
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
File: 4QZLtgGhMQh2G1RXofcVJMSky84.mft (raw, json)
Hash identifier: fF6H+bH6oxCS2bCdpsao2WjzmWhyi9hpfKWCVJpK9FY=
Subject key identifier: AB:FA:83:B5:B6:6A:C5:81:6F:FB:BE:FA:1B:9E:B6:AB:3A:25:9A:30
Authority key identifier: E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE
Certificate issuer: /CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
Certificate serial: 0B5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
Manifest number: 0B57
Signing time: Sat 28 Feb 2026 19:25:33 +0000
Manifest this update: Sat 28 Feb 2026 19:25:33 +0000
Manifest next update: Sat 07 Mar 2026 19:25:33 +0000
Files and hashes: 1: 4QZLtgGhMQh2G1RXofcVJMSky84.crl (hash: aj62d0U17943YEbu7/gU/GmUHMHYt+08DVNvi7lckp8=)
2: 11685AAC4F0D11EAA161D143C4F9AE02.roa (hash: dlSOSQk2MniPlYlY5Ht7zlRaFaui9HZpjfs6c69fqdk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl
rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2910 (0xb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B57F, serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
Validity
Not Before: Feb 28 19:25:33 2026 GMT
Not After : Mar 7 19:25:33 2026 GMT
Subject: CN=69a3412d-5c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:ed:11:86:88:a4:68:ca:bc:f7:e9:c4:c2:
5a:43:31:ed:f6:a3:a2:9f:2b:6e:7b:6e:f5:13:8a:
bd:ee:a0:e7:46:07:22:78:e8:66:6e:e3:25:cb:0c:
18:1d:9e:51:02:d6:4d:8d:f7:13:ab:ad:fd:f2:e4:
a0:6e:08:cb:c7:9a:aa:4b:34:43:5e:70:e9:74:1d:
01:ab:4a:82:57:e4:d0:f3:49:74:3d:ad:95:63:52:
d6:a1:75:3b:6a:b1:70:7b:ce:28:7d:b1:ce:40:76:
38:39:3e:d6:00:0b:f3:62:40:f3:23:b2:d5:26:52:
34:01:70:78:34:5c:cd:d8:7e:0f:0d:45:c5:fc:c2:
77:6a:fb:9a:dc:ce:6d:b2:76:0f:6c:e0:f0:24:db:
09:2d:39:37:75:e9:c4:ee:0c:c2:04:8d:7e:03:75:
43:83:30:90:69:dc:f3:af:0e:ec:02:a1:a7:3e:4f:
4c:1d:2c:65:9e:2c:72:79:f1:3f:69:f8:a8:95:06:
dd:09:01:fa:ff:ef:ce:2e:f3:d9:56:d5:d3:d7:39:
cb:dd:61:31:44:be:c0:5e:82:c6:cb:5a:ab:82:4a:
dc:5a:f7:7c:f9:e8:b6:4b:42:07:2f:3c:6a:67:b1:
6e:2a:a4:07:ac:eb:16:5e:ba:79:8f:e3:57:bb:69:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:83:B5:B6:6A:C5:81:6F:FB:BE:FA:1B:9E:B6:AB:3A:25:9A:30
X509v3 Authority Key Identifier:
keyid:E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a0:6a:26:c7:64:b1:8c:99:e3:ed:ae:b9:d5:62:78:6b:e7:
3b:27:da:4f:a8:aa:d9:57:06:fa:2a:4b:17:df:7a:3f:bb:64:
ab:1f:2a:d4:15:3d:0e:c5:a8:bf:68:e9:a6:19:b0:80:7b:20:
0a:06:03:df:cd:78:f7:d7:97:e4:9c:ab:c4:29:e9:d5:c4:0a:
bd:2a:21:4e:3c:ae:2e:a1:e8:13:c7:f3:58:6f:19:0c:78:9f:
84:68:84:cf:bf:0f:5d:dd:ce:30:2a:c6:8d:c0:6b:97:1b:bb:
57:42:b5:3d:0b:b6:d5:d7:52:d3:36:16:b0:2a:da:ff:6c:30:
97:48:df:6d:04:1b:bd:f0:b9:46:1e:f5:52:51:72:7f:1f:a1:
d8:c9:44:06:0a:24:91:83:e2:63:1a:48:6f:cb:46:c8:32:76:
a8:0c:81:70:68:d1:77:b7:61:2a:1e:d6:ba:e2:25:f1:b1:cf:
07:e5:1e:04:83:ad:57:6f:10:ae:fd:14:ed:da:1d:34:d2:e3:
73:5d:d3:99:28:08:c5:ba:cf:67:85:3f:d9:0c:04:ab:6c:15:
72:fe:01:0f:c5:13:0e:ec:f0:c5:1b:38:85:62:73:ee:0a:4f:
af:c4:55:26:7e:0a:c1:3c:88:a7:e5:2e:a7:f7:a8:a8:9e:ed:
6d:36:a6:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI1N0YxMTAvBgNVBAUTKEUxMDY0QkI2MDFBMTMxMDg3NjFCNTQ1N0ExRjcxNTI0
QzRBNENCQ0UwHhcNMjYwMjI4MTkyNTMzWhcNMjYwMzA3MTkyNTMzWjAYMRYwFAYD
VQQDDA02OWEzNDEyZC01YzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtiLtEYaIpGjKvPfpxMJaQzHt9qOinytue271E4q97qDnRgcieOhmbuMlywwY
HZ5RAtZNjfcTq6398uSgbgjLx5qqSzRDXnDpdB0Bq0qCV+TQ80l0Pa2VY1LWoXU7
arFwe84ofbHOQHY4OT7WAAvzYkDzI7LVJlI0AXB4NFzN2H4PDUXF/MJ3avua3M5t
snYPbODwJNsJLTk3denE7gzCBI1+A3VDgzCQadzzrw7sAqGnPk9MHSxlnixyefE/
afiolQbdCQH6/+/OLvPZVtXT1znL3WExRL7AXoLGy1qrgkrcWvd8+ei2S0IHLzxq
Z7FuKqQHrOsWXrp5j+NXu2kIrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKv6g7W2
asWBb/u++huetqs6JZowMB8GA1UdIwQYMBaAFOEGS7YBoTEIdhtUV6H3FSTEpMvO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjU3Ri9CMjQ1N0Q2QTRF
NTkxMUVBOUVFOUUyMERDNEY5QUUwMi80UVpMdGdHaE1RaDJHMVJYb2ZjVkpNU2t5
ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRRWkx0Z0doTVFoMkcxUlhvZmNWSk1Ta3k4NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjU3Ri9CMjQ1N0Q2QTRFNTkxMUVBOUVFOUUyMERDNEY5QUUwMi80UVpMdGdHaE1R
aDJHMVJYb2ZjVkpNU2t5ODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjaBqJsdksYyZ4+2uudVieGvnOyfaT6iq2VcG+ipLF996P7tkqx8q1BU9DsWo
v2jpphmwgHsgCgYD381499eX5JyrxCnp1cQKvSohTjyuLqHoE8fzWG8ZDHifhGiE
z78PXd3OMCrGjcBrlxu7V0K1PQu21ddS0zYWsCra/2wwl0jfbQQbvfC5Rh71UlFy
fx+h2MlEBgokkYPiYxpIb8tGyDJ2qAyBcGjRd7dhKh7WuuIl8bHPB+UeBIOtV28Q
rv0U7dodNNLjc13TmSgIxbrPZ4U/2QwEq2wVcv4BD8UTDuzwxRs4hWJz7gpPr8RV
Jn4KwTyIp+Uup/eoqJ7tbTamoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:43 2026 by rpki-client