
$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json)
Hash identifier: IH/2SeFdhAmIHfeGOKfZfOAXPhyM6c7g96iyTKOTpBY=
Subject key identifier: 2D:52:46:6A:0A:23:B1:38:CD:D0:89:B2:A3:E6:2F:80:8B:12:35:37
Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85
Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
Manifest number: FE
Signing time: Sun 01 Mar 2026 07:15:56 +0000
Manifest this update: Sun 01 Mar 2026 07:15:55 +0000
Manifest next update: Sun 08 Mar 2026 07:15:55 +0000
Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: 35JVp0Is2QltU3j/zBwI+LYBTjxtfDPVdrXQYPXO/4I=)
2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: X0a7N8BetaJpt9FlsdkHj3TgLJmVFX/78zUcVbqMhpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl
rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485
Validity
Not Before: Mar 1 07:15:55 2026 GMT
Not After : Mar 8 07:15:55 2026 GMT
Subject: CN=69a3e7ab-f783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:80:21:1c:b0:d0:31:d1:52:3b:17:b7:9c:
9f:06:fb:12:18:f7:98:84:a5:81:cf:9e:b6:40:46:
e9:e8:00:04:7f:f5:38:fe:98:aa:bc:fc:f6:3d:05:
7f:bb:e2:d7:e7:96:21:ba:55:3d:4c:96:b7:92:7e:
f6:0a:5b:82:48:d3:05:31:0b:63:d5:21:d7:8b:39:
31:4e:c7:cc:a0:cd:ca:a5:5d:a5:ed:cd:14:ba:49:
c2:48:ae:51:45:94:fa:96:4a:a0:85:0c:ef:ba:99:
e2:93:e0:75:a2:fc:0c:f6:35:f2:62:ab:92:95:bf:
5f:66:91:58:30:e0:bf:58:07:b6:8e:7c:dd:59:42:
0d:7c:26:d5:a4:dc:55:85:c2:56:3a:85:20:3c:ac:
3c:03:18:ab:d3:37:76:34:34:ed:7c:e7:85:58:18:
60:46:e5:0a:4c:e5:2b:4e:ce:d3:c1:50:4b:7a:b6:
ff:cd:95:24:f0:49:44:b4:d3:70:32:1e:b0:2c:28:
b9:c6:c0:a5:a4:26:6f:89:e5:13:40:10:1a:79:85:
8e:e1:f3:31:61:ab:84:fb:74:8c:26:5f:c5:e3:49:
4e:48:eb:8a:cb:75:95:41:1f:f4:a9:f3:04:6a:a0:
71:13:66:11:05:7e:33:b3:35:8b:38:e5:53:4a:0e:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:52:46:6A:0A:23:B1:38:CD:D0:89:B2:A3:E6:2F:80:8B:12:35:37
X509v3 Authority Key Identifier:
keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:64:e9:0c:ce:58:d9:7b:35:1f:da:f7:fe:06:82:ee:a6:
65:10:6a:ea:2d:71:b8:1c:83:48:04:79:84:34:a4:7f:58:0b:
67:59:41:65:82:ad:4e:9e:08:62:4d:54:52:3f:c0:00:5e:2f:
3d:33:7d:59:19:c2:08:7c:24:fb:81:c2:0f:e0:9b:c3:c1:c1:
5c:28:e1:38:77:65:f2:66:c0:8f:96:fd:6a:4f:b5:12:b0:f6:
3b:a9:9b:33:80:e5:6c:7a:52:e8:65:97:cb:af:ec:83:7e:c7:
9d:de:9d:71:66:32:e4:fd:fb:60:57:b2:86:5c:31:bc:6c:34:
66:ad:42:87:36:85:08:5d:41:24:a5:6c:04:d5:0f:af:54:4f:
35:c4:b1:ad:32:70:8c:98:75:d1:42:44:d5:fb:af:f6:05:2c:
bd:95:64:05:0c:1a:47:e9:f0:25:25:50:5a:40:ee:09:2e:57:
7f:2f:1d:56:7a:92:fa:a3:66:65:9a:9c:29:43:3c:d4:21:11:
6a:00:c9:fe:ef:2c:23:a9:0c:73:42:49:5b:d2:b1:dc:99:41:
e2:7c:70:db:d3:2b:eb:98:58:e4:22:3b:02:d4:53:db:91:3c:
dc:be:8c:40:79:fa:6c:b4:6a:43:0b:df:67:ac:1d:cc:3b:e0:
34:c7:f3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:46:59 2026 by rpki-client