
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier: A5oe6sP2+wX8tRpF1pxJLhZT2j/HiwnpJgUTXRyYPgU=
Subject key identifier: EE:1C:C3:F8:D2:F3:31:AF:98:C5:CB:AD:0E:37:AD:06:E4:79:A4:85
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial: 0419
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number: 0412
Signing time: Mon 02 Mar 2026 01:31:00 +0000
Manifest this update: Mon 02 Mar 2026 01:30:57 +0000
Manifest next update: Mon 09 Mar 2026 01:30:57 +0000
Files and hashes: 1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: XlMM+7V4Hw04M/7ToMKjsSIEQmVPOZnBmo21XLuJXGY=)
2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: Nm/gYuWqGgipqywq7Xrzu19TEq+o34UqvUGP90ZngeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Validity
Not Before: Mar 2 01:30:57 2026 GMT
Not After : Mar 9 01:30:57 2026 GMT
Subject: CN=69a4e854-e17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:0b:92:2b:20:4c:50:24:57:09:96:4b:e2:
83:cc:e0:a8:bb:24:ba:b8:29:63:b1:8b:3a:10:8c:
9c:b2:d0:54:e7:c5:3b:0b:30:e8:5f:32:af:24:e1:
7c:8e:31:32:0d:3d:1e:ad:06:32:e5:88:60:99:30:
80:af:e3:cb:b3:db:b0:88:b7:84:47:ff:8d:8f:df:
65:8c:ea:05:b3:4e:88:7f:72:67:18:e5:9e:8c:c4:
76:d0:80:d6:20:24:05:23:e7:da:6c:24:2d:f4:75:
9c:31:ec:36:08:6d:b6:76:6e:81:77:9e:28:a9:b5:
57:17:d9:6c:d8:38:ed:04:60:2b:ef:e6:de:1b:b5:
13:be:3e:a4:b1:7c:09:c5:35:30:b7:6c:b1:85:63:
ff:fa:3e:e6:55:75:94:0c:a2:e6:c2:16:c5:4e:54:
bd:ef:0b:d2:74:3a:f1:e6:d7:e0:45:dc:cc:67:88:
6e:4c:70:a7:76:20:ee:6e:9b:a2:67:9f:47:4c:67:
84:72:9c:3a:ce:bd:88:e1:13:2c:1c:06:e3:d8:0a:
1d:1e:7b:57:ab:ac:76:f3:4b:ac:0b:c6:22:dd:9f:
4a:bf:ca:18:75:49:1b:7a:7c:fc:a0:e1:00:49:65:
77:32:b2:6c:a6:b8:95:ab:cd:fb:5f:64:86:1f:a3:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:C3:F8:D2:F3:31:AF:98:C5:CB:AD:0E:37:AD:06:E4:79:A4:85
X509v3 Authority Key Identifier:
keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:a6:d1:93:9c:de:5d:a2:ae:3e:08:8c:a3:b3:03:1a:fe:71:
b3:ed:b9:c3:5b:65:53:ca:61:c8:6e:de:84:fa:44:99:b2:e4:
f3:b3:32:44:f0:ef:df:43:fa:19:14:59:8b:f4:89:ec:e0:13:
be:9d:bd:08:48:2e:95:a9:6d:78:3f:ad:69:49:45:c1:7f:f8:
8b:93:b0:c7:40:64:3c:0d:25:39:b5:60:3e:db:ad:46:f3:f8:
77:ed:d9:c2:53:26:5e:7f:46:4c:39:d0:e1:84:08:07:16:32:
86:e1:58:2b:d2:29:b2:c9:4d:02:6c:02:cd:5c:05:8c:64:aa:
09:8f:96:9b:01:0c:26:06:91:92:bc:a9:ad:1a:a3:7b:68:20:
06:62:2c:42:b2:28:c7:65:87:76:f0:d3:22:d3:7f:08:20:9b:
f0:da:32:84:87:32:71:76:38:1d:01:de:40:5f:81:4c:43:04:
ba:b5:ad:29:1f:12:c5:18:33:92:db:95:20:c3:6e:92:94:dd:
2a:8e:70:31:cb:4c:52:d1:8b:e4:fb:61:e0:4e:88:86:40:e9:
b6:e4:c3:20:24:72:bf:7a:52:25:da:64:9a:58:18:74:3a:b3:
4e:be:bf:ee:69:f6:f4:72:00:13:6b:4b:56:94:cf:51:9d:36:
ee:bc:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:59 2026 by rpki-client