
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json)
Hash identifier: S+sh7E6gKPkOrxfbGtztgft0Ur5TNC1iRHHIzJeON9o=
Subject key identifier: 71:76:8F:DD:5C:6D:00:F4:FC:87:66:34:66:D6:17:99:E1:6F:61:95
Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
Manifest number: 01AD
Signing time: Sun 01 Mar 2026 04:46:56 +0000
Manifest this update: Sun 01 Mar 2026 04:46:55 +0000
Manifest next update: Sun 08 Mar 2026 04:46:55 +0000
Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: bFOf3xlpZKhubuYvCm+PIhjlxnNyUXw/9eZgBts+6tg=)
2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: cx4NJM0Y7SZj8EEEvHyi9w557IjmXY6kqlXUYi/Zo1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Validity
Not Before: Mar 1 04:46:55 2026 GMT
Not After : Mar 8 04:46:55 2026 GMT
Subject: CN=69a3c4c0-c7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:30:9d:5c:b3:41:a8:38:d7:33:52:d9:49:
f2:bb:fe:5e:55:3d:f1:1c:d1:7d:c5:45:d5:74:2a:
36:b4:d1:36:fe:8c:8b:36:5f:3f:69:43:92:04:04:
47:b5:24:08:79:8e:1c:b2:d2:51:36:8b:54:35:0a:
5b:15:fb:5e:44:35:b0:4a:d4:e5:fb:1c:29:80:a7:
74:80:df:8a:9b:a7:2b:f2:3e:b4:60:27:46:95:03:
9d:1c:9b:23:88:ea:14:f6:fd:b5:c4:fc:b2:6d:40:
72:40:fb:1b:56:02:f6:be:cf:9b:75:0f:bb:09:4d:
75:5d:c3:ab:c5:02:56:78:38:cf:2c:be:71:54:b7:
23:c7:ae:9b:d0:d0:a8:0a:38:17:00:67:8a:da:66:
c1:76:15:04:e3:11:b2:9e:67:0d:ca:95:60:30:77:
73:0f:0c:7c:84:7b:71:8c:52:35:88:2d:83:1e:e3:
a1:58:8a:f3:f5:e5:76:3c:de:b2:28:54:d5:ef:e6:
ed:ec:23:98:1c:63:02:96:8d:27:d7:e7:77:0f:8f:
cc:96:c8:0a:2a:dd:5c:f9:60:2f:5d:8d:f4:d9:bd:
0f:cf:92:60:57:3a:a2:44:9d:77:67:65:2b:69:98:
30:33:9c:7f:6a:6f:26:b0:b1:a3:6c:b1:1e:d8:47:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:76:8F:DD:5C:6D:00:F4:FC:87:66:34:66:D6:17:99:E1:6F:61:95
X509v3 Authority Key Identifier:
keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:64:3e:db:ce:7f:37:d2:5f:d9:22:fc:0b:84:a5:33:f5:6f:
10:a6:fe:11:c7:00:f6:49:0b:4a:8b:31:5e:e0:21:16:b0:0c:
0b:0f:bd:7f:7d:30:6f:3d:4e:e9:96:ba:b5:13:87:e0:df:a4:
bc:1b:e2:36:c5:45:34:db:d9:91:09:ac:55:49:af:35:9e:40:
1a:56:76:b2:31:37:6e:21:68:51:d5:ce:45:61:7a:d7:83:5a:
11:53:1f:17:4c:37:a5:31:de:92:98:78:1b:af:c2:2f:6f:df:
b3:b9:28:43:a2:ac:f7:ae:bf:df:a8:86:57:37:73:41:b9:d7:
aa:a8:92:7f:49:04:52:ad:bc:07:62:e4:81:85:fc:6f:53:96:
52:75:c8:82:1d:32:37:49:cf:6c:40:18:31:60:95:a9:aa:55:
02:8e:24:70:7b:c4:41:9a:94:bf:b0:12:97:b5:f0:1d:41:68:
49:3c:f6:3c:bc:76:e6:a2:9f:5f:a9:14:03:de:9a:e3:b0:6e:
89:74:32:53:61:76:4d:88:0f:f1:93:f7:3f:46:ed:3a:51:3b:
ec:1d:36:53:4c:d3:14:d8:6a:24:c3:f8:7b:b5:30:0d:85:10:
d7:6c:3c:33:44:03:73:77:7e:0b:33:3f:91:ef:90:76:a3:f7:
9d:73:e0:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux
RjYxQjQ5NEIwHhcNMjYwMzAxMDQ0NjU1WhcNMjYwMzA4MDQ0NjU1WjAYMRYwFAYD
VQQDDA02OWEzYzRjMC1jN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3wMwnVyzQag41zNS2Unyu/5eVT3xHNF9xUXVdCo2tNE2/oyLNl8/aUOSBARH
tSQIeY4cstJRNotUNQpbFfteRDWwStTl+xwpgKd0gN+Km6cr8j60YCdGlQOdHJsj
iOoU9v21xPyybUByQPsbVgL2vs+bdQ+7CU11XcOrxQJWeDjPLL5xVLcjx66b0NCo
CjgXAGeK2mbBdhUE4xGynmcNypVgMHdzDwx8hHtxjFI1iC2DHuOhWIrz9eV2PN6y
KFTV7+bt7COYHGMClo0n1+d3D4/MlsgKKt1c+WAvXY302b0Pz5JgVzqiRJ13Z2Ur
aZgwM5x/am8msLGjbLEe2Ef1HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHF2j91c
bQD0/IdmNGbWF5nhb2GVMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz
NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw
NjBOTlpXWm5fczRmWWJTVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhGQ+285/N9Jf2SL8C4SlM/VvEKb+EccA9kkLSosxXuAhFrAMCw+9f30wbz1O
6Za6tROH4N+kvBviNsVFNNvZkQmsVUmvNZ5AGlZ2sjE3biFoUdXORWF614NaEVMf
F0w3pTHekph4G6/CL2/fs7koQ6Ks966/36iGVzdzQbnXqqiSf0kEUq28B2LkgYX8
b1OWUnXIgh0yN0nPbEAYMWCVqapVAo4kcHvEQZqUv7ASl7XwHUFoSTz2PLx25qKf
X6kUA96a47BuiXQyU2F2TYgP8ZP3P0btOlE77B02U0zTFNhqJMP4e7UwDYUQ12w8
M0QDc3d+CzM/ke+QdqP3nXPgdQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:23 2026 by rpki-client