
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier: Skt3pWyfsmiIP6FFjDukt+F0IGYPDT/0B2m3CjM2lLs=
Subject key identifier: 3F:AE:8B:10:09:C1:D3:8E:38:A8:5F:D7:39:D1:90:5E:45:60:E4:0A
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 08E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number: 085D
Signing time: Thu 16 Apr 2026 20:54:18 +0000
Manifest this update: Thu 16 Apr 2026 20:54:18 +0000
Manifest next update: Thu 23 Apr 2026 20:54:18 +0000
Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 2EIaBFW2rQ6YzvGaWIRCQumV/XwhzlyUzDkbYsdNfW0=)
2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
3: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
5: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
6: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
7: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
9: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
10: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
11: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Apr 16 20:54:18 2026 GMT
Not After : Apr 23 20:54:18 2026 GMT
Subject: CN=69e14c7a-5e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:95:25:b5:2b:4e:2d:9a:a7:94:e5:f0:b5:
b6:61:25:e9:5e:bf:81:09:c6:0f:70:25:65:d5:0e:
2e:67:51:7f:e9:d5:c1:08:fa:74:3e:21:80:e4:02:
95:18:02:db:70:ba:08:4f:35:77:66:fa:fe:a4:ba:
45:a5:5d:e3:74:28:88:83:62:00:cc:06:ee:bf:e6:
88:0a:2f:97:8b:ac:53:d9:80:3e:8b:61:29:38:cb:
30:d9:8e:fb:32:e5:58:16:9f:d9:ef:87:3c:29:68:
54:1e:9d:e3:80:bf:bf:fc:45:85:1d:77:4e:90:7f:
b5:fa:39:eb:72:48:82:bc:29:a4:90:eb:50:f4:80:
32:3d:90:75:2b:fe:d8:47:f1:78:83:b7:48:92:44:
c4:76:cc:f0:21:4f:43:29:f8:e4:72:1f:2c:70:6a:
85:55:2b:c1:c0:61:0b:7b:30:be:b2:2c:09:e0:93:
52:92:4c:4a:5e:07:01:88:5b:a6:d4:df:b7:23:85:
20:11:64:20:d1:a8:77:db:6d:d4:1d:b0:63:b9:84:
b3:78:86:1c:11:bc:32:78:44:e9:70:fe:8b:dd:80:
6e:cd:e2:e8:60:fc:f2:26:95:2f:3f:fb:b7:03:a2:
c9:93:0f:24:c0:f5:b1:00:9d:45:25:88:11:6e:8b:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AE:8B:10:09:C1:D3:8E:38:A8:5F:D7:39:D1:90:5E:45:60:E4:0A
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e0:d3:2f:fe:5e:b1:db:ed:82:91:25:a2:f4:c9:c5:97:c4:
e5:81:42:e7:7b:d7:af:78:e2:a6:52:20:61:0e:bc:2b:71:8a:
e4:b5:13:7c:66:3b:91:f7:77:d7:30:ec:a3:9e:46:c2:c3:9c:
c5:70:a1:64:bf:fd:13:ed:7b:81:09:f2:33:36:80:34:07:3c:
f5:df:0f:ab:15:96:84:cc:b3:2a:f6:c5:c7:8e:67:8b:12:73:
50:25:b4:cb:f7:bd:00:94:de:a9:03:38:6a:fc:3c:86:c8:9f:
4a:fc:b0:25:84:f2:8e:c3:83:12:dc:62:4a:aa:32:45:57:78:
51:2f:a6:6b:7b:f1:49:ab:e7:34:f4:a3:fa:28:70:38:3e:11:
f8:00:d1:3f:2c:ef:0c:4a:82:d9:91:46:7d:91:8f:ee:c0:9e:
c7:cd:c5:12:86:16:49:0d:99:16:b4:14:55:9e:4c:93:d5:0a:
55:9a:3d:7f:d3:45:08:f0:bb:d9:cb:d4:8b:e4:64:65:e4:a5:
85:3d:76:12:7a:14:8f:bc:2d:03:b3:ea:16:69:5c:45:8d:b7:
fc:2e:c3:8f:6b:bf:78:2f:6f:41:01:53:63:93:2e:03:1b:47:
a9:ff:d0:b2:01:5a:7c:4b:78:a3:59:f1:01:6a:94:d9:91:26:
0d:1b:82:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:18 2026 by rpki-client