
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
File: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json)
Hash identifier: UKVWDgcMaTS22+RRLNoM1uFWQMsLhl2UkdHxf+pustc=
Subject key identifier: 7C:3B:6F:F6:5D:21:73:95:FA:40:5E:9E:CE:01:C1:37:9C:A5:6E:FF
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Certificate issuer: /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
Manifest number: 4A
Signing time: Sun 01 Mar 2026 09:43:55 +0000
Manifest this update: Sun 01 Mar 2026 09:43:55 +0000
Manifest next update: Sun 08 Mar 2026 09:43:55 +0000
Files and hashes: 1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: Z6M/NF9kl8+87US9qhlCAHkXkhjCI986bUwZ+dM3zfI=)
2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: KsmwgAL/gukfCTPlRMQRH678LbHq90naclkR64QeMKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Validity
Not Before: Mar 1 09:43:55 2026 GMT
Not After : Mar 8 09:43:55 2026 GMT
Subject: CN=69a40a5b-3181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:82:48:24:19:f8:b0:73:96:4d:0e:43:7f:
21:6c:9d:29:2c:7e:bd:f9:e4:05:36:40:d8:7a:b0:
cc:31:e6:b7:df:0d:2b:7e:f1:60:e0:f1:ba:27:03:
c3:31:48:93:e5:c8:3f:6b:93:a9:cf:1e:e2:81:2a:
2e:12:13:78:45:dc:39:7e:64:4f:df:a7:da:8d:7b:
7a:6c:02:c0:5d:fc:2a:6b:ed:02:a7:94:92:72:27:
55:fe:11:76:ac:24:bf:23:56:e0:e5:5b:c3:c5:c6:
1d:6a:f0:c6:48:17:f9:0d:d5:6c:d4:50:9d:9f:20:
f4:10:5d:1a:a2:40:3a:3e:1b:e6:f1:d8:40:7d:b3:
63:3a:dc:34:8d:32:46:ff:ae:1a:75:ab:68:62:70:
77:26:1f:8f:60:0d:43:c2:56:27:23:74:2f:d3:30:
62:0b:70:52:25:50:85:49:93:cf:67:e9:2c:f4:a3:
4d:fa:8a:45:44:3a:ac:b9:90:5a:bb:5b:61:60:13:
98:dd:b0:26:b5:47:d1:3d:48:71:88:f7:9e:8c:12:
1c:0d:35:c3:ac:11:5f:1e:10:7f:a0:f6:0f:1d:26:
8c:43:15:ce:9c:1c:70:ff:0b:c0:c0:de:c5:a1:10:
a6:bb:e6:b3:b6:d4:54:bf:59:24:73:08:69:dc:4c:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:6F:F6:5D:21:73:95:FA:40:5E:9E:CE:01:C1:37:9C:A5:6E:FF
X509v3 Authority Key Identifier:
keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:12:1d:ac:a8:f9:83:88:0e:3e:77:8b:a7:38:65:c7:9b:9e:
13:72:c3:7d:eb:bb:5c:81:1b:52:4a:0a:c6:d1:b4:c3:c3:30:
c3:75:23:d9:5a:93:22:22:7a:8c:ca:4b:0a:11:d5:9e:81:0d:
01:96:5b:06:72:48:ac:b5:dd:8f:00:8d:d0:6d:94:58:41:8a:
19:ce:35:af:8e:ad:bf:20:76:12:f1:65:21:d8:80:41:9b:6a:
9c:0e:16:d2:4c:2b:4e:e0:6d:51:50:3d:26:c5:07:ea:d3:37:
cb:99:cb:86:c8:47:3f:51:78:32:53:67:d6:ea:ff:26:d3:03:
46:1c:57:50:6c:58:e1:93:63:18:92:b1:12:a7:76:6b:d7:de:
d5:6e:3c:2a:89:71:5f:51:c1:02:78:48:6e:f0:be:3a:33:ae:
03:f3:9f:93:f5:69:fa:d7:52:a6:05:a2:25:72:35:48:a2:cc:
75:6a:5a:17:c1:0c:b8:66:8f:79:ab:70:29:50:36:ef:73:7c:
60:93:6a:99:15:93:df:7d:29:30:dd:64:03:3f:93:10:26:9b:
f4:8f:7d:b0:6b:45:63:31:b7:96:dc:79:0d:e4:21:62:e3:23:
0f:aa:65:d4:26:69:d1:d3:b7:37:76:bb:f1:46:14:1e:14:76:
d5:42:66:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:08 2026 by rpki-client