
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier: olYdZWO8MT96F/U2cstngIoCKXmuq4HF0wzkSvibnLo=
Subject key identifier: 27:76:D9:A9:0A:23:E9:F7:08:47:FD:84:03:3F:02:29:33:11:EA:7A
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number: AC
Signing time: Thu 16 Apr 2026 20:23:03 +0000
Manifest this update: Thu 16 Apr 2026 20:23:02 +0000
Manifest next update: Thu 23 Apr 2026 20:23:02 +0000
Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: YydnE4I+R3yOJhWwoGO/vdRO5LumlHgf77i3LMvH/Fk=)
2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: Rx4vAlWyTLV0daFrUy6DuCo/+UjTzyGK5tVT0zVpxsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Validity
Not Before: Apr 16 20:23:02 2026 GMT
Not After : Apr 23 20:23:02 2026 GMT
Subject: CN=69e14527-ecf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:a2:2e:14:8f:85:a6:5d:4e:c5:01:1b:92:
59:a0:e3:85:ab:4a:47:87:10:28:cc:02:33:bb:c8:
89:c4:4c:d5:1f:0c:b3:e6:e3:6c:2a:23:f1:74:f6:
36:0a:d7:0f:b4:b2:c8:8a:7d:9e:dc:62:cd:18:2b:
8b:8a:b2:8f:74:a4:6a:44:73:f0:68:c7:fd:f9:71:
84:90:af:df:df:40:8a:17:df:3f:35:63:a7:c5:f3:
81:4c:9d:b6:06:d3:b6:56:98:39:13:60:f1:68:fa:
89:ab:c3:43:63:8c:51:47:0f:65:d8:fd:df:99:ca:
fe:b1:c6:2b:0e:a4:ee:8d:b7:ee:75:14:a0:80:59:
28:d7:c2:97:3c:53:3a:25:40:e6:7f:cf:c2:f2:8d:
31:16:e8:7c:86:b2:7d:6f:85:10:16:c9:67:e4:04:
3a:62:85:a0:9f:b7:1f:38:13:74:a5:e2:df:39:14:
ab:67:b8:b1:6f:7a:a8:95:a0:0c:ef:51:29:b2:4a:
30:5f:7a:2e:63:db:ed:e0:f1:db:0e:82:ac:a8:59:
99:d7:63:05:c9:d5:33:94:b1:2d:ab:80:85:ed:15:
38:b5:f7:d6:69:bf:27:6d:68:4b:ae:f2:1e:0e:f6:
a3:bd:53:57:65:76:83:ba:0e:3d:3b:1e:51:98:8e:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:76:D9:A9:0A:23:E9:F7:08:47:FD:84:03:3F:02:29:33:11:EA:7A
X509v3 Authority Key Identifier:
keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f9:06:8d:64:b3:60:aa:a6:64:3a:a0:00:1c:14:c8:ae:87:
5c:16:14:69:24:f4:9b:c7:7c:4e:a5:3b:d0:1d:49:21:cf:0d:
cf:88:25:b9:92:a4:cd:73:22:3a:51:40:89:ca:3d:20:95:b8:
5e:0a:11:6a:65:39:da:e2:7c:7d:b5:28:2e:de:de:75:a4:72:
6f:eb:f8:8c:fb:f3:33:f0:3d:3c:79:f7:05:c2:dd:99:bd:8a:
2b:04:af:8f:f7:fe:45:7d:f5:d7:b6:84:3f:1c:13:26:df:7f:
c7:6d:bb:fa:a1:c2:a7:df:2d:16:8d:ce:e7:7b:6d:c9:f5:70:
ca:cc:3b:50:82:18:8a:bf:4b:87:3b:9a:85:25:9c:fe:44:fd:
a5:c4:6d:a8:ff:43:76:99:7e:bc:6f:11:d4:14:68:0a:7b:ac:
e9:13:3f:9a:1b:0f:5f:1c:2c:c4:7d:b7:db:dd:47:c3:c4:1a:
bd:59:12:15:a9:72:bb:9f:b9:c0:c0:34:a5:91:f5:fc:ee:95:
97:6f:5e:79:a5:86:80:f2:e0:52:b6:05:2e:74:7c:46:51:ff:
17:7f:21:76:45:bd:93:58:12:46:ff:89:06:b4:be:41:78:1b:
01:a0:2e:c3:36:0e:d3:67:9e:7a:fa:71:bf:26:44:c5:d8:85:
60:94:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:21 2026 by rpki-client