
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json)
Hash identifier: ZU5958wouiknugfyrGxYI+GdRfqUzbU1od5dXwqclpE=
Subject key identifier: FD:DF:CF:33:15:B2:87:80:A7:ED:B4:83:D9:FE:D5:60:C7:00:21:0E
Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05
Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
Manifest number: 011E
Signing time: Fri 17 Apr 2026 05:27:25 +0000
Manifest this update: Fri 17 Apr 2026 05:27:24 +0000
Manifest next update: Fri 24 Apr 2026 05:27:24 +0000
Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: zHREPsl7g41h6QZUc4G2T9jl4bUg0GFaDynvvSec02E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl
rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B87FC, serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705
Validity
Not Before: Apr 17 05:27:24 2026 GMT
Not After : Apr 24 05:27:24 2026 GMT
Subject: CN=69e1c4bc-ab9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:08:1c:36:82:bf:46:13:ed:15:e8:2e:c2:
ef:36:95:5d:93:98:0b:0c:0a:9a:da:94:8b:4a:2c:
29:6c:2b:95:d0:82:ba:34:61:5e:9e:02:6a:b7:28:
7d:d2:56:8f:80:98:3c:9d:f9:ee:e8:80:a0:54:2e:
71:50:cc:bf:dc:3d:36:55:46:2e:1b:26:a0:01:d1:
92:e9:e6:62:dc:da:d0:fd:96:2a:a1:76:be:66:82:
4d:a5:87:29:da:18:f0:11:38:e7:ab:f6:35:a3:46:
28:f0:ca:5a:9a:f4:7c:33:af:f1:c7:4c:de:69:34:
88:01:c2:f5:3a:eb:ff:7c:8a:df:5e:0b:d9:9b:73:
81:cd:a6:1b:89:f9:a7:2e:74:d4:0f:cb:2e:ed:a8:
d5:98:10:03:58:f0:31:5f:39:55:ae:16:8e:28:cd:
49:a2:e5:b4:72:92:37:4b:d9:dc:b4:56:a8:90:c6:
a7:cf:81:4d:3a:e7:e1:6a:ea:71:2b:e5:1c:cc:21:
c4:9a:1e:25:69:ba:47:7a:15:fb:1b:22:a5:4d:dd:
c1:5a:73:3c:08:f5:43:f3:13:08:e6:46:0f:64:34:
55:f6:1e:f1:ca:c0:a1:ff:53:29:d7:4b:7f:52:47:
42:ff:15:22:72:4b:f9:80:e7:fa:e7:52:1f:35:4f:
f6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DF:CF:33:15:B2:87:80:A7:ED:B4:83:D9:FE:D5:60:C7:00:21:0E
X509v3 Authority Key Identifier:
keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9a:64:b2:59:8e:1f:f9:49:56:72:f8:00:94:a5:d9:49:44:
97:43:99:5e:c2:a1:0b:c2:ce:d1:27:2f:b9:69:be:bd:b3:15:
fb:c3:8d:a1:4f:67:54:3d:1d:bb:b6:38:59:e1:3b:9b:f3:9b:
53:1b:e6:9a:34:4c:15:02:f2:0f:29:cc:56:d4:fe:d2:c8:37:
ca:a5:32:ba:e3:eb:6e:89:d4:51:d8:40:bd:58:25:33:0f:e5:
cc:86:a5:d7:08:dc:6c:7b:17:75:a2:93:74:56:b0:b7:0b:04:
fb:54:01:22:82:9e:20:69:d3:76:75:76:5f:47:fd:75:06:a5:
f7:c3:e4:bf:91:1e:da:1f:bb:f1:b6:5f:3b:97:9f:c8:d3:c8:
f4:a3:89:4c:36:dc:cf:b0:85:7d:69:a2:be:b1:c9:46:dc:23:
2a:c6:f6:02:0f:9d:59:69:f3:2d:77:cb:c2:fb:8f:f2:f4:61:
3c:4b:94:1b:04:98:f5:12:89:36:bf:5b:cf:d6:fa:c8:d7:d2:
a6:d4:27:b8:c4:f9:a4:19:66:fb:ee:5f:04:48:ef:23:3f:c1:
77:5e:46:bc:c1:21:8c:d5:af:03:b1:e7:f6:c3:9f:fc:74:14:
4c:8a:5f:52:d6:e3:77:1c:43:3a:67:b1:47:a6:39:9b:17:7d:
e9:01:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:21 2026 by rpki-client