
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json)
Hash identifier: XCx/xFVahuijsgpjm38A2aGTIUDY2J5o5z1iR4qU9Ig=
Subject key identifier: 50:28:FD:C8:C9:B7:2A:9E:5B:55:1E:8C:F6:8B:27:F7:BD:A0:88:D8
Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
Manifest number: F0
Signing time: Sun 01 Mar 2026 23:31:54 +0000
Manifest this update: Sun 01 Mar 2026 23:31:54 +0000
Manifest next update: Sun 08 Mar 2026 23:31:54 +0000
Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: KAg4WcSmNRqrqfheQuCWT+4AUXWV6k2QQC95LNfCrSI=)
2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: qQ+iMBsnI6+Y33rIWpsuvyD5YPUXPAMZYZLTuJsOPi8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Validity
Not Before: Mar 1 23:31:54 2026 GMT
Not After : Mar 8 23:31:54 2026 GMT
Subject: CN=69a4cc6a-0fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:de:bd:26:3c:5d:c8:b6:62:e7:a4:e0:08:
19:99:22:b7:fb:5e:71:7f:3a:81:ba:07:68:08:2f:
2e:3e:6c:ea:9b:c0:d5:6e:eb:13:a8:e3:b2:40:94:
bc:89:78:34:ad:23:8e:f1:16:50:51:ed:98:de:21:
b4:82:d7:ad:7c:45:ec:81:f4:92:20:54:ec:ef:94:
07:e0:8e:a7:07:a3:36:f7:d7:62:57:c8:cd:52:a1:
eb:26:25:78:bf:9e:d3:dc:63:21:b7:e2:a3:d7:a8:
49:a5:4e:4e:e2:58:0f:e3:22:b1:40:cc:61:7b:36:
32:6f:62:a8:a5:dd:e2:ec:dd:bf:59:ae:7d:5d:41:
f0:0c:5b:aa:06:87:66:d2:1c:a3:6a:05:76:b4:d6:
5b:bc:f4:26:57:b8:0c:ac:df:c0:b2:51:6d:a6:c0:
54:41:4e:a3:bd:9e:18:18:50:15:70:b5:06:37:fa:
b6:54:67:c8:73:b0:45:b0:bb:5a:c4:72:37:2a:79:
93:85:1d:dd:e6:26:f7:39:94:70:e4:7a:f8:98:3b:
43:e4:8a:72:00:ea:6b:50:04:8f:04:6c:e4:cd:77:
68:09:cb:11:9e:0e:bc:a7:e0:9a:c9:9a:21:36:92:
26:7e:3e:66:43:f6:2f:71:42:de:b4:17:41:90:bf:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:FD:C8:C9:B7:2A:9E:5B:55:1E:8C:F6:8B:27:F7:BD:A0:88:D8
X509v3 Authority Key Identifier:
keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:74:c5:cb:dd:62:14:5e:0e:a7:eb:4f:fd:f6:f7:79:26:9e:
51:bc:a8:b5:d7:2c:f1:fd:02:91:30:e2:09:aa:2d:3e:ea:20:
72:52:81:5c:1f:32:ec:14:32:4f:19:b5:82:64:a2:43:b4:05:
5e:0d:fe:c7:f7:53:cd:cb:c6:f6:7e:79:84:da:8a:19:0b:6d:
15:4e:e2:74:ba:05:9b:1b:5c:53:ee:c2:f8:ad:a7:fc:c5:77:
4a:53:ca:7f:ca:f9:9d:2b:58:50:3b:01:da:49:09:42:a8:ee:
07:60:94:e8:39:dd:bc:b0:60:a6:ee:ae:1b:4a:f3:8a:26:58:
15:1f:53:bf:5b:7b:8f:67:91:ac:4d:e2:a3:ac:bd:7b:b8:4a:
d6:07:ce:bd:44:87:45:9e:87:3d:a7:23:b7:a0:02:2c:ac:4e:
b1:9f:f3:8a:c2:8a:66:45:ee:ff:4e:86:93:4c:d1:fe:de:7c:
0c:09:33:6b:e5:60:45:e1:20:81:31:41:e0:f8:15:36:81:61:
f9:35:d3:5f:7d:8f:77:d3:50:85:29:57:46:71:34:81:4f:f0:
ca:35:99:d8:68:89:86:ea:51:4d:7e:69:18:c6:ec:8d:4e:75:
23:b7:db:8e:a4:24:1b:e2:5d:91:d8:74:89:8a:91:5d:4c:e9:
b3:0f:46:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhBQzgxMTAvBgNVBAUTKEUyRTYzMDY2NzVENUY1NEQyMDdCNjc4MkE5NkM3QUE5
NjdCMUZDOTEwHhcNMjYwMzAxMjMzMTU0WhcNMjYwMzA4MjMzMTU0WjAYMRYwFAYD
VQQDEw02OWE0Y2M2YS0wZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7/evSY8Xci2Yuek4AgZmSK3+15xfzqBugdoCC8uPmzqm8DVbusTqOOyQJS8
iXg0rSOO8RZQUe2Y3iG0gtetfEXsgfSSIFTs75QH4I6nB6M299diV8jNUqHrJiV4
v57T3GMht+Kj16hJpU5O4lgP4yKxQMxhezYyb2Kopd3i7N2/Wa59XUHwDFuqBodm
0hyjagV2tNZbvPQmV7gMrN/AslFtpsBUQU6jvZ4YGFAVcLUGN/q2VGfIc7BFsLta
xHI3KnmThR3d5ib3OZRw5Hr4mDtD5IpyAOprUASPBGzkzXdoCcsRng68p+CayZoh
NpImfj5mQ/YvcULetBdBkL9m0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAo/cjJ
tyqeW1UejPaLJ/e9oIjYMB8GA1UdIwQYMBaAFOLmMGZ11fVNIHtngqlseqlnsfyR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FOUJFMDVEQ0Ix
M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlVMGdlMmVDcVd4NnFXZXhf
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9KRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEFDOC9FOUJFMDVEQ0IxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi80dVl3Wm5YVjlV
MGdlMmVDcVd4NnFXZXhfSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASnTFy91iFF4Op+tP/fb3eSaeUbyotdcs8f0CkTDiCaotPuogclKBXB8y7BQy
Txm1gmSiQ7QFXg3+x/dTzcvG9n55hNqKGQttFU7idLoFmxtcU+7C+K2n/MV3SlPK
f8r5nStYUDsB2kkJQqjuB2CU6DndvLBgpu6uG0rziiZYFR9Tv1t7j2eRrE3io6y9
e7hK1gfOvUSHRZ6HPacjt6ACLKxOsZ/zisKKZkXu/06Gk0zR/t58DAkza+VgReEg
gTFB4PgVNoFh+TXTX32Pd9NQhSlXRnE0gU/wyjWZ2GiJhupRTX5pGMbsjU51I7fb
jqQkG+Jdkdh0iYqRXUzpsw9GeA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:15 2026 by rpki-client