
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json)
Hash identifier: 1UsyGLaQ7BK6tF8fOhJ7HF15631LJ2aBUchVe1p/U5Q=
Subject key identifier: 40:B9:B4:65:50:3E:ED:7D:78:F9:16:44:D9:10:41:17:0B:18:C3:EE
Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Certificate serial: 0258
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
Manifest number: 0253
Signing time: Sun 01 Mar 2026 02:54:57 +0000
Manifest this update: Sun 01 Mar 2026 02:54:56 +0000
Manifest next update: Sun 08 Mar 2026 02:54:56 +0000
Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: r8Z5UQNlP1YP8/0Pk+9HMutidI9zgPZLAgR/PXvUs6c=)
2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: FG8mZ0xSMI661bwpz8jXY8dYE+DuRrKVmBGsSUwXpCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl
rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0077, serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566
Validity
Not Before: Mar 1 02:54:56 2026 GMT
Not After : Mar 8 02:54:56 2026 GMT
Subject: CN=69a3aa81-37b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:76:11:d3:48:b2:3a:6a:5e:9f:0e:2a:51:
dc:cc:45:c2:72:a9:d6:f6:a8:02:4f:ad:97:15:57:
e9:55:61:d5:d1:be:57:97:75:05:18:46:7a:54:65:
7b:66:de:8e:ce:49:ab:7f:45:28:d8:57:b1:8e:99:
25:24:fe:6f:1e:3d:8e:27:01:09:a6:66:c9:b6:23:
14:e8:79:21:30:db:cb:9f:f2:fe:71:04:f6:68:39:
72:64:78:52:e4:c4:d3:c5:fc:33:f3:50:af:06:c3:
5f:81:e7:ac:10:89:d5:ab:db:b7:6c:c5:00:a6:95:
b1:58:e5:95:51:e9:1e:2c:25:e7:25:e0:c1:f0:07:
75:ba:c5:4b:27:ed:99:7c:aa:de:27:c4:b9:33:ce:
83:8b:21:b2:94:16:48:c6:7b:12:5e:39:fb:b3:00:
1e:ac:9c:56:34:02:51:0f:4a:93:e8:1e:e8:1d:f0:
c3:4e:6f:4b:68:b2:ba:db:25:c7:0c:fb:39:18:41:
b5:54:d7:15:25:e8:cc:0a:e0:62:e3:8b:4b:39:39:
0c:d6:44:82:26:3c:78:41:84:86:06:da:2b:46:69:
89:75:4e:e1:1e:19:48:7e:6e:d7:5b:66:a2:c3:7d:
da:21:0a:3e:10:42:f7:47:75:43:db:2b:6d:85:c6:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:B4:65:50:3E:ED:7D:78:F9:16:44:D9:10:41:17:0B:18:C3:EE
X509v3 Authority Key Identifier:
keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cb:7b:6a:23:dc:be:b0:f4:4a:34:dd:d4:28:e9:70:cd:86:
eb:12:36:69:bc:bd:5d:22:2e:4e:5e:56:0a:3b:39:d6:c9:83:
9e:78:98:c4:a6:32:39:6b:9a:87:34:94:f9:62:a6:b4:61:ca:
7f:95:6b:4c:2f:74:e6:5a:f3:fe:12:c1:8f:a7:33:b3:da:d1:
a9:18:bb:ec:a7:13:0a:25:96:75:9a:8a:ac:7f:9e:0b:de:b9:
b3:72:9c:52:b8:34:52:94:08:39:88:a6:2b:26:42:8f:a7:59:
d2:63:67:50:38:f7:dd:c2:a9:06:36:84:3b:b3:ec:09:45:e6:
c0:bd:68:5c:ff:de:c8:de:0c:d2:f3:97:cf:04:c1:7e:09:85:
c2:f1:4a:92:b9:05:ca:a0:95:7c:bb:60:f7:bf:2b:05:4c:bb:
fa:2d:23:1f:15:57:c1:f4:dd:67:6a:f4:51:ae:48:d7:82:a2:
a2:4c:f1:da:fc:83:fa:99:72:c8:d6:7f:ad:53:c8:76:2d:45:
ff:f7:bf:88:87:41:18:a7:10:63:a6:ba:a1:25:46:1b:20:92:
07:5c:4a:db:83:dc:e6:91:cd:5a:84:3c:67:ed:5e:f3:9c:3c:
c1:57:c1:f4:75:9a:51:cb:43:c0:84:27:ea:10:53:0f:cc:f9:
4f:e4:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:48 2026 by rpki-client