
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json)
Hash identifier: RW1r9+W/COhouoIG0yoTTYGaQceoN3049TelB1CBgoU=
Subject key identifier: B6:C3:10:DB:69:5F:39:B8:33:0B:E8:EB:98:7A:6B:2D:48:63:5A:45
Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Certificate serial: 0329
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
Manifest number: 0322
Signing time: Fri 17 Apr 2026 01:01:57 +0000
Manifest this update: Fri 17 Apr 2026 01:01:56 +0000
Manifest next update: Fri 24 Apr 2026 01:01:56 +0000
Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: mAMB+/LTUclLpptsLXxUSLV/BbO6UGZ72YruJd3iRmA=)
2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: TRVZ/NM/BJRiha8eAPz94grzikRFW1KWfdpr0FjIAaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809 (0x329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B
Validity
Not Before: Apr 17 01:01:56 2026 GMT
Not After : Apr 24 01:01:56 2026 GMT
Subject: CN=69e18685-6232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:56:28:20:71:f1:77:e1:30:f4:56:fa:f2:
61:80:39:3d:79:63:5e:96:8e:69:da:4c:ce:6c:5f:
87:dc:5d:cb:8e:c5:9e:50:07:a3:51:c0:3d:55:88:
de:6d:2c:08:ea:3a:bc:67:13:c4:07:8f:fd:bf:2c:
49:ed:ae:9f:51:d0:3c:ef:aa:8d:e9:93:5a:9f:94:
e5:d3:36:20:b0:f2:00:47:ff:16:0a:07:16:6a:d3:
e8:aa:9b:de:de:4d:db:c4:e0:13:26:30:68:76:a7:
ad:08:c4:e2:2a:de:35:0f:33:0b:03:9b:84:ab:c2:
2d:ff:42:a3:63:56:7c:fd:8a:21:9a:ad:92:43:ec:
ea:e9:e3:58:7e:9b:41:f4:20:00:ce:28:fa:b5:e3:
7b:a2:52:9f:8c:93:2b:2a:6a:00:99:9c:f2:82:85:
b3:d8:d6:c0:78:f0:a6:26:89:e5:84:34:03:e4:82:
8f:d1:d7:12:1d:c1:93:1a:d4:9a:12:5a:d7:93:5a:
c8:e6:ba:ff:12:f5:d5:14:aa:a7:8b:dd:6d:e8:4d:
a1:ba:e0:f7:d0:2b:ca:13:92:87:f6:0c:59:a8:92:
cf:a0:14:ea:eb:c7:17:b8:0f:56:d2:7d:64:9c:9c:
11:d9:bd:86:18:95:97:70:25:ed:bd:48:e9:fd:b1:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C3:10:DB:69:5F:39:B8:33:0B:E8:EB:98:7A:6B:2D:48:63:5A:45
X509v3 Authority Key Identifier:
keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:6d:44:0e:45:fb:ee:e5:60:bd:3e:e0:97:f3:95:ea:a9:4b:
35:9e:ad:86:3f:7f:43:a9:f2:9f:3f:b4:60:af:96:58:f9:bf:
fb:4f:43:04:03:50:ce:af:fd:a2:c5:9c:d2:03:ec:ef:8e:f8:
df:5d:8b:53:8d:34:5a:56:93:d6:5c:9d:1e:13:82:c8:00:e9:
be:18:9d:f5:a6:67:f2:da:bf:e3:de:5e:bf:32:ae:45:53:45:
a6:0d:59:d2:87:22:05:f2:d0:3a:87:30:d0:f7:14:3e:f3:36:
04:d9:e2:d8:22:fe:f6:a1:8b:51:ff:ae:94:46:a9:37:4e:28:
27:48:98:d3:f8:f2:78:34:99:a2:db:10:ad:0a:33:c8:d4:0d:
3e:74:68:23:dc:38:d2:9d:21:55:50:61:2d:7f:af:38:14:d2:
11:57:c5:94:6e:84:32:5b:2e:4f:fb:eb:28:9e:77:54:f8:d8:
f6:c4:69:79:22:c8:f7:18:b1:f9:26:25:5a:11:f8:71:19:3e:
59:a1:45:dc:14:18:2d:f5:3a:92:91:22:06:b6:69:f2:cf:7f:
16:07:e9:56:40:c7:18:aa:4c:a7:9e:53:4e:4b:50:87:af:7a:
ce:bd:26:7f:22:98:56:c8:e1:44:eb:4c:a4:80:88:cb:5e:d1:
3d:82:cb:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF
Qzg2RjUyNEIwHhcNMjYwNDE3MDEwMTU2WhcNMjYwNDI0MDEwMTU2WjAYMRYwFAYD
VQQDEw02OWUxODY4NS02MjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7UVWKCBx8XfhMPRW+vJhgDk9eWNelo5p2kzObF+H3F3LjsWeUAejUcA9VYje
bSwI6jq8ZxPEB4/9vyxJ7a6fUdA876qN6ZNan5Tl0zYgsPIAR/8WCgcWatPoqpve
3k3bxOATJjBodqetCMTiKt41DzMLA5uEq8It/0KjY1Z8/Yohmq2SQ+zq6eNYfptB
9CAAzij6teN7olKfjJMrKmoAmZzygoWz2NbAePCmJonlhDQD5IKP0dcSHcGTGtSa
ElrXk1rI5rr/EvXVFKqni91t6E2huuD30CvKE5KH9gxZqJLPoBTq68cXuA9W0n1k
nJwR2b2GGJWXcCXtvUjp/bHADQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbDENtp
Xzm4Mwvo65h6ay1IY1pFMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD
QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi
SkktWHBsZmVfMkxzaHZVa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd21EDkX77uVgvT7gl/OV6qlLNZ6thj9/Q6nynz+0YK+WWPm/+09DBANQzq/9
osWc0gPs7474312LU400WlaT1lydHhOCyADpvhid9aZn8tq/495evzKuRVNFpg1Z
0ociBfLQOocw0PcUPvM2BNni2CL+9qGLUf+ulEapN04oJ0iY0/jyeDSZotsQrQoz
yNQNPnRoI9w40p0hVVBhLX+vOBTSEVfFlG6EMlsuT/vrKJ53VPjY9sRpeSLI9xix
+SYlWhH4cRk+WaFF3BQYLfU6kpEiBrZp8s9/FgfpVkDHGKpMp55TTktQh696zr0m
fyKYVsjhROtMpICIy17RPYLLdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:26 2026 by rpki-client