
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json)
Hash identifier: JBPmDSlIRf+aVIbW4Bpwdnb98SU3JfGHZhZqeQpNivY=
Subject key identifier: 51:B4:47:7B:70:7F:11:2E:17:0F:33:5E:8C:B9:C7:24:EC:B6:64:DC
Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
Manifest number: A9
Signing time: Fri 17 Apr 2026 06:55:55 +0000
Manifest this update: Fri 17 Apr 2026 06:55:54 +0000
Manifest next update: Fri 24 Apr 2026 06:55:54 +0000
Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: tt1ekp5Ajbd7yCEBrfDYWEZxh3obMRnEtckT0e+Ay6w=)
2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: ff9Hb3p8NVhNbBeRoRPoSLLnHieGzUbHBlT6U/ikvfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Validity
Not Before: Apr 17 06:55:54 2026 GMT
Not After : Apr 24 06:55:54 2026 GMT
Subject: CN=69e1d97b-1a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:7f:c8:3b:38:13:1f:c0:38:ef:8f:ea:73:
47:4a:ea:96:65:ab:df:6e:8a:9e:63:c2:8a:9a:ef:
bc:f1:be:f2:c7:0d:ed:d7:51:1d:f8:de:5a:a3:02:
4e:cf:19:3f:a2:f6:51:b1:80:e8:f2:2e:cb:8f:97:
0a:0a:0a:44:79:d3:27:76:9b:65:a2:91:a1:00:38:
c6:86:74:71:39:b6:89:3b:d9:24:c2:1a:32:3b:5d:
a4:17:ac:15:ef:87:fe:a5:72:b3:0e:d2:36:55:f0:
09:6f:90:7a:b5:12:f3:95:67:5a:91:5e:d5:80:5f:
27:32:e6:1a:7a:f6:de:38:bb:89:b5:72:5d:20:f3:
be:21:24:0f:1f:cb:69:62:11:51:b4:ad:dc:de:d1:
bc:27:0f:68:5e:9c:9a:98:0d:f3:bb:a5:55:2e:5c:
82:14:c9:57:b8:8e:05:2b:34:d4:4f:f2:10:30:4b:
b9:2b:18:0f:b6:40:30:43:e3:69:48:50:b1:f0:ef:
3f:65:9a:e7:1c:6a:c1:81:94:39:9e:e2:ab:25:3c:
d9:34:75:ac:6e:16:10:ec:5b:d9:71:27:ef:0a:14:
c3:02:9c:30:e0:b7:32:03:48:3a:0b:b9:64:9a:df:
46:9c:96:ab:80:86:ad:28:f2:b8:26:3a:59:49:b1:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:47:7B:70:7F:11:2E:17:0F:33:5E:8C:B9:C7:24:EC:B6:64:DC
X509v3 Authority Key Identifier:
keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:56:1f:a9:b8:23:18:fe:a8:f5:21:53:fb:72:16:3d:47:
fe:67:fe:b5:df:f7:ea:7b:41:a6:0a:62:66:61:b7:a1:0c:60:
56:42:13:b6:28:f3:08:2c:15:a1:5f:4a:44:af:73:a2:b1:67:
56:d9:e8:8c:df:c1:46:45:b0:40:05:a4:7d:0e:ef:d5:24:ba:
e4:a9:c8:6c:d4:a3:c4:e0:c2:30:2b:2e:ad:19:c8:b2:91:5f:
5f:cd:d8:3c:af:c1:4c:98:2e:a1:ed:ee:f3:05:e2:bd:ce:15:
2b:4a:54:61:0b:cf:4c:31:63:cd:54:4a:19:6a:d9:f2:6f:c3:
f9:e9:10:cd:c9:f1:f5:e4:1f:3a:cb:7f:09:55:b0:67:bb:5f:
d3:ba:07:ee:4b:cc:05:2a:d0:58:a9:25:ef:10:e1:ee:25:ec:
73:2e:52:fb:0e:9f:af:0d:d8:73:84:ee:5e:4f:67:5d:ac:42:
b2:92:d9:7e:a0:41:e9:da:fb:5d:c6:06:99:a5:40:8c:97:8e:
2f:43:6c:a9:f5:e9:c9:a0:c6:f5:40:9b:03:18:6c:e6:49:13:
fa:19:45:66:4e:36:80:a3:51:38:1d:a1:18:7d:1e:7c:9c:4e:
14:9b:41:ac:6e:9d:e5:65:2c:60:aa:0c:e2:f1:4d:4e:96:b1:
e6:4a:08:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJBNEYxMTAvBgNVBAUTKEUwMzk4RDU0QUNEOURCMzNFRDRGQ0FBOEQyMjgwNUQ0
NUU4MENCQjYwHhcNMjYwNDE3MDY1NTU0WhcNMjYwNDI0MDY1NTU0WjAYMRYwFAYD
VQQDEw02OWUxZDk3Yi0xYTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx89/yDs4Ex/AOO+P6nNHSuqWZavfboqeY8KKmu+88b7yxw3t11Ed+N5aowJO
zxk/ovZRsYDo8i7Lj5cKCgpEedMndptlopGhADjGhnRxObaJO9kkwhoyO12kF6wV
74f+pXKzDtI2VfAJb5B6tRLzlWdakV7VgF8nMuYaevbeOLuJtXJdIPO+ISQPH8tp
YhFRtK3c3tG8Jw9oXpyamA3zu6VVLlyCFMlXuI4FKzTUT/IQMEu5KxgPtkAwQ+Np
SFCx8O8/ZZrnHGrBgZQ5nuKrJTzZNHWsbhYQ7FvZcSfvChTDApww4LcyA0g6C7lk
mt9GnJargIatKPK4JjpZSbGU0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFG0R3tw
fxEuFw8zXoy5xyTstmTcMB8GA1UdIwQYMBaAFOA5jVSs2dsz7U/KqNIoBdRegMu2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE0Ri81ODdGMzVEQTNC
NzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6UHRUOHFvMGlnRjFGNkF5
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkE0Ri81ODdGMzVEQTNCNzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6
UHRUOHFvMGlnRjFGNkF5N1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIRFWH6m4Ixj+qPUhU/tyFj1H/mf+td/36ntBpgpiZmG3oQxgVkITtijzCCwV
oV9KRK9zorFnVtnojN/BRkWwQAWkfQ7v1SS65KnIbNSjxODCMCsurRnIspFfX83Y
PK/BTJguoe3u8wXivc4VK0pUYQvPTDFjzVRKGWrZ8m/D+ekQzcnx9eQfOst/CVWw
Z7tf07oH7kvMBSrQWKkl7xDh7iXscy5S+w6frw3Yc4TuXk9nXaxCspLZfqBB6dr7
XcYGmaVAjJeOL0NsqfXpyaDG9UCbAxhs5kkT+hlFZk42gKNROB2hGH0efJxOFJtB
rG6d5WUsYKoM4vFNTpax5koIhw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:46 2026 by rpki-client