
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier: m7MpnGpwhRlAn5v7nzA9LIeQ+EYmM9ZU4LIGE3ypRC8=
Subject key identifier: 9B:7D:38:3D:1F:F7:BC:69:7F:B8:27:46:76:4D:31:E1:F4:CD:8E:2F
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0A5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number: 0A51
Signing time: Sat 28 Feb 2026 19:54:27 +0000
Manifest this update: Sat 28 Feb 2026 19:54:27 +0000
Manifest next update: Sat 07 Mar 2026 19:54:27 +0000
Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: /pQBgRkLU6gAKcwZOrkPc/nFfEiST2sWQ56Hu33XDeI=)
2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=)
3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=)
4: 305312F67CA011F098F1673CC4F9AE02.roa (hash: wVxD4Ia4NFpgdZDCkPWfFk89K3NA8UH13kaAx87O4u8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:54:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2655 (0xa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Feb 28 19:54:27 2026 GMT
Not After : Mar 7 19:54:27 2026 GMT
Subject: CN=69a347f3-fd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:ca:63:1e:28:80:41:82:4c:ce:11:47:7e:
df:e9:f7:71:1a:5c:c5:6d:fa:8f:14:f3:a2:3c:34:
51:70:ae:d7:49:11:86:2e:02:89:0e:c6:74:05:7e:
36:51:62:f7:e2:54:78:9f:a5:2d:07:29:4e:b0:e9:
2f:9a:36:bd:1a:fd:52:40:9a:dd:63:29:a3:37:57:
18:d3:6e:62:2f:1e:64:8a:52:49:91:71:6b:20:2a:
dd:c6:45:4f:93:bc:b4:70:3b:05:6c:9e:14:d5:d6:
ae:f4:68:6e:89:bf:d6:a4:99:c7:0a:86:5d:26:30:
da:06:42:b6:f7:41:b5:79:37:8d:f1:d2:de:35:d7:
dd:fb:2f:b6:ca:d0:c9:e1:bb:43:20:24:4f:4b:0e:
bf:7a:b8:24:73:c5:ea:a4:e7:e2:6e:9b:ea:67:c4:
bc:f9:44:15:af:f2:2c:04:e8:56:ef:20:d1:9a:10:
da:bf:f9:0f:1f:14:6a:51:03:69:92:57:8f:8b:87:
a8:f9:ba:83:38:55:b4:1e:e8:08:0f:33:6c:e5:6c:
0c:73:38:af:87:57:aa:ea:d4:9c:79:f3:e4:29:47:
98:94:8d:ce:00:34:cb:41:a3:b4:80:e4:bd:83:36:
2d:62:2d:55:04:db:e5:af:06:a1:75:2d:94:6c:cc:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:38:3D:1F:F7:BC:69:7F:B8:27:46:76:4D:31:E1:F4:CD:8E:2F
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:c7:e4:b6:24:b8:c4:c0:3c:fb:10:da:cd:ec:fd:ab:ce:e2:
51:22:5a:4e:08:ef:78:a3:3c:45:b2:17:08:6f:5f:29:c3:59:
cf:c1:17:fc:93:bd:d3:c3:b5:93:8b:95:1f:3a:37:1d:7d:4d:
f9:9e:65:b4:1a:05:57:f2:bd:74:fc:0c:df:1a:b9:b6:49:5f:
97:37:c7:03:dd:8e:79:51:7c:bf:de:01:1a:66:dc:0c:36:62:
a2:c7:b7:48:df:90:bc:7d:c9:89:61:be:8b:80:e5:19:47:34:
b1:fd:4c:32:04:09:c3:2b:85:94:be:b2:22:f7:be:5f:c4:e4:
05:99:ff:37:81:15:e5:cb:7d:cb:15:d1:d4:ce:9a:67:9d:3a:
6c:43:53:a7:3d:7b:e2:9e:86:2f:f6:fb:3e:bd:ba:c0:70:9d:
c3:1e:6d:cb:b1:fb:04:58:8e:d1:93:26:e2:17:2d:ac:c9:41:
3c:39:62:26:5f:9c:a9:67:5b:90:df:d5:77:ec:ed:0b:24:23:
3d:84:66:47:08:32:a4:af:f7:4c:2e:f9:f7:ca:93:ec:b5:1c:
7d:09:26:3e:97:1c:f8:93:08:bf:88:96:a4:e1:8c:8c:40:06:
2b:af:98:ae:08:aa:3e:77:05:8a:7e:6d:77:9a:cb:be:34:6b:
5b:11:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:31 2026 by rpki-client