
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier: SbB6myw9kAnz5/B2pSxDCIggiOSyTxV1bEAxN1+/y/4=
Subject key identifier: 7B:F6:54:7A:6D:9A:76:FE:1E:7D:9D:64:8B:AE:DF:D3:E0:D9:E8:44
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial: 0451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number: 0449
Signing time: Sat 13 Jun 2026 00:17:45 +0000
Manifest this update: Sat 13 Jun 2026 00:17:44 +0000
Manifest next update: Sat 20 Jun 2026 00:17:44 +0000
Files and hashes: 1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: b7LaG1Ol67A4pvvZheqxndb1+ieiaTkSS5DJB1YTw/0=)
2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: OiBvrzdUg3NqY/AvkOcWY8IElMaVk3LH+da3dKWzBQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Validity
Not Before: Jun 13 00:17:44 2026 GMT
Not After : Jun 20 00:17:44 2026 GMT
Subject: CN=6a2ca1a9-52d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:22:4d:34:30:74:3e:a2:88:ca:83:af:ff:
54:53:a0:78:21:12:9e:4e:cb:65:f5:5b:c8:99:21:
4e:55:6d:ba:bd:19:60:34:fa:98:cd:3d:e5:72:72:
8a:2e:3d:87:7f:b8:bf:ba:89:71:78:c6:82:b6:0d:
75:39:9b:d4:57:d6:12:82:18:8c:27:57:7f:a7:d9:
6a:48:78:32:04:f7:0a:fd:0e:48:f1:60:e7:60:5c:
c4:5b:e8:b0:e9:a8:a2:8a:73:81:c3:c9:36:ca:d4:
9b:c0:9d:bf:42:3b:41:f4:9f:d3:95:d0:39:18:f6:
0c:c5:e4:7d:b6:a9:22:65:4a:8a:2b:83:17:98:eb:
04:30:76:35:cd:e5:8f:df:1e:6e:8a:0d:89:c9:4f:
13:23:5e:29:10:08:68:c0:2c:4b:41:89:bd:af:5b:
e7:db:5d:bb:0f:1c:92:4a:d0:a3:ed:7e:2c:15:56:
fb:a4:b0:22:9d:2d:3f:44:3a:49:28:9f:ba:c0:fe:
e3:16:2e:5f:19:2e:83:d5:d0:39:64:bf:57:63:0d:
91:05:97:a5:6e:10:11:15:0b:14:2e:91:7c:a4:4c:
3b:ca:ad:73:d8:b0:22:02:5e:24:5f:03:f8:32:2a:
10:57:14:9e:d6:cd:e0:5b:49:bf:b3:7f:39:87:95:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:54:7A:6D:9A:76:FE:1E:7D:9D:64:8B:AE:DF:D3:E0:D9:E8:44
X509v3 Authority Key Identifier:
keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:8f:3a:6a:87:67:82:ae:4d:c6:20:65:bd:83:ec:65:0c:22:
87:d7:7e:fe:4e:70:aa:fd:91:2f:93:e8:8f:fc:7e:8b:60:0a:
22:6e:98:be:d4:ae:bc:48:56:81:2c:01:45:7c:5a:d2:86:ab:
8a:af:cb:53:a7:7b:0e:64:bb:28:57:4a:be:5a:c0:b1:a2:42:
6e:96:a2:8f:39:dc:21:07:f5:37:ca:a2:5c:d1:0b:99:82:0e:
a6:9f:df:39:28:98:ea:e1:69:5d:90:86:1d:21:6a:e9:02:57:
39:7d:65:62:04:9f:64:89:1a:7b:02:41:37:b4:35:a9:dd:44:
05:ba:b0:66:83:c8:fe:a9:ee:aa:09:11:d0:52:15:20:47:9f:
d5:a4:85:e0:90:f9:98:93:df:20:5c:55:2f:ee:af:a5:70:8b:
8f:c6:a6:b9:36:1c:45:24:15:33:f7:7e:5c:25:ff:08:c6:e7:
47:5a:38:2f:c1:07:4f:87:2a:39:58:f8:79:51:db:e1:48:da:
60:c1:c3:b8:d9:65:8d:ec:83:11:28:37:5e:1b:f9:81:c0:cd:
69:34:bb:d3:b8:88:4f:5d:0d:68:48:30:d0:52:3d:6b:7f:46:
ad:c8:67:2d:87:e5:27:67:f7:1e:b2:db:16:ec:e7:28:05:bc:
e2:86:f8:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNEQzExMTAvBgNVBAUTKEUxNDRDQ0Y0MURBMTA1QUY2Q0Q0NUJDM0Y4ODY2MjM0
RDM4RjdDNzUwHhcNMjYwNjEzMDAxNzQ0WhcNMjYwNjIwMDAxNzQ0WjAYMRYwFAYD
VQQDEw02YTJjYTFhOS01MmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlc8iTTQwdD6iiMqDr/9UU6B4IRKeTstl9VvImSFOVW26vRlgNPqYzT3lcnKK
Lj2Hf7i/uolxeMaCtg11OZvUV9YSghiMJ1d/p9lqSHgyBPcK/Q5I8WDnYFzEW+iw
6aiiinOBw8k2ytSbwJ2/QjtB9J/TldA5GPYMxeR9tqkiZUqKK4MXmOsEMHY1zeWP
3x5uig2JyU8TI14pEAhowCxLQYm9r1vn2127DxySStCj7X4sFVb7pLAinS0/RDpJ
KJ+6wP7jFi5fGS6D1dA5ZL9XYw2RBZelbhARFQsULpF8pEw7yq1z2LAiAl4kXwP4
MioQVxSe1s3gW0m/s385h5UORwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHv2VHpt
mnb+Hn2dZIuu39Pg2ehEMB8GA1UdIwQYMBaAFOFEzPQdoQWvbNRbw/iGYjTTj3x1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0RDMS81MEM2MDI3QUE1
MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJhOXMxRnZELUlaaU5OT1Bm
SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRVVE05QjJoQmE5czFGdkQtSVppTk5PUGZIVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0RDMS81MEM2MDI3QUE1MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJh
OXMxRnZELUlaaU5OT1BmSFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdo86aodngq5NxiBlvYPsZQwih9d+/k5wqv2RL5Poj/x+i2AKIm6YvtSuvEhW
gSwBRXxa0oariq/LU6d7DmS7KFdKvlrAsaJCbpaijzncIQf1N8qiXNELmYIOpp/f
OSiY6uFpXZCGHSFq6QJXOX1lYgSfZIkaewJBN7Q1qd1EBbqwZoPI/qnuqgkR0FIV
IEef1aSF4JD5mJPfIFxVL+6vpXCLj8amuTYcRSQVM/d+XCX/CMbnR1o4L8EHT4cq
OVj4eVHb4UjaYMHDuNlljeyDESg3Xhv5gcDNaTS707iIT10NaEgw0FI9a39Grchn
LYflJ2f3HrLbFuznKAW84ob4Uw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:31 2026 by rpki-client