
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json)
Hash identifier: sGwNm8UMWtTyu+ZU7vHhtdmNxQONyajUhJ3Big+HDaY=
Subject key identifier: AD:23:C1:BB:02:55:78:F5:EB:7C:51:BE:42:6F:C2:D8:49:12:E0:DA
Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
Manifest number: 8F
Signing time: Sun 01 Mar 2026 08:48:39 +0000
Manifest this update: Sun 01 Mar 2026 08:48:38 +0000
Manifest next update: Sun 08 Mar 2026 08:48:38 +0000
Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: k1d8CWNeJJIIY49CIgB2zJJjz+2q1f2cMy0JkrUBjro=)
2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: Z8V6aheDSz+e4X0EWGtNzfkbSxH9rxPxx8nCeAn8miQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6
Validity
Not Before: Mar 1 08:48:38 2026 GMT
Not After : Mar 8 08:48:38 2026 GMT
Subject: CN=69a3fd67-5d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:dd:39:e9:84:79:0a:5a:45:da:e2:b2:75:d5:
63:bf:85:64:65:b8:07:d2:3f:5b:ed:c1:fb:69:c7:
b1:ed:9d:f7:5c:8a:3e:b2:84:7e:9b:f7:ac:ac:2c:
eb:84:04:7d:86:bb:9a:4e:50:96:f9:ed:86:70:ee:
dd:97:49:5d:da:ba:cc:74:47:00:dd:ce:e0:57:2b:
49:0c:54:fd:e9:64:af:0e:15:3c:87:6e:33:b8:68:
76:d8:61:2a:5f:43:7b:b1:7e:0c:5a:66:43:cb:d3:
3f:13:9a:d3:5d:bd:5a:8f:dc:af:c5:bc:48:51:5d:
e6:b2:ca:59:f7:de:92:11:88:7d:a0:a9:ba:c7:23:
c1:69:7c:fc:74:3c:7f:19:fb:da:d8:38:07:bc:77:
1e:e1:4f:b9:49:0c:01:d6:20:66:d3:a8:d2:9f:ca:
00:bc:7a:20:de:c3:ea:b5:76:a6:75:bf:08:8f:d8:
21:d8:89:e0:4f:a7:8d:a9:e9:1c:f6:95:b7:65:5e:
dc:32:b7:e7:a6:23:59:df:f6:fb:c6:65:1e:bc:52:
e5:19:3f:72:7d:0e:7d:e9:5d:c0:bc:d3:f6:c7:8e:
79:b8:22:6f:37:e7:9b:7f:02:f1:77:ba:7c:28:5e:
79:14:78:5c:6a:7a:c3:b2:13:df:40:72:d0:ff:c7:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:C1:BB:02:55:78:F5:EB:7C:51:BE:42:6F:C2:D8:49:12:E0:DA
X509v3 Authority Key Identifier:
keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:cf:f3:6f:59:e9:92:fe:c3:07:7d:96:71:f1:1a:be:3c:
3f:9c:08:68:ab:7e:70:7a:ec:6c:2d:e8:36:ab:b8:96:27:ae:
98:74:31:a8:07:c9:92:ee:af:03:46:eb:dd:53:6b:21:f4:6d:
7d:10:37:cf:ab:87:10:95:26:9f:8a:3c:a6:af:a4:3b:e4:0f:
77:8f:b3:d4:6c:35:b9:ac:74:1c:fd:2d:0b:9c:b9:b7:de:99:
ec:1b:c2:fb:9b:8e:80:f2:be:d6:91:30:9c:bd:08:8b:a2:65:
22:81:0c:e1:a7:9e:71:1d:80:48:cc:91:cf:44:d8:41:29:16:
be:9d:45:21:36:7f:70:90:dd:17:b0:d4:c5:56:5f:50:a7:ef:
74:6a:02:35:91:7b:b8:23:d3:6d:c9:f3:c3:9d:e1:66:91:a3:
92:d6:69:fb:bc:58:01:08:77:58:27:1b:53:65:58:34:34:4b:
f3:c1:81:fc:f7:3a:1d:46:b9:55:c9:fd:5e:fb:65:2e:6a:e9:
a5:25:a6:a2:39:d8:f4:0f:5c:ea:f0:75:4d:b7:3b:25:d6:00:
58:df:09:93:18:37:4a:08:e1:38:a3:67:31:8b:55:d3:5e:d8:
25:57:79:fa:b1:b6:f5:6a:bf:3c:71:55:ce:24:d9:a7:71:45:
a7:24:36:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJBNEYxMTAvBgNVBAUTKEUwMzk4RDU0QUNEOURCMzNFRDRGQ0FBOEQyMjgwNUQ0
NUU4MENCQjYwHhcNMjYwMzAxMDg0ODM4WhcNMjYwMzA4MDg0ODM4WjAYMRYwFAYD
VQQDEw02OWEzZmQ2Ny01ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8d056YR5ClpF2uKyddVjv4VkZbgH0j9b7cH7acex7Z33XIo+soR+m/esrCzr
hAR9hruaTlCW+e2GcO7dl0ld2rrMdEcA3c7gVytJDFT96WSvDhU8h24zuGh22GEq
X0N7sX4MWmZDy9M/E5rTXb1aj9yvxbxIUV3msspZ996SEYh9oKm6xyPBaXz8dDx/
Gfva2DgHvHce4U+5SQwB1iBm06jSn8oAvHog3sPqtXamdb8Ij9gh2IngT6eNqekc
9pW3ZV7cMrfnpiNZ3/b7xmUevFLlGT9yfQ596V3AvNP2x455uCJvN+ebfwLxd7p8
KF55FHhcanrDshPfQHLQ/8fEGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0jwbsC
VXj163xRvkJvwthJEuDaMB8GA1UdIwQYMBaAFOA5jVSs2dsz7U/KqNIoBdRegMu2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE0Ri81ODdGMzVEQTNC
NzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6UHRUOHFvMGlnRjFGNkF5
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkE0Ri81ODdGMzVEQTNCNzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6
UHRUOHFvMGlnRjFGNkF5N1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZtzP829Z6ZL+wwd9lnHxGr48P5wIaKt+cHrsbC3oNqu4lieumHQxqAfJku6v
A0br3VNrIfRtfRA3z6uHEJUmn4o8pq+kO+QPd4+z1Gw1uax0HP0tC5y5t96Z7BvC
+5uOgPK+1pEwnL0Ii6JlIoEM4aeecR2ASMyRz0TYQSkWvp1FITZ/cJDdF7DUxVZf
UKfvdGoCNZF7uCPTbcnzw53hZpGjktZp+7xYAQh3WCcbU2VYNDRL88GB/Pc6HUa5
Vcn9XvtlLmrppSWmojnY9A9c6vB1Tbc7JdYAWN8Jkxg3SgjhOKNnMYtV017YJVd5
+rG29Wq/PHFVziTZp3FFpyQ2NA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:57 2026 by rpki-client