
$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier: 7GgoJEKgm2sgjJX3AmXqrWKGTE8LeHOhVmUgT87uHaY=
Subject key identifier: 48:2B:3F:5D:25:29:28:AD:1A:B0:31:AC:75:77:D9:57:52:F9:87:46
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number: 52
Signing time: Fri 17 Apr 2026 07:56:54 +0000
Manifest this update: Fri 17 Apr 2026 07:56:53 +0000
Manifest next update: Fri 24 Apr 2026 07:56:53 +0000
Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: nG9LI6SFrmA6sVQ8KTaNz2t3igpPhaK27VSr5o7dUuo=)
2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Validity
Not Before: Apr 17 07:56:53 2026 GMT
Not After : Apr 24 07:56:53 2026 GMT
Subject: CN=69e1e7c6-c6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:84:8a:ff:9b:db:57:15:64:34:e9:c7:37:
32:ac:5b:84:4d:e9:4f:2c:42:a5:ad:6b:9d:78:79:
25:a4:21:70:8b:13:fc:05:8f:28:18:ff:3e:05:ea:
a7:e2:05:09:df:d6:ca:8a:4b:19:63:fb:05:1d:25:
6e:1c:88:cc:7d:68:b2:b0:9c:e9:38:3f:64:33:6c:
7b:6b:53:58:36:5d:3e:d9:f1:ea:f6:81:0d:ae:68:
2b:de:73:f7:03:74:24:9c:a6:79:43:41:d0:97:76:
6b:af:ed:08:95:0b:d7:ba:d0:55:70:6f:97:40:77:
bd:65:f8:d2:d2:a1:47:d2:bf:a8:45:f3:7c:c5:2e:
22:72:b6:aa:5c:93:4c:b5:e3:c5:6e:a5:03:2a:86:
4d:09:fc:ef:68:cb:f0:91:c5:ab:c6:9c:af:b3:18:
34:80:85:9b:e7:8f:e9:86:52:73:72:fe:47:0d:e2:
07:9a:db:57:f2:d8:ca:62:80:3b:14:3c:ac:6b:4a:
32:9f:ca:2b:13:7e:35:ce:bd:4a:71:0e:db:e5:2d:
76:f2:2e:c6:f8:92:6e:75:4c:75:2b:f9:ed:87:b0:
51:19:f5:2d:e7:7d:cc:ee:0c:da:01:3b:f9:5e:5c:
84:26:a6:7c:9e:c4:6a:63:57:b3:79:22:36:5b:58:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:3F:5D:25:29:28:AD:1A:B0:31:AC:75:77:D9:57:52:F9:87:46
X509v3 Authority Key Identifier:
keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:a9:ce:e9:f9:46:f6:70:dd:49:63:89:f0:56:a9:46:04:fe:
a4:4a:8c:e9:27:34:42:f8:fc:49:a3:81:18:b3:55:e0:a4:3a:
86:e6:50:cb:5d:8f:5b:f3:06:9a:e1:e7:f8:d3:cd:52:c5:5e:
4d:44:03:bb:a3:a6:cf:76:b3:8d:22:e4:59:39:37:f6:20:da:
2b:10:a0:19:7e:88:34:3b:3f:81:c8:d3:7d:db:b5:dd:03:d7:
17:d3:f9:7f:19:50:68:39:be:dc:41:c1:5f:9a:df:c8:d9:98:
6a:bb:18:dc:55:6a:3d:ce:f9:04:da:b6:b1:a7:47:87:5d:24:
4e:87:57:b7:13:88:fa:35:33:e8:dc:3c:e8:41:1e:42:54:72:
3f:01:94:3b:6c:ec:03:3c:3b:d8:dd:1a:0b:b6:74:8a:dd:e3:
8e:74:73:bf:f5:24:8a:ab:3a:43:cf:03:26:5e:ac:a0:2b:8f:
f5:7f:41:bb:9a:bc:93:87:2a:2b:89:d4:01:54:5f:7b:3e:54:
cc:3d:bd:15:48:db:c9:68:2d:9f:4e:1e:17:46:5f:df:ee:37:
e0:5d:09:9d:9f:26:30:0d:c6:ae:86:12:55:3a:4c:a7:71:38:
27:8e:2a:95:49:97:73:dd:f7:d6:8c:c0:9d:52:b7:92:df:a8:
91:4f:8d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:22:23 2026 by rpki-client