
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File: n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier: GOOMGdxOvTkIat5wnnI2SEv2hEqaHDcSQtPwN5hhw8A=
Subject key identifier: 2D:73:0C:E1:FA:1D:A3:A5:61:B9:40:D2:9E:6E:88:4D:95:64:B1:3C
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 3698
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number: 355D
Signing time: Mon 02 Mar 2026 01:31:35 +0000
Manifest this update: Mon 02 Mar 2026 01:31:33 +0000
Manifest next update: Mon 09 Mar 2026 01:31:33 +0000
Files and hashes: 1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: Ejk7RIHqDOPBKKl+My2ElKpEnTWDjhcWqhgDPNtnBh4=)
2: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: ajWPfgyIE3umSCJ2gTUfFCsZjiBnhTSdlnITGNY926s=)
3: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: Dx8o50rE1OKe1inVw3oUo0yNA4V99kP9sCKq9GKRraw=)
4: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 9CH9K0zReFPkNUN2+CaNA2ol+J26nnIjRlVx1c5X4ZE=)
5: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Pi9bRPgU/hz3+L0wJzzWeCFlpEZjC2aR2BJhIidT0sA=)
6: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: bMXbbXDj5RaZ0Ee7YCwgs/7Vdo6yL1uCa/jY5e4Qep0=)
7: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: wq81aF5SSoAZI/JyoA1vNO3zjZsKt2TkcT5Pso38nSU=)
8: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: u97TYLT/BQTtijKwV5M2wT1c0/v/G8Iw+MIW/+UaOhM=)
9: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: pTltMgVWE0zVNXrntrbtBqvZnO3y4UNU+dhd1NyglWY=)
10: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: hRhJmPw6HJ/CFTNiB4jTfaz2NVHh3MBNmnrOJmVcsDg=)
11: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: hz5gUzbaN7J/VQDJx9BzlgHZ7QvQPcRlAB3rDG9NM3I=)
12: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: folYHW0Gwg29Q/Y88gdrsYlLi/YxqwtkEzwH995b74w=)
13: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: qtf7Df2GnJiRrGvanH5s0hEvrPF8g7/kGohVnvp97F4=)
14: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: xXXKUBvKApT8YVzNPAtueFWn7BnVKJjI5nKq0lyvM4o=)
15: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: tnQvcL+XlKj1mrWVClsnZNGw7PANVizY98r9YXkQdO4=)
16: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: 0+07+O2nWAirNYVLyV1pe7GfKo/vf0ORWGc4yAP010g=)
17: CEC68F44973211E9954F0565C4F9AE02.roa (hash: 9TSvBz+OjIAdBGbstVi1TzZ4VL3DuXLguW4IimNLnXA=)
18: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: cGxsTZNON1GA2BIWFd005t/KHPlmZt4ABdaTGBmax7g=)
19: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: Bwyx7v9ErsR+mUyY+3+Ype9qNhlTd5XIZgvvVkhOvjQ=)
20: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: tim1sMDu0bOwl1syg0MHcvHXmnELHIcAaqZu6XOIY64=)
21: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: WVPtgUERZHpgB/DQwz60lkH6Uc54oBG0ERaAVC6IExA=)
22: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: n/rtVmTMB1Py5Ik0TDu++khNfNTrCl3b/ICvjZej0xc=)
23: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: tuxt7AAVdlIorySbquWSOc2cd9Lyaw78OSqZYuKb270=)
24: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: lpyjRDEla69ljuEGYEqFeb3N2SUniW4iezq7HN/byZI=)
25: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: YuxiT+o6NacPiPMOQ8zhMa/ehrSyMJnmfoAK7JucAN0=)
26: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: /+QRen7Io05J4Xucot84AqX64nbfLZG1ouY7NxOjV3s=)
27: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: T1/3yr80tQn2wXUoaI6SgP3gcD+G/JWjJxOxFcBZOzQ=)
28: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: p//zkhXiOBuBirrvlxHSciakC9fZnELNCSm8Uvn27ZE=)
29: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: 2IvnCeqQ65Zlp2C2lqFnO2zCq+IPSyQ8nLjI5fuUZPA=)
30: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: B27wh3fEi/hAOB71J/u7lh6WCTRhDeDyoP1VWvu0ryI=)
31: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: uu4m5WVb6SU6WZl3ObRQUMqZyoKCwCWL6M6mRfFvoL4=)
32: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: lHidmOj5/4kQC0HWnQsBBkm8/7iR9N9wMoSuEzHus1A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13976 (0x3698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Mar 2 01:31:33 2026 GMT
Not After : Mar 9 01:31:33 2026 GMT
Subject: CN=69a4e876-7d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:e5:78:59:25:28:6e:54:4f:b8:ac:ff:bb:
d0:4a:68:46:b7:2c:93:de:2e:aa:05:72:fd:e2:28:
ed:7c:92:9b:f2:c4:bf:42:83:2a:aa:bd:ff:9d:24:
6b:79:45:cf:05:09:e5:9d:8b:fa:48:78:a6:ef:e0:
cf:a9:33:2f:a6:de:83:8f:ec:0a:9e:e0:31:30:a0:
59:7e:96:9c:52:a6:14:83:c9:e6:8f:62:77:91:de:
30:59:24:e8:27:cf:c7:1c:ea:af:e5:a4:b4:39:69:
b4:2e:c9:41:86:01:87:43:4b:57:dc:ae:79:95:23:
56:3d:e6:55:c8:bb:3f:12:a8:86:47:fc:14:6b:76:
10:d0:44:95:de:1c:ba:39:b9:75:ce:7d:f6:f0:ee:
14:f1:97:11:5e:56:ae:2c:31:a7:e4:d1:13:e1:5c:
9d:49:c4:71:93:b0:3f:a1:18:c1:89:92:c5:c0:be:
ad:f5:5a:e6:48:f3:df:93:d2:82:00:19:31:7f:23:
62:a4:b3:18:6c:e6:d9:bf:33:75:75:0c:48:5b:72:
83:72:ee:0d:db:21:ad:3e:b8:bb:b3:72:ee:16:ce:
11:09:8c:2c:6f:e8:7a:96:d1:c2:4e:76:c7:2e:0f:
b0:80:17:70:7c:39:69:c2:59:29:e5:f6:1d:1c:c5:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:73:0C:E1:FA:1D:A3:A5:61:B9:40:D2:9E:6E:88:4D:95:64:B1:3C
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:e4:9a:e0:d4:30:c7:5c:1d:18:d5:41:1b:19:3c:07:31:de:
af:1e:28:ce:60:e6:1b:2e:3f:88:45:d1:1e:18:32:f9:26:b5:
5f:a8:d5:43:58:a4:9a:cd:21:24:4a:67:9e:5b:89:55:8c:4d:
b1:4b:fd:b0:15:b0:cf:b5:af:50:8b:d4:bd:5c:1e:54:48:7a:
f4:d3:e5:a2:f9:30:30:43:68:a1:86:af:0d:c9:48:e1:24:6e:
12:7a:6c:89:18:18:30:98:59:18:53:d2:8b:6c:bf:80:3c:9f:
f7:b1:3c:33:41:7a:60:65:df:80:a6:e3:33:d5:c4:ca:49:a7:
5c:4d:35:0c:2a:08:8d:8f:53:23:c7:ea:dc:34:22:0b:4d:b7:
d6:0c:14:99:cf:8d:39:ae:21:40:00:63:e5:92:ba:ba:7b:e9:
2f:4e:85:14:fa:d2:44:a5:83:72:b5:ef:fd:2e:ce:74:2b:fe:
3c:b5:9a:b1:76:3b:6c:82:24:44:71:81:fe:66:12:cf:cb:0f:
58:e6:8d:b7:0b:17:74:cc:23:cf:58:9d:a8:b7:ee:82:d1:94:
6f:bc:27:ec:04:26:97:d0:f5:ae:e2:bd:ad:6d:65:0d:81:21:
0f:77:02:40:04:47:73:78:df:8b:7c:7a:56:44:b4:09:86:5a:
99:07:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:35 2026 by rpki-client