
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier: Lx3gMsznMNuoq7MjD65iQauLRFRDw1Rs/eEInOJMgxY=
Subject key identifier: EA:96:40:C1:7C:AE:28:84:83:73:6B:72:A5:FA:83:7E:2E:EE:EA:D0
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 0891
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number: 0842
Signing time: Sat 28 Feb 2026 21:27:13 +0000
Manifest this update: Sat 28 Feb 2026 21:27:13 +0000
Manifest next update: Sat 07 Mar 2026 21:27:13 +0000
Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: Nf3WnqIzMXTdE3S02OS1aFkErvNrzOzGfStOxVvIdOI=)
2: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: VkWJzJFrrUcjfw7Whrx8quFhXrqF53pxpjDYVlqErEw=)
3: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: rDpjDMpANY5UP6fw4xa4nyyZLU0t3Hrc+biZaf2hOUQ=)
4: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: RhTeRHpmCccyQhXwsz/bPbzoRbw66rFE3vQDJJkIS6I=)
5: 0989F3EE120911EB83107638C4F9AE02.roa (hash: DUQq8P61M4M6+etTKG7c0xOZ7LZFpErrHGfiypMoOQs=)
6: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: TFKRxnOklHqBqHXkm8eeXU3NFE2mAwrypGYRlqO2PKA=)
7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: jmaQJtuQ6vSq6YYc8AsEnJn997H4f/GRY+0oxDMtloE=)
8: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: uEpcGMfb+CGF0z9h3Ele0SfHW0qliwyiiR2UENjBIPQ=)
9: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: 5xWWm5B7YxaTci+cj4GRnwpowZUui6TAGk8vPkARCxI=)
10: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: dVyRa6uQinj6rgpm/KJU/KE97sLzC0gECUdWL7tkdrs=)
11: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: RWYwT5yolPmZnCIMSVF9rkeuAXuXhvKasppBIkRvvpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193 (0x891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Feb 28 21:27:13 2026 GMT
Not After : Mar 7 21:27:13 2026 GMT
Subject: CN=69a35db1-0774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:36:0d:f3:ce:c6:5d:2c:81:dd:4a:d2:c0:
28:29:da:54:68:aa:1e:ec:2e:85:0b:b4:0b:8b:97:
d3:94:70:88:12:ec:fe:d1:b5:7a:bc:b4:5a:4b:fa:
fd:ed:6a:19:45:59:09:4d:20:8f:f6:64:64:f8:9e:
9d:3e:81:28:e5:2c:3b:f9:9f:4a:38:5a:dc:3c:e4:
4c:7f:b3:bf:d5:84:29:45:7f:94:97:25:d7:4b:a1:
d6:f7:51:57:44:ce:92:e9:27:32:ef:a3:18:0a:9c:
a4:37:d0:71:80:25:1d:32:d2:7e:d2:5c:07:4a:9c:
f3:d1:b2:c0:50:2e:dc:46:d2:4e:15:1a:79:66:95:
e6:95:b8:ff:95:92:95:ed:73:83:ac:9a:83:3e:39:
f3:93:f0:65:86:91:76:f1:a1:f9:38:c8:eb:1c:b2:
82:67:d2:a1:b5:dc:63:aa:17:48:09:18:ef:3d:4c:
e6:9e:8d:63:27:b9:7b:73:85:70:31:7c:eb:be:82:
3c:d6:7e:18:3c:9d:15:91:81:44:b9:95:67:91:e1:
76:78:b0:e1:31:e9:e4:77:62:93:ce:f0:76:23:9c:
41:1c:64:44:f5:40:b8:d3:77:5f:72:a3:8b:5b:2c:
fe:83:08:e9:92:5e:32:0a:c0:dd:91:2b:20:63:e9:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:96:40:C1:7C:AE:28:84:83:73:6B:72:A5:FA:83:7E:2E:EE:EA:D0
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:e2:a2:5f:5d:1c:89:5b:be:14:eb:12:63:58:90:63:80:80:
6b:2d:bc:55:c8:b2:9b:df:22:ec:f6:60:69:6d:de:22:7d:2b:
58:d1:31:bf:56:9f:1f:a4:14:f3:1d:0c:de:79:1f:54:4d:ba:
ae:93:73:8b:04:5f:9b:e3:ff:91:b3:00:95:4e:ee:87:c9:77:
53:8b:ed:7f:fb:cd:a7:65:81:14:1f:c4:1e:52:ef:87:2c:aa:
f7:51:3d:da:16:67:0d:d5:75:6e:5b:6b:97:90:3c:22:0e:51:
c1:0e:7a:4d:73:44:98:1a:a9:09:56:24:c5:93:46:62:02:6c:
a6:99:64:8a:a1:a0:3c:fa:f9:4c:f0:4b:63:99:52:b3:29:ee:
36:4d:2d:7d:9a:59:36:bf:d1:22:f1:fb:8e:ed:c9:10:e4:19:
f6:cb:60:47:d8:05:bb:94:f7:77:9b:ed:16:a2:0c:f1:56:d9:
27:f1:1e:fa:ee:fd:dd:6f:6e:56:aa:a4:8d:04:ff:6a:cf:3e:
71:52:74:46:53:d6:e9:0e:5f:8e:80:96:39:12:f9:6c:2c:1e:
be:09:d7:ed:30:42:46:21:bf:55:df:b1:e4:94:01:69:2f:79:
ee:f5:df:a6:f5:e2:39:c1:23:ab:b1:a9:09:7d:4a:4e:eb:76:
0d:10:38:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3
NDRBQUY0ODAwHhcNMjYwMjI4MjEyNzEzWhcNMjYwMzA3MjEyNzEzWjAYMRYwFAYD
VQQDDA02OWEzNWRiMS0wNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunE2DfPOxl0sgd1K0sAoKdpUaKoe7C6FC7QLi5fTlHCIEuz+0bV6vLRaS/r9
7WoZRVkJTSCP9mRk+J6dPoEo5Sw7+Z9KOFrcPORMf7O/1YQpRX+UlyXXS6HW91FX
RM6S6Scy76MYCpykN9BxgCUdMtJ+0lwHSpzz0bLAUC7cRtJOFRp5ZpXmlbj/lZKV
7XODrJqDPjnzk/BlhpF28aH5OMjrHLKCZ9KhtdxjqhdICRjvPUzmno1jJ7l7c4Vw
MXzrvoI81n4YPJ0VkYFEuZVnkeF2eLDhMenkd2KTzvB2I5xBHGRE9UC403dfcqOL
Wyz+gwjpkl4yCsDdkSsgY+l7swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqWQMF8
riiEg3NrcqX6g34u7urQMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx
Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv
ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc+KiX10ciVu+FOsSY1iQY4CAay28Vciym98i7PZgaW3eIn0rWNExv1afH6QU
8x0M3nkfVE26rpNziwRfm+P/kbMAlU7uh8l3U4vtf/vNp2WBFB/EHlLvhyyq91E9
2hZnDdV1bltrl5A8Ig5RwQ56TXNEmBqpCVYkxZNGYgJspplkiqGgPPr5TPBLY5lS
synuNk0tfZpZNr/RIvH7ju3JEOQZ9stgR9gFu5T3d5vtFqIM8VbZJ/Ee+u793W9u
VqqkjQT/as8+cVJ0RlPW6Q5fjoCWORL5bCwevgnX7TBCRiG/Vd+x5JQBaS957vXf
pvXiOcEjq7GpCX1KTut2DRA4tg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:24 2026 by rpki-client