
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier: yrIvUv5H+2bHaPxBr3B03of3eEeAT7Kz0xrbxnp12Q4=
Subject key identifier: B2:AA:8C:9E:38:62:57:9E:15:38:33:E6:C1:7E:61:54:D8:BB:32:EE
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial: 0434
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number: 042C
Signing time: Fri 17 Apr 2026 00:15:41 +0000
Manifest this update: Fri 17 Apr 2026 00:15:41 +0000
Manifest next update: Fri 24 Apr 2026 00:15:41 +0000
Files and hashes: 1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: mqzVtUJDwgC12HC5VeRN9dQ9GwQQ99CQFQKOzn8DCkA=)
2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: OiBvrzdUg3NqY/AvkOcWY8IElMaVk3LH+da3dKWzBQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076 (0x434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Validity
Not Before: Apr 17 00:15:41 2026 GMT
Not After : Apr 24 00:15:41 2026 GMT
Subject: CN=69e17bad-a92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:f8:fc:bd:b8:78:3f:0a:f5:40:b2:32:27:
f3:1b:b6:0e:e5:f2:a2:de:3a:71:10:de:05:bd:e4:
cf:d7:68:de:59:de:42:99:11:e9:3e:49:f6:ab:3a:
ab:25:32:b8:eb:ff:8e:96:f5:71:c0:96:fb:90:82:
cd:db:e4:c9:ca:41:12:92:9d:08:22:37:e7:b4:9d:
91:5d:dd:98:07:39:76:cc:b1:72:b6:41:f7:06:c5:
82:d9:24:62:5d:5e:77:0c:b1:0a:20:f2:8a:12:1d:
1b:d9:a0:32:e1:8e:4f:ae:38:94:1b:3c:c5:71:a6:
68:83:af:2a:30:cd:35:ad:55:3d:ab:ba:ca:09:8f:
2d:94:ec:97:c8:1a:f8:dd:68:44:6d:ce:de:6e:5e:
e1:ce:ed:fd:e8:58:fc:53:ff:c6:cd:81:7c:9b:eb:
e9:1a:8d:7b:77:e3:a9:92:60:90:96:57:3c:37:3b:
fd:02:2b:16:10:ea:44:f3:2e:10:6b:5d:80:7a:a9:
2d:bb:1d:d2:c9:07:80:1c:74:69:ec:35:06:43:ad:
79:14:c6:f6:6f:e1:da:af:97:95:cc:e7:c3:35:58:
74:d1:c2:32:a2:d3:3b:02:fe:64:8d:d8:b7:58:6a:
a1:fc:85:40:14:77:ec:d9:bb:5f:6c:b5:70:48:bb:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AA:8C:9E:38:62:57:9E:15:38:33:E6:C1:7E:61:54:D8:BB:32:EE
X509v3 Authority Key Identifier:
keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:11:9a:15:bf:c9:5a:6f:97:8b:a3:1d:db:49:f0:2b:9c:5d:
27:22:b3:a1:1c:c7:67:e6:b8:e9:bb:39:43:5e:a1:bd:d1:ba:
9a:63:de:a8:d4:c0:8d:19:b8:c5:c6:b5:f0:8e:7f:14:21:c4:
2a:66:1d:9b:40:0a:92:08:51:17:09:26:ce:5c:04:eb:49:91:
a1:f6:a6:ad:6d:af:a4:ed:89:42:ac:6c:f4:7d:ba:37:45:87:
5b:e7:42:10:ef:a9:4d:b1:81:05:da:0b:72:fb:6b:c2:5b:fb:
25:3e:b5:a7:0e:24:cd:1e:59:a6:a0:ca:36:ea:eb:f1:eb:ca:
5b:ec:e5:a9:09:42:8d:1b:b7:29:9d:5b:65:2b:38:32:7f:4e:
43:6a:31:95:a8:0a:7e:7a:cb:9e:4f:08:6a:f1:89:cf:ea:87:
7f:58:2e:60:b3:5e:38:f1:ca:56:a5:8c:00:f1:90:8e:93:ae:
03:b1:55:5b:5a:a8:94:0e:8a:3f:5b:84:7f:99:01:08:95:1b:
30:15:76:0d:47:a9:24:eb:5c:95:03:d1:78:8d:85:94:9c:32:
bc:5b:64:d2:11:dc:46:6b:12:cd:ce:3f:f3:c4:1e:a9:ab:1d:
16:fd:83:72:85:db:fc:94:c7:f7:f7:cc:79:6e:cf:d4:38:14:
2d:9a:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:02 2026 by rpki-client