
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json)
Hash identifier: vCVLV6BOlsFzbgD95FktDZW7ISbMlrUqzUah2YDHyFo=
Subject key identifier: 25:61:60:E8:BD:0C:5E:2D:6A:EF:51:FD:3F:15:B8:0F:45:74:1C:19
Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Certificate serial: 0E2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
Manifest number: 0E25
Signing time: Mon 02 Mar 2026 00:27:31 +0000
Manifest this update: Mon 02 Mar 2026 00:27:29 +0000
Manifest next update: Mon 09 Mar 2026 00:27:29 +0000
Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: rFD2C3M+FEgdNgGaBDVGwQw4cSalyOWcLgJ2osFf7Qo=)
2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: QV4VcOWMjw2Q8agZQUCaZHMoZiK398hrWlFAisrLEf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3629 (0xe2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0367, serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A
Validity
Not Before: Mar 2 00:27:29 2026 GMT
Not After : Mar 9 00:27:29 2026 GMT
Subject: CN=69a4d973-fd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:d9:cf:7e:8d:31:14:16:85:1b:90:d6:29:
ee:da:7a:dc:df:b1:ad:12:e5:b2:04:11:2b:84:a1:
ff:c0:75:b2:e0:ef:cb:08:45:6f:ff:10:18:77:d2:
ce:0b:11:d5:8c:65:7a:17:3a:4e:6d:af:b9:72:7d:
bc:c1:61:6e:01:fe:a7:f4:4d:53:0b:8c:e2:a0:cc:
32:3a:9c:c4:0d:32:4d:f4:c3:8a:85:c6:82:e1:08:
37:82:53:bc:69:7b:e1:5b:48:c7:24:da:86:5d:93:
b5:a2:ef:b5:2f:b1:fb:2b:2b:f9:9e:6e:c2:bf:2c:
72:56:30:c4:0f:7d:87:f6:67:2e:e9:2b:9e:6c:be:
5b:49:36:31:29:4d:00:68:6d:f5:87:c4:9e:d0:fd:
d8:b9:57:26:ca:4c:fa:ae:66:18:aa:da:59:a8:17:
fd:eb:cb:25:63:8a:2d:15:d6:46:9e:50:3f:83:c7:
51:eb:ff:42:d1:17:9f:7d:bf:56:b3:bb:be:10:52:
f8:95:3b:cc:f2:76:6d:06:5c:67:fc:77:86:c2:27:
ec:8e:8f:9a:cb:b0:06:46:96:af:15:89:d2:34:88:
92:ff:e3:79:87:06:bc:7c:ce:e3:47:8a:cf:09:c9:
4c:e6:c0:5c:79:7f:06:a8:fd:c6:bc:b9:73:3c:2b:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:60:E8:BD:0C:5E:2D:6A:EF:51:FD:3F:15:B8:0F:45:74:1C:19
X509v3 Authority Key Identifier:
keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f2:fc:fb:2b:07:7c:31:3e:d8:12:5a:75:2f:8f:a2:ef:b5:
db:63:f4:bb:bc:b8:6c:7f:4b:2c:06:74:56:f0:67:36:7e:54:
da:26:12:69:05:b4:c7:87:c5:e2:49:1b:67:2b:00:07:6a:32:
26:c2:9c:dd:5f:33:2f:81:27:51:5c:bb:ba:8d:0b:49:c0:0d:
12:90:34:6d:ee:33:e1:dc:34:36:7e:bb:06:c4:6c:2f:8d:c1:
cb:da:cc:56:d7:27:97:55:25:2a:07:f6:d1:01:32:1b:96:8b:
13:ec:41:54:7e:af:09:82:59:82:28:96:aa:4c:7e:8f:0a:c0:
c1:2b:39:35:de:2a:d3:69:6b:ab:9d:0e:b6:71:56:9f:1a:1f:
7b:de:64:6f:61:77:05:79:1e:d0:26:5f:27:c4:10:ef:80:f4:
f3:cf:d1:26:d0:f7:82:7e:4f:4a:f9:14:5a:bd:59:59:4a:92:
7d:3d:69:3f:be:b1:23:16:8d:11:85:85:3b:61:c8:ab:8b:34:
e1:57:77:74:e8:c0:e0:be:ec:d2:6b:e5:d1:17:74:9a:64:58:
08:63:3d:d2:6f:51:7c:8f:8b:26:bc:e3:bd:5b:2b:0d:c9:95:
7a:64:94:a9:5d:a4:17:49:8d:3d:cf:10:76:55:b5:14:47:cd:
3d:cf:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:32 2026 by rpki-client