
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier: vemFZvxr3pk1Afzr6f53Lhb6cLcNXOSAlbh3hEZrZ8Q=
Subject key identifier: 75:2D:64:1F:9B:3F:72:57:2F:22:60:51:CB:F7:7F:F7:CA:C5:68:21
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number: 0205
Signing time: Sun 01 Mar 2026 03:47:25 +0000
Manifest this update: Sun 01 Mar 2026 03:47:25 +0000
Manifest next update: Sun 08 Mar 2026 03:47:25 +0000
Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: CMeNZqrfU3/eMJOpHDbmJmxAZc61ksb+tylhj0+Vrb4=)
2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: g/bQAw9THkYcNZaMLuiJQ2Zt7avDBvnfO+P6mLE3afM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Validity
Not Before: Mar 1 03:47:25 2026 GMT
Not After : Mar 8 03:47:25 2026 GMT
Subject: CN=69a3b6cd-0ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:06:c0:00:ec:a0:39:01:3b:41:57:60:57:
ba:17:eb:db:bb:d4:50:4d:5c:b0:62:eb:be:c7:2b:
0a:f9:50:0d:0b:53:13:c6:95:4c:12:d6:42:d5:95:
4b:8f:9b:a7:dc:0b:19:35:a6:5b:00:21:c3:7c:eb:
9d:d4:97:96:b8:c6:9c:56:5a:ca:d7:b4:2e:a6:bd:
15:5d:49:71:ea:a1:3a:8c:e4:f6:e4:bf:3e:0f:3d:
f2:4a:4e:28:d5:ae:ec:87:94:18:f7:c1:0a:94:d2:
12:8c:d2:1a:4e:41:11:08:86:58:67:23:c3:20:bd:
ce:86:03:94:1a:68:d5:01:3a:06:fd:59:17:7b:1b:
79:2b:db:cd:27:c0:23:cd:0e:c4:ba:65:1a:3a:60:
00:18:5e:b5:fd:86:e4:ae:09:71:9b:b5:e3:ff:63:
a9:44:73:75:2d:57:91:16:d1:04:d0:33:22:e5:52:
df:1e:c9:ed:61:de:6f:99:f3:41:79:1c:c3:ac:c6:
a5:d5:3e:43:91:13:29:65:a2:af:1e:b8:c5:37:ec:
a2:b2:61:06:cf:fd:41:6d:d4:13:48:fd:f7:37:bd:
b2:95:03:b6:32:09:14:00:61:59:c3:a4:2d:e8:dc:
13:db:58:23:92:30:f3:0f:4a:ed:db:80:76:cf:99:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:64:1F:9B:3F:72:57:2F:22:60:51:CB:F7:7F:F7:CA:C5:68:21
X509v3 Authority Key Identifier:
keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d9:2b:d8:f0:41:e9:1c:a9:6b:57:53:3d:c9:f8:cb:46:54:
9c:0c:4d:94:39:39:63:b4:e3:87:dc:a2:75:fe:7b:34:65:e5:
e0:e2:b0:77:23:0a:f6:4f:82:af:32:0f:68:e6:22:ec:51:37:
43:17:54:23:a7:85:61:a3:f8:ce:22:3b:4f:c0:83:60:bd:66:
db:58:f1:02:8a:99:03:6c:33:e0:79:e1:5c:86:e8:7b:4d:3f:
77:81:a5:ee:2d:1e:bb:70:63:29:6a:9f:74:58:38:27:fb:2f:
85:41:d7:9e:3b:a0:b6:59:57:44:9e:0e:23:6e:e3:ff:1c:71:
46:a3:46:c3:c2:19:3e:41:38:fe:99:38:23:e4:b0:56:39:86:
63:7f:81:3b:09:ce:f2:24:60:c5:de:97:a1:8e:26:fe:db:74:
4c:a1:0a:ad:da:9c:92:7b:d9:fa:9b:6d:26:b9:e5:20:5e:55:
db:91:41:85:a5:45:58:d9:2f:69:e9:ad:56:f4:d8:67:4a:78:
f2:dd:62:b3:cc:c2:4e:82:06:89:72:1a:e6:3a:ff:04:4c:e3:
35:e3:63:ff:4f:96:93:78:e0:13:5d:4d:70:bc:55:0b:87:af:
25:8f:ba:13:f5:e6:0f:09:42:74:e2:60:e9:bf:d4:73:c6:c5:
15:72:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:43 2026 by rpki-client