
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier: utC1LOD/qu99NbZzE0j6nZMK4AqG6pv2TMETa2p+jf8=
Subject key identifier: 95:28:58:D5:20:78:CA:13:B0:0F:88:0E:13:71:18:4E:F0:47:42:20
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial: 0B68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number: 0B43
Signing time: Sun 01 Mar 2026 23:27:59 +0000
Manifest this update: Sun 01 Mar 2026 23:27:58 +0000
Manifest next update: Sun 08 Mar 2026 23:27:58 +0000
Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: 5P4AaZLbNEmB4eYW6BQZHW2BM3V3GzdYN5192FFlzws=)
2: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: mmuNJzdQc+EMG4vi6YI8GL1XWoSarik/6NrUTgT3yPQ=)
3: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: BPfB/XTTgtvHGk3VIxBnFhEcnL04DxqHE/nHRVwjG7s=)
4: 76D38708D64611EE98C44371C4F9AE02.roa (hash: yMUFH8jfhcAN9l90UhmXr90e/hIZIMZpvn+Gq7qj/bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2920 (0xb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Validity
Not Before: Mar 1 23:27:58 2026 GMT
Not After : Mar 8 23:27:58 2026 GMT
Subject: CN=69a4cb7f-6fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:4c:33:05:b1:83:d3:f6:9c:24:c6:1f:5e:
08:26:db:e9:53:56:59:aa:ac:53:ff:de:8b:1e:ff:
e3:bf:bb:8d:0a:2c:2a:83:a0:12:39:27:40:eb:4f:
02:db:b0:8e:58:a4:93:0b:cc:02:cd:29:59:c0:e7:
d2:fb:12:be:37:4e:ce:d8:bd:44:66:3d:21:bd:0d:
bb:60:38:72:2a:57:fb:b8:d3:af:e9:fc:76:b3:97:
ce:87:c9:aa:74:25:74:83:f2:0e:7e:68:13:4e:1e:
ab:00:6c:0f:33:76:4b:9b:5c:e6:28:e4:60:a5:0a:
be:4d:3a:da:c9:fc:6d:31:fd:b4:bb:9c:2b:6b:bc:
04:e2:33:a2:27:17:1a:69:d1:21:b1:4c:c1:26:3b:
ee:43:dd:91:9b:76:d8:9e:5e:d2:23:5c:0a:d5:28:
55:6a:60:56:3b:dc:30:57:e5:82:a8:98:49:7a:18:
44:00:8f:02:be:16:84:e6:4f:0e:a0:81:96:fd:14:
60:d8:18:c4:3e:78:2a:af:20:ae:12:29:60:fd:0d:
d2:3b:a8:91:65:5c:2a:f5:3a:22:5b:70:02:9f:90:
45:79:a3:b1:51:b3:0d:6e:95:88:ee:48:f5:ca:04:
8a:42:a1:f0:53:17:29:34:60:68:d6:e2:c1:f5:b9:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:28:58:D5:20:78:CA:13:B0:0F:88:0E:13:71:18:4E:F0:47:42:20
X509v3 Authority Key Identifier:
keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:01:e3:75:00:ba:b7:06:1d:6e:d9:67:9e:8b:60:03:d7:
84:8c:b5:d1:88:26:04:4d:5b:66:b0:2f:b3:3c:a8:57:e6:04:
81:44:72:2d:13:73:2e:60:70:7c:0c:3f:f5:1a:75:ee:2f:ac:
79:22:dd:7d:f3:00:bc:34:ab:17:4e:fb:a0:33:0f:c7:6a:ae:
c7:04:00:c9:ed:84:ab:c7:10:1a:71:eb:57:3c:1f:3f:e3:ca:
dc:e7:2e:5d:70:9e:97:38:f8:90:ac:ee:ac:58:bf:55:fd:0c:
76:88:01:97:ba:7f:73:9b:43:83:d3:2f:4d:71:06:a4:c1:e4:
c6:84:ba:2a:ac:4a:96:8a:b1:e8:a1:31:e2:65:d8:d3:fe:35:
04:54:77:a9:6d:e2:cb:8e:1c:9d:87:d5:00:d6:62:eb:c1:28:
d4:57:37:a2:3e:74:6e:21:88:64:35:ca:b2:d0:64:4d:5e:05:
ca:64:62:11:22:a2:e5:72:b8:58:77:7a:b3:5c:fc:a0:47:01:
c6:56:cf:82:dc:80:6e:f5:6e:3d:57:a7:53:a6:f6:00:34:5e:
c3:8b:f5:1e:47:f2:1a:8e:df:76:85:51:46:e3:a2:fd:42:9d:
70:bc:27:52:05:69:9f:10:be:28:f7:a7:8e:11:6c:93:aa:91:
9f:ae:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:47 2026 by rpki-client