
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier: ZAKeu0qNgJ3P2lV7tFFTNplssPJAdcxR5/PHNropal4=
Subject key identifier: CF:48:7D:AF:0A:19:89:5E:F8:6B:D5:3C:FD:71:FD:31:EE:2C:D1:E7
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 0558
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number: 054B
Signing time: Thu 16 Apr 2026 23:22:41 +0000
Manifest this update: Thu 16 Apr 2026 23:22:41 +0000
Manifest next update: Thu 23 Apr 2026 23:22:41 +0000
Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: BiKkmFzlYaOoVySLgwz7VxjIOUFPjHIUvUtjTuzyjng=)
2: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=)
3: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: Apr 16 23:22:41 2026 GMT
Not After : Apr 23 23:22:41 2026 GMT
Subject: CN=69e16f41-c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:e5:89:11:60:61:8e:b2:62:e7:8b:af:0c:
1c:31:b9:1b:08:41:90:c0:ea:8a:d8:49:03:62:32:
de:55:4f:20:95:80:67:a6:41:40:84:dc:49:10:0b:
6d:89:a9:2e:bd:07:4e:81:4f:a5:65:78:9b:09:73:
51:11:1f:2a:7c:a7:3f:e3:f8:e3:e1:b1:ed:db:0c:
0f:9c:d2:b4:ae:f7:f0:75:a5:0c:b9:43:1c:8c:37:
c8:9b:2c:08:f7:ac:4e:03:7b:3f:31:96:db:81:87:
fd:a9:5c:a2:6a:d6:78:82:3d:6f:51:15:11:93:f7:
1a:e3:ea:e9:d7:54:ec:d8:41:6d:05:fe:3d:06:01:
66:70:03:7a:76:9a:96:88:40:44:2f:f5:5c:ca:c4:
e8:55:7f:99:bf:4b:70:27:61:9b:33:32:e1:4f:69:
31:78:dd:6c:a3:71:e5:b5:f1:df:ab:b3:4a:15:d2:
28:a3:cd:f9:16:84:c2:6e:04:57:53:28:c8:20:2a:
d5:18:dc:d5:e0:29:f9:8b:1f:0b:a3:c1:88:56:2b:
ba:5b:45:45:f1:76:1f:33:5b:4b:84:c8:f7:dd:26:
68:9b:14:68:05:a4:d4:bd:44:8b:52:5e:03:1c:84:
4d:13:11:b4:d8:d1:25:9a:27:5c:a7:df:82:0f:17:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:48:7D:AF:0A:19:89:5E:F8:6B:D5:3C:FD:71:FD:31:EE:2C:D1:E7
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:69:d5:91:76:97:b8:29:36:53:5d:15:bd:18:a6:11:90:7e:
7b:84:66:ef:53:fb:a6:7c:82:bf:81:94:06:82:bc:ec:73:84:
83:2f:b0:06:61:f8:3a:c1:96:29:c5:95:d0:33:36:36:5b:f6:
c6:2a:db:c2:5e:9b:15:eb:89:2f:9f:13:b9:bd:ce:db:1b:45:
67:13:a6:e2:70:92:3e:69:7b:31:d7:22:64:d1:ff:1f:99:f1:
ab:c2:cc:25:bf:3f:0d:28:fd:98:3b:b8:4a:12:12:17:9e:99:
07:5e:74:87:64:e0:bd:d1:8a:a8:aa:46:32:fe:b3:60:b5:b9:
bb:8e:c4:09:7f:c7:f1:a8:51:46:c5:f7:9d:33:69:44:fb:29:
57:28:6a:e9:41:df:1d:f8:6d:88:ef:d2:30:88:74:93:13:90:
ec:3c:71:f9:1b:b4:14:db:3c:a1:dc:42:3f:d0:66:ba:00:de:
81:0a:5c:0c:bc:4f:eb:82:52:dc:88:99:93:40:c5:72:c5:b2:
a1:0e:96:92:a5:2c:50:dd:8e:fa:1d:4e:ba:36:16:2b:41:cd:
a4:db:b7:b8:fb:b0:13:14:22:9b:b8:7a:03:00:36:2c:e6:a2:
2c:54:81:e1:79:19:01:38:02:51:d3:63:21:1e:87:4a:75:2f:
ee:e0:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:01:22 2026 by rpki-client