sat 04 Apr 2026 16:09:00 +0000
Manifest next update: Sat 11 Apr 2026 16:09:00 +0000
Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: fKrHV9X5YH8PWHhETq12IeyiUU1NJ7//MsPXZHkBJEY=)
2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: tA26iTcckJCEwCBsZnY5TWqIbPvv1VTq/Rbk2qWWvAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7155 (0x1bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Validity
Not Before: Apr 4 16:09:00 2026 GMT
Not After : Apr 11 16:09:00 2026 GMT
Subject: CN=69d1379d-f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:33:03:96:fc:3d:af:b4:e3:36:25:93:c6:
5a:9e:00:37:bf:bc:40:b3:0d:c8:f5:22:3e:c1:6a:
e2:29:0c:2f:b1:30:fb:0e:7c:1b:c0:e2:4c:2f:48:
89:e0:da:cd:85:2a:f6:58:c5:c8:96:75:f8:56:fd:
0a:47:dc:f9:b0:c0:f7:92:58:86:7b:a3:03:bd:05:
2c:6c:96:8d:cd:61:1a:5a:34:7f:91:30:75:f3:c8:
e3:42:f7:bd:df:18:97:4c:bc:01:85:f5:57:7a:81:
f3:11:c5:b1:bd:83:04:a7:06:9f:97:7f:e9:0a:ca:
94:01:a3:28:44:d8:84:1d:d6:7c:5e:97:6d:75:4b:
0c:d3:1e:2f:d7:c0:e0:76:19:11:fd:e3:1a:ec:ab:
78:27:22:98:d3:63:96:89:d5:18:4a:ab:98:86:55:
d3:9f:c8:e4:9d:17:f5:2d:5f:c9:86:4e:a0:19:b9:
2e:f9:d7:59:c9:26:f2:89:36:b3:8c:00:7c:50:24:
0e:75:45:da:bd:e5:e7:99:2e:dc:78:4a:bb:1c:9f:
4c:a6:a0:96:09:f4:48:2f:c4:7f:26:e6:5c:2e:ab:
15:12:dd:0e:fc:4e:e2:16:61:52:87:ce:d8:d0:1b:
06:fb:e9:fc:ed:8b:2a:ae:5d:e9:bf:ad:fc:82:5a:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:A2:BA:18:F2:26:95:11:34:CC:22:40:91:F9:2F:D3:FB:FB:B6
X509v3 Authority Key Identifier:
keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:b2:34:ff:9f:e9:7a:6d:7b:ac:4c:74:75:bd:35:35:4a:e4:
50:cb:63:1a:be:7b:cd:37:d4:ec:68:63:6b:11:6b:8e:be:78:
75:e2:c0:88:a6:28:c5:83:ab:83:83:d2:b1:66:cb:5e:60:05:
43:9b:48:64:b5:a1:a1:54:b7:4c:a3:d2:90:6e:98:8c:87:a9:
9f:a5:2a:6a:4e:6d:3d:72:f1:0a:d4:fb:54:6d:85:9d:32:df:
4e:2d:cb:e7:d7:a9:8b:fb:1c:de:65:34:07:51:60:3a:53:3c:
93:64:e1:62:19:0c:d8:3f:09:ee:6c:a8:04:06:a6:ca:d8:75:
10:84:ae:a1:3c:f5:0a:62:a3:7b:8f:0d:dc:41:6b:4d:32:b2:
7c:ec:eb:d3:4c:10:ab:ef:da:17:ea:ef:d9:1a:0f:2d:88:17:
a6:b4:16:2f:79:ff:89:36:6e:5a:45:c9:35:35:57:a8:84:c4:
b1:16:d3:8a:26:26:29:db:5f:36:7a:6d:39:c5:de:a3:b4:24:
fd:a1:0b:ce:6f:dc:2b:b1:a7:18:d5:4b:77:80:3f:dc:73:b2:
3e:4e:ae:8b:ca:dc:de:6d:2b:87:60:1e:b8:bc:bb:17:b1:40:
e5:af:08:0a:16:5d:3b:f8:f2:10:34:a6:43:d1:38:42:e2:de:
c7:51:b0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client