
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json)
Hash identifier: WbYLWw1Kh1sdbPJ9qrLcuFF1H7+sk3yu6xwf8CDzDsY=
Subject key identifier: 1C:A1:5F:39:27:5C:47:A2:31:BE:7F:25:DD:88:86:C3:68:4A:01:5C
Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Certificate serial: 0D80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
Manifest number: 0D73
Signing time: Sat 28 Feb 2026 18:07:36 +0000
Manifest this update: Sat 28 Feb 2026 18:07:36 +0000
Manifest next update: Sat 07 Mar 2026 18:07:36 +0000
Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: A6pMnQCQzPu46646kqYTW2lJcxxP3O0SpT8gX7VZDHg=)
2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 8PBc7rJDdj900RPfyfsyZOspVRuDEqIjR6MwkbVEKO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3456 (0xd80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Validity
Not Before: Feb 28 18:07:36 2026 GMT
Not After : Mar 7 18:07:36 2026 GMT
Subject: CN=69a32ee8-1f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:b3:22:5e:9d:6c:95:a8:0c:0e:85:11:02:
3f:14:3a:03:18:65:b0:80:75:12:52:c3:27:20:33:
4b:b6:2a:4f:39:5a:bc:cb:64:2f:e1:03:3f:e6:b1:
32:71:3e:0f:bb:a6:7b:34:1c:39:af:65:be:14:33:
7d:45:9f:8c:89:d0:29:ac:a1:2d:4d:0b:5d:ac:8b:
f4:8a:8c:9d:c3:2c:b3:eb:62:ff:e3:f6:cd:de:8a:
30:4f:d2:8a:27:44:04:80:7b:9c:9a:fb:08:55:2d:
a1:cb:0a:7e:77:64:5d:de:a1:57:05:00:b9:fd:e2:
95:06:7c:39:61:c0:41:5a:03:5f:fb:78:11:c3:38:
40:03:3f:ad:3a:ef:ef:f4:c0:62:6c:6d:4a:12:19:
a7:67:76:ff:f9:f1:8a:70:91:d3:9b:27:08:e9:56:
ee:22:76:3e:22:1a:fe:dc:8b:cd:b5:56:9d:d1:ca:
4b:ad:77:e4:4f:86:3b:e6:57:62:38:71:2d:99:48:
50:b7:e2:66:32:08:8d:af:e6:32:81:ee:32:29:30:
e4:81:54:f7:8a:e4:6f:a3:bc:1a:13:e0:b9:d4:9c:
7f:15:0e:c6:cd:34:6c:aa:6d:75:83:29:bd:fa:21:
bb:91:bb:43:11:f1:7f:94:f3:5d:b0:44:34:c6:bf:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A1:5F:39:27:5C:47:A2:31:BE:7F:25:DD:88:86:C3:68:4A:01:5C
X509v3 Authority Key Identifier:
keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:10:26:34:5b:b6:a0:f0:8a:b1:36:ae:32:b2:59:07:74:e2:
5c:e0:0d:67:b8:48:bd:1a:37:43:6b:f8:16:e6:fb:04:03:91:
51:58:ce:e0:9d:e8:07:b8:cc:66:8e:a2:28:23:f2:d2:6c:ef:
33:25:bc:5f:15:05:31:e0:61:5b:78:91:52:47:85:4d:ae:a4:
6b:29:c2:c3:a1:9f:c8:5c:64:b9:ce:b0:7e:f4:95:9f:51:07:
ee:45:99:fa:c1:e8:07:bc:dd:97:a0:3f:3d:a9:9e:3e:9c:83:
7e:00:78:0b:86:d0:89:b3:aa:e3:89:30:cf:d1:30:3f:81:5c:
5d:32:2a:3f:67:d4:f9:c9:00:b8:a1:14:72:d3:dd:74:34:42:
f4:a3:1f:3f:8f:f3:93:eb:b2:88:45:f2:cf:d0:a1:38:0f:ce:
d2:ec:82:c2:17:c2:28:21:a6:83:0b:98:0c:cf:72:6d:2c:32:
ea:33:f5:59:9c:c7:a9:c8:e3:08:ed:4a:fe:f2:33:06:1f:c7:
dd:39:94:41:17:fe:bf:a2:b8:33:7c:a8:b7:61:5a:b4:da:8e:
09:11:69:ea:b6:08:6c:c4:d7:bf:87:70:87:1b:01:1e:f2:a0:
63:b8:eb:3f:64:5f:ca:b9:3c:23:23:8a:72:38:53:7c:d0:ef:
a2:7e:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:33 2026 by rpki-client