
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier: GWljYT6PHVpTzumjY3N5eigNc6fhGz0VxGQI8mtJLcw=
Subject key identifier: D5:8B:4E:04:53:5C:5B:E7:63:B7:EE:98:91:4D:FE:24:87:E3:BE:95
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer: /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial: 058B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number: 0587
Signing time: Mon 02 Mar 2026 00:22:25 +0000
Manifest this update: Mon 02 Mar 2026 00:22:22 +0000
Manifest next update: Mon 09 Mar 2026 00:22:22 +0000
Files and hashes: 1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: BIJ82p9nUuKdx01JgtVkvyDgsc+cpevFRX0Is8ivlxs=)
2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: WdImnCcnZcMtzi9Kuo/0VUvS1a6vE4XzsB1x3n+OVA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Validity
Not Before: Mar 2 00:22:22 2026 GMT
Not After : Mar 9 00:22:22 2026 GMT
Subject: CN=69a4d841-68c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:30:e0:fd:21:90:7f:de:9d:4f:fe:e2:18:
b6:ae:23:68:ff:20:d3:2f:6a:76:56:70:66:11:bc:
1e:6e:cf:cc:4b:fb:ed:e5:93:92:01:2e:e4:5f:08:
4f:43:e8:3e:ff:30:00:f2:eb:50:a3:a5:f4:da:1d:
f2:86:06:44:03:47:60:63:0f:1e:5e:87:db:ee:c9:
96:7f:2d:f3:43:d3:29:ed:13:e9:a3:5b:38:c1:1a:
e3:89:e2:55:fb:1d:d6:46:8e:de:50:6b:6c:46:61:
05:08:cd:ed:7c:a9:3b:56:e1:d1:d1:e2:3a:cd:d4:
b1:99:9f:8c:3b:14:6e:28:96:36:cd:f2:b7:fe:6b:
29:77:f0:8b:54:b5:5d:02:10:99:2f:37:5c:15:26:
16:88:da:d5:37:6a:bb:17:17:2b:bd:d1:35:49:a0:
eb:b7:d0:8c:78:79:25:d8:38:e7:a5:8a:19:13:9f:
7e:ca:af:77:95:08:3e:df:d9:3f:0a:5a:22:13:e9:
a8:8d:30:05:6d:4b:a5:7c:e9:81:4f:0d:a7:de:b4:
fb:60:2a:2b:b4:27:6a:9c:9a:00:5f:32:8d:b9:0f:
b9:5a:87:63:50:f1:cc:d3:d0:3c:d6:e0:9a:84:e3:
6c:50:0b:4f:5a:82:1d:14:f8:61:e0:b3:ec:08:19:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:4E:04:53:5C:5B:E7:63:B7:EE:98:91:4D:FE:24:87:E3:BE:95
X509v3 Authority Key Identifier:
keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:54:14:b6:a0:33:ab:39:bc:57:55:64:42:ab:19:f5:f4:
4c:54:d6:53:06:0c:bc:fd:ea:c8:66:22:25:b8:6d:da:a0:76:
f9:b1:b1:0a:d2:f0:aa:12:8b:b3:de:c5:af:05:b0:5b:91:4d:
ef:0c:7c:e9:a1:95:07:1c:ad:83:3a:d3:eb:11:fa:49:74:47:
5d:4c:73:3b:63:f2:91:e9:86:80:54:ad:2a:fe:8f:aa:ca:5e:
48:57:f3:9f:4c:86:fc:c4:d8:ae:e6:1c:86:f3:6e:d0:84:74:
e5:a1:69:4b:65:cc:da:6e:9b:fd:45:ee:75:b9:b3:6a:9b:6e:
31:ba:8a:ef:2e:f1:53:68:32:e2:ac:fb:ce:d7:d2:5c:ea:07:
33:c6:88:a2:97:a8:50:34:cb:2e:67:42:55:79:0b:ea:d5:ce:
78:a6:8b:4f:e5:f4:1a:d0:20:cb:c7:50:33:d4:da:06:44:b3:
f3:45:e8:90:d6:6a:c0:47:0b:14:4c:2f:db:b9:70:db:d7:2c:
d9:86:54:61:56:ee:d7:47:d5:b8:b6:37:2a:86:5b:cd:06:4e:
45:10:c9:fc:c1:28:b7:c3:af:f8:23:f9:06:9f:48:0b:63:c8:
1a:2a:46:d1:b2:1d:76:06:b3:e2:13:50:d6:6b:2e:35:c0:4b:
4b:a4:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:38 2026 by rpki-client