
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json)
Hash identifier: bYjyBYb1NGYv6KXJALIXrYkacJeCMfgrn8mxa1eqaeI=
Subject key identifier: 1B:B7:4B:E8:84:46:8D:40:DE:54:FD:E1:96:7A:91:10:02:D3:FB:2F
Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Certificate serial: 0BBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
Manifest number: 0BB4
Signing time: Thu 16 Apr 2026 18:55:10 +0000
Manifest this update: Thu 16 Apr 2026 18:55:09 +0000
Manifest next update: Thu 23 Apr 2026 18:55:09 +0000
Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: TjWPo2UsHrSGiZgHaQcW9qm8cyP1UlPoSgYJc3HqoAY=)
2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: K1S8Q65Z3w1SElyF5atmBbQ9pOqRtecrW95mrmJVLwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl
rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3006 (0xbbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Validity
Not Before: Apr 16 18:55:09 2026 GMT
Not After : Apr 23 18:55:09 2026 GMT
Subject: CN=69e1308e-fb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:2f:3b:dd:e4:9f:80:e0:c7:92:94:0c:4d:
f0:2a:7c:ee:1d:95:bc:eb:e9:d0:45:09:ef:da:37:
04:b6:9b:40:78:85:e7:73:2f:4b:4a:5f:53:5b:a0:
0b:71:7b:e0:d6:db:07:d4:2e:b4:80:ad:43:36:77:
66:a3:bc:a4:1c:50:97:2e:bd:e0:86:ae:26:f6:89:
ae:82:83:05:e9:24:62:26:bc:ca:fa:a2:8c:e7:d9:
dc:c2:70:0e:e7:f0:fc:0b:9e:7d:85:7c:17:be:0c:
0d:c9:1f:4f:1d:3a:6e:1e:52:1f:3d:04:e7:58:d7:
42:b3:88:72:6a:c0:d9:52:ba:74:2d:2d:70:81:cc:
0c:34:5c:c7:e6:ea:6d:93:4e:67:d4:60:de:36:41:
77:cb:96:30:d7:a5:68:2d:13:c4:e6:8a:09:1b:06:
f9:6e:29:94:bd:30:84:bb:ca:a3:b5:56:3d:5d:70:
60:c4:55:29:f7:27:07:ec:04:60:1d:3d:74:2a:27:
bf:ab:63:08:90:09:09:99:50:62:b6:cb:d4:b6:49:
55:3e:23:a3:a3:3b:46:55:2c:c5:09:b2:91:b5:cb:
36:e8:cd:ce:73:1c:7a:ab:71:2e:4b:2d:51:51:6e:
d1:e2:b4:ee:0c:7c:8a:cc:15:b7:41:b4:e4:f9:8e:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:4B:E8:84:46:8D:40:DE:54:FD:E1:96:7A:91:10:02:D3:FB:2F
X509v3 Authority Key Identifier:
keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:bc:29:e6:82:83:05:96:11:86:c1:53:fa:7d:ff:1f:ba:a6:
8a:1b:f2:1e:2a:90:d3:0c:05:86:d5:f8:c6:e0:63:13:7c:4d:
28:e8:d6:01:20:0c:d4:6b:18:62:0c:86:db:73:67:99:7f:c4:
3f:67:18:e6:f0:8a:2a:a2:05:37:4f:40:a2:05:2c:92:e6:8c:
a9:b5:1a:83:7e:d9:72:cc:96:68:04:de:9b:58:9b:12:d2:a3:
5a:9c:35:41:45:e3:f7:42:83:59:88:d6:11:75:93:40:5f:4c:
5d:ee:96:7e:2b:47:67:82:bc:81:07:41:3d:ee:94:7f:7e:5d:
ef:40:89:3a:a6:4e:0a:9e:ab:ba:0a:62:d7:3e:11:09:16:76:
89:dd:c1:8a:3d:e5:2e:9e:82:32:36:98:6c:47:af:86:64:5d:
17:b9:58:7c:53:3f:ce:b3:ed:e6:a8:6e:83:b7:99:25:45:75:
9f:fa:6c:33:0f:7e:e1:62:c4:e0:49:0c:a6:9e:60:50:11:39:
43:5d:e2:25:e3:07:f7:e7:7a:d7:93:23:7b:ed:b5:19:e9:ab:
1a:50:1a:56:69:ac:ed:91:5c:83:5d:93:4c:d4:4d:dd:4d:e7:
e3:16:cb:61:0c:a3:1f:e9:29:5a:2f:af:8c:9c:a5:4e:43:e4:
af:9a:29:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:06 2026 by rpki-client