
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier: wzDqbRezYHyn590f72eWMbkCMLsYiOv25LFDc+dEIOw=
Subject key identifier: 03:D6:96:F0:E6:B9:35:61:64:35:E4:3D:FD:4A:13:54:67:67:19:93
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number: 94
Signing time: Sun 01 Mar 2026 23:52:03 +0000
Manifest this update: Sun 01 Mar 2026 23:52:01 +0000
Manifest next update: Sun 08 Mar 2026 23:52:01 +0000
Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: omhiwulkADwv7RkDVkP7sPPCie6mko3Vbc0YygISrTg=)
2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: Rx4vAlWyTLV0daFrUy6DuCo/+UjTzyGK5tVT0zVpxsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Validity
Not Before: Mar 1 23:52:01 2026 GMT
Not After : Mar 8 23:52:01 2026 GMT
Subject: CN=69a4d123-795d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:ad:cf:86:ca:83:f4:e0:d8:fa:50:67:b3:
dc:a4:55:fb:a7:03:26:c6:4a:dd:26:da:42:93:ec:
72:da:24:7b:29:71:79:d0:85:82:30:53:45:9c:84:
00:6d:71:81:b9:97:32:08:b5:79:67:76:df:2c:56:
a3:b5:3b:d7:f9:24:1c:a5:42:f7:e0:54:74:2d:ff:
4b:0b:cf:ec:fb:1d:57:03:d1:53:62:37:c4:ce:fb:
25:eb:16:46:bf:23:a5:c8:b5:12:41:4c:63:d0:4e:
a2:2d:02:0e:1f:08:31:08:b9:ec:13:fb:06:25:55:
12:d0:17:cf:78:83:41:a5:b4:aa:9f:ee:b4:2d:14:
2c:38:46:7b:ef:fc:55:36:8b:00:99:33:47:da:ef:
e8:ef:0a:77:6c:55:52:ab:a2:26:ef:59:a5:ec:e2:
93:37:82:e1:04:8b:58:99:8c:28:84:9a:0d:56:e0:
7f:bd:bf:c7:c8:49:c4:86:9f:a1:05:fd:39:c2:c8:
d7:f7:14:55:56:e6:5e:a4:c3:23:25:c7:72:43:cf:
55:d6:e7:92:ec:39:3c:3f:d7:cc:ef:17:f2:5a:e7:
91:ae:10:5b:8e:b1:d2:30:36:d1:46:1b:39:81:fd:
db:71:33:7a:7b:45:16:bb:95:38:69:06:1a:7e:38:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:96:F0:E6:B9:35:61:64:35:E4:3D:FD:4A:13:54:67:67:19:93
X509v3 Authority Key Identifier:
keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:dc:ab:e8:64:ba:45:60:08:88:64:15:b0:5e:c5:32:9c:8e:
94:47:88:bb:83:96:e8:c8:ff:c5:74:94:ab:4a:92:81:02:f5:
68:21:8b:33:2a:29:12:7d:9e:36:fd:74:6b:ef:e0:35:bd:f3:
4a:54:72:ad:e2:15:5c:76:65:dd:98:05:6f:5b:e0:53:7a:76:
ad:0a:cf:cf:cb:ed:e5:4c:82:75:a3:05:22:31:f8:10:04:b3:
bd:dd:c2:f2:48:6e:5f:c3:d1:ba:b3:dd:c6:9b:2e:d0:1f:e4:
c2:74:e5:c0:51:44:1d:97:0f:b9:25:8f:87:25:f4:db:d1:80:
6e:09:44:4a:8e:6a:70:d4:ed:cc:95:8b:a4:a6:96:44:58:af:
24:8e:a8:56:be:e4:e7:66:6e:4f:ee:cb:fa:30:77:0a:f3:09:
29:1f:0d:ea:e9:75:10:88:96:c5:d7:1e:6e:95:a9:ac:a6:8b:
a9:b9:94:aa:4a:d1:69:4d:ab:55:49:6f:a1:ae:fc:5c:48:07:
87:d5:59:2c:24:25:16:48:d2:72:20:e4:77:2b:35:e6:4e:98:
69:77:49:f5:5d:e9:13:f8:f9:2f:08:85:b6:c9:87:7e:e4:12:
18:e5:e2:1c:ce:a5:5e:7e:c1:ec:b7:15:40:4a:14:1c:ca:21:
6d:49:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:50 2026 by rpki-client