
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier: 8/i5HVBvBJx+kv7SXBZKtvL3hFwVEgBJyiKcYi6QCLw=
Subject key identifier: A7:81:26:12:AB:91:B7:B7:31:61:1E:56:FD:90:FA:C3:FF:A1:6F:EC
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial: 0223
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number: 021F
Signing time: Fri 17 Apr 2026 02:31:50 +0000
Manifest this update: Fri 17 Apr 2026 02:31:49 +0000
Manifest next update: Fri 24 Apr 2026 02:31:49 +0000
Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: 2zodbytYS2KOoywSwpm0P88351S9d/duZTfutz+Tfvw=)
2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: AhGKgfXwB3QCEYVYk2JC1x2s8zC2sNYIPveCwndDaTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Validity
Not Before: Apr 17 02:31:49 2026 GMT
Not After : Apr 24 02:31:49 2026 GMT
Subject: CN=69e19b95-d63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:27:37:7d:be:fa:1c:78:67:25:56:c4:f9:
97:5c:d6:05:e0:b3:50:bc:2e:7a:5b:8c:58:77:1f:
fd:5c:c0:23:f5:8d:8e:2e:9c:d0:12:8d:60:18:18:
e2:37:4b:17:1d:a7:7e:83:f5:7f:c1:44:fe:56:51:
ad:9a:4e:0d:b0:65:4c:4c:5d:c4:9c:46:68:dd:a0:
93:ce:b1:4a:9b:fd:62:d6:40:43:17:32:d0:e8:7e:
6d:84:ea:a3:ba:9f:d3:9a:0e:c8:dd:68:35:c6:ec:
67:45:67:0a:ac:5d:34:ba:6c:98:64:cc:11:d2:f4:
46:05:21:fe:8f:6f:a4:24:4f:9f:fa:ce:2c:67:5c:
13:1a:76:96:51:ff:2c:b7:a1:ba:30:c6:37:22:db:
74:6e:68:48:16:80:67:13:87:03:ec:12:91:6a:a1:
a1:d4:12:fa:e0:bf:52:7c:f8:19:d0:49:ad:34:15:
75:e6:30:9b:5d:55:f3:4f:5e:90:86:07:d7:13:79:
78:83:c9:97:c2:c6:0e:3a:6f:f0:09:5a:b4:21:a3:
33:a1:b7:7e:e8:5d:a0:5f:c0:4f:63:25:af:47:2f:
5d:51:5c:b2:db:1f:91:22:d6:14:3e:8c:fb:54:b4:
76:be:dc:07:06:eb:3d:03:25:a9:47:8d:87:b3:6e:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:81:26:12:AB:91:B7:B7:31:61:1E:56:FD:90:FA:C3:FF:A1:6F:EC
X509v3 Authority Key Identifier:
keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:63:5a:ae:ca:0a:78:62:bb:1f:b4:be:49:1b:c4:ad:01:34:
69:86:af:19:2a:43:23:d4:a2:df:8c:56:f9:18:2b:63:5b:3e:
dd:31:77:64:e2:d8:96:d6:52:84:59:8d:9b:36:ee:a9:80:4d:
3e:e4:85:f6:c2:e5:32:d4:17:82:a5:03:8b:73:12:71:79:2b:
44:17:91:fd:27:64:c4:00:41:65:db:fc:30:6a:6b:82:26:38:
69:df:de:f1:7d:6d:b5:5e:c7:64:d1:54:91:dc:cf:3c:85:0e:
3f:79:1b:f4:6a:de:88:80:6c:8e:8f:c2:4c:d2:74:d9:60:43:
f2:8b:c4:03:29:b5:d9:32:41:9f:9a:cf:7e:7a:7b:19:56:e0:
57:b0:53:48:89:53:52:6f:2f:eb:e5:52:c8:da:29:34:65:e8:
eb:84:f3:6b:2a:31:21:4f:93:9a:cd:f3:25:ce:ea:09:ba:65:
c1:24:dd:81:db:db:86:65:fc:4b:64:01:e3:8e:11:ad:47:7d:
6a:33:8a:b3:c3:6c:1c:e9:e2:20:6f:c6:12:e9:cd:4d:3b:56:
68:72:be:a6:41:cb:1e:88:ee:c2:00:c3:91:1d:8b:d6:ff:41:
65:f9:af:12:f7:47:68:5c:ae:07:d6:63:27:fa:81:a4:1f:df:
02:41:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:37 2026 by rpki-client