
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
File: u4g-aByWIiVDBg6XnT6Chuq2iok.mft (raw, json)
Hash identifier: IaHO0zyQDXqZ0cE0RiqyIXVuNStlca+zTc81yTdyE34=
Subject key identifier: 42:5C:FA:12:01:5D:B1:F4:98:76:89:F9:FA:F0:D7:DA:A7:E9:EE:CA
Authority key identifier: BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89
Certificate issuer: /CN=A91A4413/serialNumber=BB883E681C96222543060E979D3E8286EAB68A89
Certificate serial: 02EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
Manifest number: 02E8
Signing time: Fri 17 Apr 2026 01:12:13 +0000
Manifest this update: Fri 17 Apr 2026 01:12:13 +0000
Manifest next update: Fri 24 Apr 2026 01:12:13 +0000
Files and hashes: 1: u4g-aByWIiVDBg6XnT6Chuq2iok.crl (hash: fQZh6+2Z1LcPsp4Pp+zYkWrQw/qKxiuQ3ZUvWdcD5Yo=)
2: 3D3C7DC8236A11ED8018D62BC4F9AE02.roa (hash: iZfZicmhqss0Lz5XfZ7ejBxdqVyeViGkC/dW7dNv6es=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl
rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4413, serialNumber=BB883E681C96222543060E979D3E8286EAB68A89
Validity
Not Before: Apr 17 01:12:13 2026 GMT
Not After : Apr 24 01:12:13 2026 GMT
Subject: CN=69e188ed-0052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:c4:11:d8:d8:75:02:c9:2b:8b:5b:d6:63:
2f:b4:69:0a:0a:b8:4d:0d:14:9c:30:a3:49:1e:9a:
48:b9:53:15:93:08:6f:62:60:e7:21:36:9c:a8:7c:
d8:c3:dc:ac:f7:69:86:a8:7f:14:97:2c:18:ff:f7:
85:da:a6:27:6f:fc:57:66:1b:38:82:2b:c2:41:36:
20:97:bc:45:93:83:07:a8:fc:1c:a5:5c:0e:02:6d:
30:1b:e6:e5:b8:57:77:4a:f5:ac:07:32:26:d3:0d:
ea:48:45:c5:d5:9f:82:90:b3:af:58:d6:55:a3:af:
11:b2:3b:ae:34:a2:ae:01:98:c9:8b:5f:b9:8c:ce:
87:49:df:96:e1:43:53:49:31:1b:55:f9:3d:fd:64:
3a:2d:72:82:ea:e7:81:52:bf:53:57:21:a3:7c:13:
04:12:02:25:91:31:47:bb:b1:60:16:1d:5a:73:e3:
bd:cd:dc:d9:31:6d:d4:bf:25:2b:be:e7:87:e8:6a:
f4:71:c8:34:ce:7f:06:3f:0c:1e:8c:1e:37:40:35:
a0:2d:15:ac:5d:02:77:cd:9e:39:33:e6:55:6d:5b:
07:8b:b8:3a:47:cd:8a:25:a3:e5:37:db:b3:9b:e9:
9b:bf:4e:5a:5b:77:c3:2c:d3:b0:87:53:94:40:a3:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:FA:12:01:5D:B1:F4:98:76:89:F9:FA:F0:D7:DA:A7:E9:EE:CA
X509v3 Authority Key Identifier:
keyid:BB:88:3E:68:1C:96:22:25:43:06:0E:97:9D:3E:82:86:EA:B6:8A:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4g-aByWIiVDBg6XnT6Chuq2iok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4413/20002C12236711ED97C2EF27C4F9AE02/u4g-aByWIiVDBg6XnT6Chuq2iok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:45:2f:78:dd:9e:22:95:2f:09:0c:29:dc:60:de:84:1a:87:
6e:69:9e:fd:96:b8:92:35:a5:b8:b0:51:8b:ff:a2:7d:f0:9f:
2a:02:47:44:a2:f1:db:2e:2e:ca:2e:de:4f:da:a3:89:9d:fa:
79:b9:79:7c:bf:d5:03:ed:45:fb:12:d6:a0:d8:fe:9d:5c:ec:
7a:a0:5c:d1:f3:bd:d5:76:db:30:68:6f:e0:4b:97:c2:07:d4:
c5:a1:62:b8:72:71:3f:74:02:32:96:3e:ba:31:5a:1c:03:f5:
f3:63:e6:ed:1a:35:ac:52:ff:bc:55:de:00:91:4a:34:79:6e:
b9:7a:8f:c6:97:5c:71:86:2f:95:f3:e0:e6:9d:9b:76:0b:0e:
0c:98:38:87:2d:8a:f7:69:11:50:b6:5b:03:9a:ab:6a:a6:bb:
4c:e9:5c:53:a8:6b:81:28:b8:d4:9a:b5:41:03:f8:76:46:c6:
68:b6:3d:7b:67:80:35:9a:a2:54:de:e1:00:ea:25:40:35:ac:
af:d0:9f:cf:34:4a:50:a7:e7:78:aa:33:9b:bf:ea:0b:c9:6f:
8d:d5:0f:fa:96:ab:7c:85:8e:ee:08:07:71:42:a1:3e:6c:b0:
e8:42:97:4a:99:78:23:70:55:47:b8:8c:11:15:a1:15:3b:fd:
2c:f4:81:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:46 2026 by rpki-client