
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json)
Hash identifier: Qfb8/g45ae52TafHsLdxeR2CxnFKJmLpB8q7QpEyHdM=
Subject key identifier: 96:A4:82:81:C3:8B:50:2F:F6:E8:B4:76:FC:F9:3E:8A:40:77:48:5B
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial: 026D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
Manifest number: 0260
Signing time: Fri 17 Apr 2026 01:58:02 +0000
Manifest this update: Fri 17 Apr 2026 01:58:02 +0000
Manifest next update: Fri 24 Apr 2026 01:58:02 +0000
Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: /3wqQm9zNkt0fwWMJH2GX2hSuwU/XcXKcVKZbucEeMw=)
2: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: nnTjgZ46HqO0Mpo0brQW7RdIt/A/0sbmdcDjLarFt5g=)
3: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: ruF2i3AOGgPYwroRD2rSZSmDfGWURXx0prKXNcqPrNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 621 (0x26d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Validity
Not Before: Apr 17 01:58:02 2026 GMT
Not After : Apr 24 01:58:02 2026 GMT
Subject: CN=69e193aa-5f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:a4:7f:4c:32:42:bb:73:d4:0d:62:81:3c:
e1:29:12:9c:b5:dc:60:9b:2d:83:b2:1c:a6:8a:3f:
a3:09:7e:93:df:55:e7:34:05:ca:2b:f7:68:db:2c:
01:3a:0c:7c:32:92:af:3b:9b:28:90:dd:19:ae:dd:
8e:b9:68:cd:42:cf:0b:92:1d:18:de:6c:38:af:61:
32:6f:2b:31:b1:f3:34:d5:8f:f5:e6:80:d6:f0:b7:
25:0c:f6:ff:75:8c:03:03:88:02:3c:ae:e0:14:4e:
32:0d:54:67:b6:82:7d:6c:17:c5:f3:b5:c2:c7:4c:
3f:d6:ca:55:e8:ce:99:9e:fc:3c:a7:06:52:59:98:
f8:c2:73:21:50:e2:5b:b8:e6:c5:2d:4a:cc:05:e0:
8b:18:31:a8:e5:67:80:a5:34:4a:95:31:fa:a0:7c:
b0:1d:29:8c:1a:18:f3:83:9a:1b:04:93:92:49:0f:
0b:6d:31:01:93:e2:85:b2:71:49:0a:1e:9b:7d:dc:
d1:c5:c4:07:67:ba:42:d7:d7:61:91:c2:8a:7a:63:
99:a0:29:33:17:51:36:8c:c9:21:d1:f4:c0:bd:af:
3a:99:e1:68:27:75:98:f8:99:a6:e6:06:ed:03:df:
dd:76:aa:23:8f:df:ab:f7:84:05:3e:6b:09:fb:a0:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A4:82:81:C3:8B:50:2F:F6:E8:B4:76:FC:F9:3E:8A:40:77:48:5B
X509v3 Authority Key Identifier:
keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c1:69:ed:41:3f:ec:2f:c2:f9:26:34:10:82:0a:9c:7a:6d:
32:52:2e:bc:a7:ea:9b:88:91:2f:77:9c:c1:01:73:c6:a5:fa:
58:30:87:d3:d4:25:35:f8:12:c0:9c:37:f4:f5:38:96:c6:e1:
11:92:36:25:51:88:e5:64:56:ba:cc:84:7b:94:84:ee:1d:70:
d6:17:03:8d:29:6c:c7:a7:dc:de:df:85:c3:99:83:37:2d:ef:
8a:9a:7c:eb:20:9f:f3:af:8d:fb:ce:a6:dc:da:4b:96:5f:c4:
78:69:a2:7f:73:13:f5:da:e6:0f:a5:4c:35:49:d2:f9:21:aa:
3f:2c:8e:cf:a9:1e:11:34:3c:5f:e5:b9:8d:ec:eb:5f:dd:bd:
12:05:4b:57:db:51:08:17:2d:eb:6b:f8:14:92:ec:68:a1:ef:
55:53:6e:90:74:84:12:d5:0f:b0:49:2f:b2:72:f1:88:32:ff:
fc:d7:1e:1e:3c:8e:65:3e:38:49:3c:b2:91:f1:a1:9b:25:b5:
9d:9e:59:f7:fe:89:9c:ed:25:f4:2f:10:ec:51:b9:0b:d6:42:
37:48:27:e0:46:f9:6b:92:e2:65:83:9f:97:47:ce:93:d0:10:
f6:b6:8c:eb:80:fb:ae:2f:96:a8:f7:13:29:3f:df:0c:de:a6:
64:88:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:18 2026 by rpki-client