
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier: CwOVH+rUN9pVpiFZ9NrsRyQ4faRGGSYNFlEdKVfogPw=
Subject key identifier: 8D:0F:B7:91:C1:D4:EE:90:AA:6F:24:04:1E:E1:33:F0:70:F2:BE:F2
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number: 04B4
Signing time: Fri 06 Mar 2026 23:42:53 +0000
Manifest this update: Fri 06 Mar 2026 23:42:53 +0000
Manifest next update: Fri 13 Mar 2026 23:42:53 +0000
Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: Pw7CenJCI/7hoaVXKY8MoOTimpmC9S0s8LLiQ3jyxco=)
2: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=)
3: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: B6R5IrQPTeLExVlCg2d5jMdSJbqGIL/G1xtzhw/7MOA=)
4: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Validity
Not Before: Mar 6 23:42:53 2026 GMT
Not After : Mar 13 23:42:53 2026 GMT
Subject: CN=69ab667d-140a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:e7:0d:86:47:18:a0:9f:e2:c1:37:fa:c4:
0a:1c:3e:6e:de:83:61:eb:b1:51:6a:40:9f:46:01:
2f:88:22:f9:e2:b5:dc:25:4b:47:03:19:88:3c:92:
4f:34:97:89:7e:4c:be:36:a4:4c:6b:0b:27:e1:d1:
71:a1:8d:e5:86:68:2c:ff:6f:fe:0b:db:fb:b4:91:
4c:cb:27:34:17:cf:8b:f8:bf:90:0e:2b:25:b9:ec:
b2:1d:41:48:8b:3f:47:38:2f:00:d6:00:05:9e:3e:
f2:02:f1:1e:77:78:5e:19:9c:25:c7:19:94:be:33:
a7:77:a6:0d:71:e8:42:21:0c:42:60:5c:5e:f4:38:
fb:55:a5:31:c1:f2:a3:7c:99:92:3f:44:e7:d2:46:
d1:cc:6c:eb:79:78:90:da:0e:c5:58:6b:40:0f:42:
74:72:77:1c:fc:52:f3:72:06:08:71:d8:c4:90:e0:
b4:7b:cc:0a:f3:be:1c:8d:ed:39:f0:57:d5:70:15:
e1:01:54:82:84:69:c9:e6:96:a5:04:73:01:7d:5f:
10:54:aa:c8:e8:21:8e:91:ca:c1:09:86:df:c4:f7:
8c:9f:dc:9b:25:14:64:5d:db:57:2a:fb:c6:6a:6f:
f9:4a:85:d6:b5:74:3f:ed:36:53:c4:42:33:ce:63:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:B7:91:C1:D4:EE:90:AA:6F:24:04:1E:E1:33:F0:70:F2:BE:F2
X509v3 Authority Key Identifier:
keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:71:01:94:4e:64:cb:88:15:ab:54:b1:fe:68:de:d5:cf:56:
05:53:22:fd:db:61:13:e5:86:a7:eb:e5:03:e3:2c:2a:7e:40:
a4:0e:65:b7:c2:9b:b1:b8:4c:f0:6b:58:5a:50:1a:be:e2:95:
32:08:d8:fb:1f:5e:21:55:f6:72:8e:ea:89:c4:1b:fa:19:2d:
74:06:e0:95:48:22:3b:86:5b:e0:6e:c0:69:12:d1:da:8c:94:
2d:d2:fc:76:53:99:9e:e0:91:0f:05:1b:0c:2d:44:5c:77:dd:
49:a0:d8:10:ec:6d:c3:c5:e5:cd:d3:64:07:66:20:6e:c6:0f:
13:d4:70:51:d9:de:be:ff:37:0e:b5:ef:f2:16:02:08:cb:0b:
12:c5:a3:90:9b:d1:a9:7f:a2:4c:5b:c5:c8:15:f5:cf:91:34:
49:36:36:d1:cd:45:40:2c:36:45:ab:33:d0:30:7b:fa:4e:a5:
7c:a5:8c:fe:66:dd:65:5f:31:5c:7d:be:1d:4f:f1:e4:93:1d:
e0:cc:ae:f3:10:d4:2c:1e:04:c3:93:f5:94:2c:b1:2b:db:a9:
6f:76:fd:8b:6b:15:50:90:dd:a4:0d:70:cf:96:66:2f:93:dc:
74:63:2e:8e:9a:e5:ef:40:92:1f:09:10:a1:c8:62:25:ce:92:
37:71:6d:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2
NjkzNDZBMEUwHhcNMjYwMzA2MjM0MjUzWhcNMjYwMzEzMjM0MjUzWjAYMRYwFAYD
VQQDEw02OWFiNjY3ZC0xNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zvnDYZHGKCf4sE3+sQKHD5u3oNh67FRakCfRgEviCL54rXcJUtHAxmIPJJP
NJeJfky+NqRMawsn4dFxoY3lhmgs/2/+C9v7tJFMyyc0F8+L+L+QDislueyyHUFI
iz9HOC8A1gAFnj7yAvEed3heGZwlxxmUvjOnd6YNcehCIQxCYFxe9Dj7VaUxwfKj
fJmSP0Tn0kbRzGzreXiQ2g7FWGtAD0J0cncc/FLzcgYIcdjEkOC0e8wK874cje05
8FfVcBXhAVSChGnJ5palBHMBfV8QVKrI6CGOkcrBCYbfxPeMn9ybJRRkXdtXKvvG
am/5SoXWtXQ/7TZTxEIzzmM3VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0Pt5HB
1O6Qqm8kBB7hM/Bw8r7yMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3
QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REFENC9DNDIzMTgzMDc3QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRu
TWR3dFpLY01ZWnhtazBhZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyXEBlE5ky4gVq1Sx/mje1c9WBVMi/dthE+WGp+vlA+MsKn5ApA5lt8KbsbhM
8GtYWlAavuKVMgjY+x9eIVX2co7qicQb+hktdAbglUgiO4Zb4G7AaRLR2oyULdL8
dlOZnuCRDwUbDC1EXHfdSaDYEOxtw8XlzdNkB2YgbsYPE9RwUdnevv83DrXv8hYC
CMsLEsWjkJvRqX+iTFvFyBX1z5E0STY20c1FQCw2Rasz0DB7+k6lfKWM/mbdZV8x
XH2+HU/x5JMd4Myu8xDULB4Ew5P1lCyxK9upb3b9i2sVUJDdpA1wz5ZmL5PcdGMu
jprl70CSHwkQochiJc6SN3FtnA==
-----END CERTIFICATE-----
Generated at Sun Mar 8 07:34:07 2026 by rpki-client