
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier: SOhYKNR2pynOOXyOP/EnG/1senr9BKNz0dWqAxvRObg=
Subject key identifier: 21:61:22:96:2D:9A:6B:00:C7:3C:37:94:28:B7:75:18:AF:8C:BD:6C
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial: 0B80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number: 0B5B
Signing time: Thu 16 Apr 2026 19:09:16 +0000
Manifest this update: Thu 16 Apr 2026 19:09:15 +0000
Manifest next update: Thu 23 Apr 2026 19:09:15 +0000
Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: uFRXMHFmiSxdsQCKhIFGBEjMRsGH2WDy00NQR55en4U=)
2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: BPfB/XTTgtvHGk3VIxBnFhEcnL04DxqHE/nHRVwjG7s=)
3: 76D38708D64611EE98C44371C4F9AE02.roa (hash: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=)
4: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: mmuNJzdQc+EMG4vi6YI8GL1XWoSarik/6NrUTgT3yPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2944 (0xb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Validity
Not Before: Apr 16 19:09:15 2026 GMT
Not After : Apr 23 19:09:15 2026 GMT
Subject: CN=69e133dc-d168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:09:ce:3e:78:22:51:88:7d:3d:fa:52:f5:
2f:f7:5c:00:d6:33:38:39:17:13:c2:e7:d4:14:c4:
79:a0:30:71:a7:c7:8e:9f:48:92:53:ee:59:f4:04:
75:79:9b:61:c1:27:0c:66:bd:ff:17:b2:3d:b6:cd:
7e:7e:d9:ba:aa:04:54:80:20:56:51:72:8c:09:07:
ac:6c:62:f0:f3:cf:22:63:7f:70:9c:cb:07:a9:55:
03:37:91:65:47:eb:05:45:ce:ad:85:50:a5:9a:d5:
d6:7d:63:9d:44:32:82:f3:85:f5:77:15:3c:a0:97:
66:1e:3f:c9:e2:02:e0:42:41:ca:15:9d:13:b3:9e:
c0:60:5a:8d:7d:28:96:aa:66:93:a2:c1:2e:72:77:
35:77:14:02:ee:79:c5:5c:c5:14:9b:89:f2:a6:22:
5a:67:0b:43:c6:e4:91:30:81:66:2c:ef:7d:90:3d:
06:7e:72:bd:38:db:1e:8a:72:ed:f9:0c:cc:5d:52:
25:c6:58:03:2f:e8:02:4c:27:25:58:57:b6:42:83:
97:b8:3e:17:d7:f5:9f:3e:d6:c1:db:8d:17:f9:68:
72:98:3a:1b:f8:79:2a:8c:fb:75:60:b2:f8:80:04:
67:72:7d:bc:d4:6e:a8:0c:88:34:13:40:70:cb:85:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:22:96:2D:9A:6B:00:C7:3C:37:94:28:B7:75:18:AF:8C:BD:6C
X509v3 Authority Key Identifier:
keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:b2:97:49:b3:a2:ba:c7:35:25:d3:3d:f2:2b:23:9d:92:
a3:de:f6:85:00:7c:06:f9:b3:63:04:5f:67:7e:c4:e5:0e:2a:
e9:7e:d7:3e:1a:bd:c7:ff:db:57:c8:b3:6c:1b:0a:57:65:c7:
8e:ba:cf:70:db:34:e9:7f:bb:1e:b5:d4:45:fb:24:03:a0:01:
43:ac:4c:f5:6d:d3:b4:e3:14:e6:db:3e:e4:2c:8e:d7:97:64:
23:ee:22:da:63:27:e6:7c:65:d4:9c:3e:10:8c:9b:bb:b6:be:
ed:59:33:a6:56:42:a1:b5:ca:99:a8:d5:7f:af:6e:78:1c:72:
c7:a4:65:15:9b:98:a0:34:b7:50:37:02:49:4c:cf:c0:a7:30:
89:84:f9:48:37:45:80:2d:ea:85:dd:33:d3:39:5a:77:be:64:
de:b5:0b:8e:1e:25:5d:45:74:3e:94:d2:ee:74:08:fe:d1:ef:
3a:bd:49:45:cc:72:4a:f2:ab:6e:fd:c8:45:50:03:cb:8f:59:
5a:7d:0c:69:b2:4d:2a:d9:1a:37:e5:3b:8b:a5:6e:0d:be:09:
bb:5d:cf:e5:0e:25:18:7f:6b:d1:05:29:6a:ca:22:06:7a:bd:
42:2c:8e:88:85:b2:b3:00:d9:e6:3f:c6:8d:b6:29:59:2d:74:
1b:b4:d2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:19 2026 by rpki-client