
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
File: 4-j_B54D_aQzRoidk3ZblZ9uHVk.mft (raw, json)
Hash identifier: YKvP4tmWixWqsUOX8GiEtpt38q6gF9lpwAVMVSunsn0=
Subject key identifier: 54:25:76:B4:04:87:01:AC:BC:4A:2E:D7:1C:58:97:53:11:DC:85:EF
Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
Certificate issuer: /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
Manifest number: 0140
Signing time: Sun 01 Mar 2026 06:18:12 +0000
Manifest this update: Sun 01 Mar 2026 06:18:11 +0000
Manifest next update: Sun 08 Mar 2026 06:18:11 +0000
Files and hashes: 1: 4-j_B54D_aQzRoidk3ZblZ9uHVk.crl (hash: 0kLiPm9xMSth3tJ9p1EzUJ8NmDWxjvhxyF9WQoVVq80=)
2: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (hash: 1wzYMLFHk5w163izK/FwbdDLwMdZuNPTMa1yYNCw1jQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09B8, serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Validity
Not Before: Mar 1 06:18:11 2026 GMT
Not After : Mar 8 06:18:11 2026 GMT
Subject: CN=69a3da24-d3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:88:75:e4:f2:70:84:54:a0:57:f3:7e:a1:
4c:ff:ab:da:eb:f7:69:41:3e:f8:6b:6f:a3:f5:6c:
c3:c4:02:c5:22:af:84:b3:1f:37:9e:23:ec:39:3b:
f0:0e:ee:b6:21:29:6a:30:a0:53:08:95:ed:70:ee:
63:86:59:85:5b:cf:93:a2:84:47:15:c5:f3:6c:79:
fb:d7:46:d7:fb:5e:0f:a3:ed:42:f0:c2:a3:83:34:
24:92:14:b3:7d:11:e4:87:f0:eb:9b:9a:28:c4:41:
71:12:f5:f0:82:6c:c9:91:02:8b:7d:1e:02:5b:01:
5a:3c:b0:41:78:ef:e3:9d:66:9c:8b:a1:1f:45:cd:
c3:1a:ef:8c:04:09:b0:96:ad:0d:7c:14:5c:e2:51:
39:31:e8:68:e2:15:ad:f5:b6:c6:c2:a5:df:1e:df:
b9:50:91:7e:50:56:e2:30:d9:42:b4:7b:01:3d:7e:
d6:4d:fc:cc:46:46:8a:67:e6:3b:cb:27:90:be:8c:
16:37:30:4d:a4:6a:d4:93:67:e1:54:56:a0:74:f5:
0e:11:45:99:e0:96:8b:3c:08:e0:4b:d8:b0:11:98:
2b:9c:23:8d:a6:6f:0e:1b:3a:3c:3b:6b:16:b7:3b:
8d:90:92:a1:ee:7b:af:8d:90:fa:15:5e:8c:ce:be:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:25:76:B4:04:87:01:AC:BC:4A:2E:D7:1C:58:97:53:11:DC:85:EF
X509v3 Authority Key Identifier:
keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:eb:3e:a2:05:89:54:43:c8:9c:54:4f:e9:8b:c3:f5:eb:46:
65:88:3c:e4:00:d4:e4:1d:3c:15:91:8b:78:cb:0e:b1:dc:91:
8e:f9:49:da:29:5e:c5:2e:4c:fb:bd:90:95:a6:c9:4f:e2:16:
b9:7b:5b:8f:66:ea:a8:6b:24:60:8f:1e:f4:ef:a6:13:f2:f4:
1c:d0:8a:22:59:ab:56:6d:2f:b1:25:19:65:d0:2f:59:42:89:
7f:a1:26:60:a1:06:61:e1:58:c9:fc:3b:31:46:63:8c:b3:7e:
d5:9b:0f:f1:23:79:99:80:8e:c8:fc:39:96:cc:fe:95:28:9a:
e9:a8:78:b6:d5:d6:72:93:67:58:7b:8b:53:97:28:22:1c:9e:
19:ca:c1:88:b2:c5:ca:d9:4c:9e:54:cf:88:e1:f9:c2:d2:6d:
8f:53:9b:94:0d:87:33:ab:d0:f7:c3:32:64:a1:3f:8f:f4:a5:
fb:9b:51:d3:30:17:b5:90:f3:55:28:2e:94:14:bf:f2:60:a2:
a9:35:df:b6:94:0c:fb:a6:2f:ff:2d:61:d0:29:4e:03:7b:4f:
de:51:22:60:f8:0d:bf:94:c7:2c:c2:1c:6c:57:2e:ac:56:3a:
6d:d4:34:ff:f3:53:9a:e3:a2:59:c6:2a:88:1f:25:a7:2b:ec:
5f:d3:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:06 2026 by rpki-client