
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
File: V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json)
Hash identifier: cZDCxVbxlFkbOriplcqxMm8HKR6iAy/Mebh+qECJzAA=
Subject key identifier: 96:DE:0E:C8:62:08:6D:56:FC:60:F9:90:81:31:15:8C:0D:2F:EE:20
Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
Manifest number: F3
Signing time: Mon 02 Mar 2026 01:14:53 +0000
Manifest this update: Mon 02 Mar 2026 01:14:52 +0000
Manifest next update: Mon 09 Mar 2026 01:14:52 +0000
Files and hashes: 1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: me0tzAnSZcBS3C4ysit6G6tSGaFuWpFQ+QuZYKJcqw4=)
2: 89FFAC1AF26B11F092350A59636F56BC.roa (hash: GktjzTnaS2jVEU4E0L4jhJZ+0kYhshKaQ+y+Uwli+hY=)
3: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: NUIndaatcaulOjWyNrpbRvmZbEsP5jvoX9Ee5iUIQ1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535
Validity
Not Before: Mar 2 01:14:52 2026 GMT
Not After : Mar 9 01:14:52 2026 GMT
Subject: CN=69a4e48d-4c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:a0:8e:1f:96:e1:83:6d:cf:9c:83:cf:ab:
fe:6e:aa:a7:3e:ae:6f:34:fc:66:45:8d:1f:3a:02:
fe:59:57:f9:7b:70:d0:bb:d2:c8:94:b6:d7:58:12:
ab:ff:3e:ae:80:35:fe:e2:e9:b7:a5:57:6c:e0:55:
c6:2f:65:7f:5c:0e:39:51:83:74:48:c8:ff:e4:c7:
c4:12:05:a1:3e:ad:32:f3:e9:06:79:bb:41:37:a1:
1b:3a:aa:33:15:e5:df:fe:59:e5:bf:eb:ce:39:a0:
43:72:c5:47:45:e7:1d:b9:98:8c:bb:2c:20:2f:cf:
cd:1d:3d:e8:6e:9f:b4:dd:54:2e:f9:6c:d7:46:82:
8e:8e:1f:2c:96:c1:4f:8e:37:bb:3d:c6:92:3f:cd:
dd:48:7d:30:96:e2:b5:5d:fb:38:b4:76:f1:be:4f:
90:b3:64:c6:b4:0d:8c:14:1c:2b:1e:dc:66:11:43:
2b:6b:51:c2:79:01:52:da:ad:3d:2d:26:a6:9d:52:
47:97:fb:e7:b8:f6:ba:3e:ad:82:8a:1d:cc:a2:07:
30:55:b9:fc:f9:97:5c:36:4e:36:c7:8e:27:e2:3c:
53:12:47:2f:ca:e1:74:1c:66:0a:bd:05:aa:bd:82:
c4:3f:c1:d7:ee:50:0f:19:0c:38:85:28:28:99:7b:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DE:0E:C8:62:08:6D:56:FC:60:F9:90:81:31:15:8C:0D:2F:EE:20
X509v3 Authority Key Identifier:
keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:2d:51:7a:df:1a:71:bf:70:4b:90:63:b1:f1:57:1c:91:bb:
ca:f6:40:bf:49:99:7d:5e:7c:fa:39:95:29:65:dc:2f:79:cd:
39:98:7d:84:96:7d:1e:d0:d6:1d:30:81:09:9d:b4:d7:07:15:
a4:98:ff:e5:24:0b:6f:ef:50:30:c5:34:4b:3c:3c:b1:80:91:
4f:1d:b7:ed:44:1b:71:84:7a:1f:66:fe:5b:b5:c2:e1:85:96:
20:de:7c:36:4f:02:54:e9:f6:54:c1:af:a0:28:69:d9:67:4a:
41:90:1b:b8:1b:fb:27:c4:ec:2f:6d:c4:aa:d6:c9:d4:14:99:
97:43:1b:1c:82:a4:63:62:ae:96:2a:09:14:01:e4:52:dd:fb:
67:39:5f:9e:c2:e3:60:61:27:e5:f8:2a:0a:5a:1b:c6:56:06:
cb:12:7c:ef:6e:f9:33:4e:16:1f:17:32:00:a1:97:09:02:bd:
48:d3:e7:d4:e6:5d:77:eb:21:5e:6a:a7:46:b5:31:75:e0:ae:
f2:08:88:94:27:5a:56:51:d1:15:4c:ee:2c:6e:ea:c1:83:8f:
68:4f:8f:99:1f:74:4e:1b:9f:32:8a:e1:cc:7c:2b:01:da:fb:
65:2a:1f:1e:a3:29:c3:09:92:bc:ff:22:2c:01:4d:7b:8a:6c:
2a:78:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:08 2026 by rpki-client