
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json)
Hash identifier: n9gxpCfxAoLdz88hFrPTYKbByInfV+aZhrV53tqY1QI=
Subject key identifier: 6A:9F:A3:85:AE:0C:CE:A4:04:82:3F:5E:AE:7D:1E:A6:24:A6:52:91
Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27
Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
Certificate serial: 0690
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
Manifest number: 0686
Signing time: Thu 16 Apr 2026 22:25:10 +0000
Manifest this update: Thu 16 Apr 2026 22:25:10 +0000
Manifest next update: Thu 23 Apr 2026 22:25:10 +0000
Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: 2aLNlhkdBNWjZnTtQpLIcjb/RqKLgHRXi4pq4Z3+4bA=)
2: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: IyYyXX21JMsFvai4l/nAme3o48dFg96SndHkjGkApLo=)
3: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: yQsqpKMv8rgRbiaQKL3AGw4YslsRjw5DT4NwooJEjZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl
rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1680 (0x690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
Validity
Not Before: Apr 16 22:25:10 2026 GMT
Not After : Apr 23 22:25:10 2026 GMT
Subject: CN=69e161c6-f6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:c5:e8:c5:c3:45:75:ca:86:27:e8:91:ee:
8c:dc:df:62:15:ec:93:75:ee:e3:d0:c0:ab:22:cf:
eb:26:ca:d3:49:6a:83:61:af:f4:9c:0d:3b:b4:30:
81:4f:57:80:19:c4:7e:ca:f9:48:7e:e1:f2:97:5f:
1b:fd:ba:01:76:55:d8:5d:36:8b:fa:27:4e:23:16:
e3:17:77:e0:b2:3b:07:aa:bf:81:d0:d8:89:e7:32:
87:c3:7e:46:78:78:21:18:fd:10:24:54:2a:75:41:
11:18:23:06:93:cd:55:47:12:f3:f9:42:d6:38:b6:
3b:56:99:5d:0e:cc:f4:db:94:e4:10:73:fb:2d:d8:
85:c8:3a:f2:1d:62:23:60:f7:ea:20:5b:14:ab:93:
ac:08:2f:f0:a5:c1:c9:32:c3:b8:13:6f:db:f4:ca:
86:43:f4:57:45:8a:0b:e5:ae:b6:bd:69:76:29:25:
8d:0f:9c:fa:7e:17:25:ae:7e:16:79:2d:79:d0:6d:
88:0b:97:bc:19:ac:2b:92:64:16:23:d4:88:49:65:
60:bf:9a:9c:b5:7f:67:45:9c:24:3b:6d:2a:6d:b0:
a1:58:35:67:3b:29:4a:a9:00:fb:12:b2:31:3e:91:
60:7d:4b:0b:29:65:32:1a:3c:e0:bb:e6:36:3d:7b:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9F:A3:85:AE:0C:CE:A4:04:82:3F:5E:AE:7D:1E:A6:24:A6:52:91
X509v3 Authority Key Identifier:
keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:76:af:79:7a:26:d9:79:5a:e1:6c:cb:88:2b:d8:1b:2b:d9:
8b:b8:71:c1:49:d0:18:33:25:95:b8:a8:05:9b:7c:44:af:35:
b0:3c:91:8d:58:2d:be:9a:50:f3:14:a4:1a:eb:0b:59:5e:53:
cb:f0:7a:50:af:80:99:55:a8:31:67:18:5d:10:90:32:34:77:
b0:16:4f:0a:f8:7e:fb:c4:d6:d5:40:91:3b:96:da:a4:db:23:
eb:79:b4:f7:b3:c3:e1:43:d2:e3:b7:87:7d:5f:75:65:43:48:
94:32:6b:6b:bb:07:26:90:c8:07:16:44:33:08:e4:38:aa:51:
4a:9f:b1:5c:e0:c5:03:e6:f8:e4:81:a8:b6:36:16:11:c3:c0:
66:53:64:a1:ee:8f:30:c2:4a:21:98:cb:91:b3:91:69:ac:67:
6c:f6:05:c4:c3:85:18:e5:c7:1d:53:c4:70:b5:51:ce:ba:99:
a5:85:44:e3:41:5c:92:0e:3f:80:76:53:e4:da:ed:e4:3c:d7:
d5:ed:ed:ef:a0:67:39:61:aa:f3:dc:c5:9a:2e:a7:6b:1a:21:
42:0e:d3:ee:d4:e1:9a:94:ec:f0:7d:a2:10:7e:98:05:7e:e9:
a6:57:3d:35:c3:e5:a3:06:51:cc:bd:ff:6d:a1:2c:68:cd:97:
64:2b:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:44:33 2026 by rpki-client