
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
File: 4XI0Y4kx9DllENfQutUfivTrhrY.mft (raw, json)
Hash identifier: jUm72wOd3i6kxoOjMSeoGBWk6e6TGG0PMXn4FBurFK8=
Subject key identifier: 33:5C:D9:C7:86:95:09:D8:C1:96:67:EA:0E:F6:2E:66:FB:80:CF:96
Authority key identifier: E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
Certificate issuer: /CN=A91F34FA/serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Certificate serial: 0273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
Manifest number: 0269
Signing time: Mon 02 Mar 2026 02:28:23 +0000
Manifest this update: Mon 02 Mar 2026 02:28:22 +0000
Manifest next update: Mon 09 Mar 2026 02:28:22 +0000
Files and hashes: 1: 4XI0Y4kx9DllENfQutUfivTrhrY.crl (hash: Qh4UzQmkR6UNxgHMMC8eEhtqXy0skqWoODQGBS9MzzU=)
2: 8256A692444A11EFB043DE36C4F9AE02.roa (hash: njRtUmWh28sEJdny2UAVhz1Kq7GPfTs7B6QSE7PmNLk=)
3: 81B847F4444A11EFB043DE36C4F9AE02.roa (hash: 5iqjCv1RhNYq1/L2yE4akZcT4DKvHpIvppn9eVWXMXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F34FA, serialNumber=E17234638931F4396510D7D0BAD51F8AF4EB86B6
Validity
Not Before: Mar 2 02:28:22 2026 GMT
Not After : Mar 9 02:28:22 2026 GMT
Subject: CN=69a4f5c7-1194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:1b:30:71:a5:10:e9:3f:c6:a0:9d:75:f3:
af:0d:d8:d2:1e:95:87:9c:57:c6:bf:b6:75:ba:86:
ab:30:9b:22:de:4c:22:71:a7:5a:e1:fa:09:15:90:
22:be:8f:dd:58:d1:aa:d2:b3:e1:31:9a:21:5f:9b:
e8:dd:65:84:1e:f0:d0:89:99:a9:43:67:d8:51:b5:
18:fc:6d:c5:bf:4c:8e:a9:22:f5:a8:36:08:3e:f2:
5e:68:65:d4:d8:60:17:ee:7c:e2:19:df:d9:3b:4d:
fa:1a:b3:da:7f:a4:18:c9:6f:ce:f4:ed:09:85:d5:
c7:55:b5:d6:eb:0f:d0:28:2c:45:d2:16:72:86:ba:
77:9d:a6:fd:76:9d:52:d5:9b:50:f2:bc:ac:f8:9b:
d3:b7:ac:dd:c0:36:a3:4b:23:10:97:8d:97:ea:fe:
5f:d4:fc:01:1c:b9:7d:4f:49:6f:0e:e3:cf:83:b4:
5a:db:5b:3c:f8:b5:5b:d4:0e:53:40:05:c5:e1:f3:
52:a9:d6:2a:9d:74:a5:f3:6d:9a:ce:e4:78:d5:bb:
a7:27:35:81:75:e3:4c:fa:90:16:58:6e:9b:82:5b:
88:95:b6:04:1f:08:29:48:de:c6:4f:26:01:fc:51:
e0:8e:7b:6b:8c:4e:3e:f7:a8:71:2b:5a:76:07:5d:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:D9:C7:86:95:09:D8:C1:96:67:EA:0E:F6:2E:66:FB:80:CF:96
X509v3 Authority Key Identifier:
keyid:E1:72:34:63:89:31:F4:39:65:10:D7:D0:BA:D5:1F:8A:F4:EB:86:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XI0Y4kx9DllENfQutUfivTrhrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34FA/45E9E16A658A11ED99A21B6FC4F9AE02/4XI0Y4kx9DllENfQutUfivTrhrY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:89:6b:b0:7d:0e:1c:37:94:ac:b0:8e:27:ea:af:65:55:ca:
9e:48:4b:b9:f3:63:f2:1f:a1:9b:05:2c:0f:eb:22:9e:86:2f:
72:38:6c:bb:d3:3e:c9:0d:d1:bd:81:a3:7c:4d:5c:e8:8a:db:
17:85:8e:3b:00:f9:2c:57:a3:f0:6e:68:6c:69:9a:f3:04:e3:
07:ac:ef:c6:86:7b:20:c5:79:54:da:44:4e:85:e5:3e:d2:17:
d2:43:b3:fa:a5:79:15:32:00:1a:58:da:98:c8:89:9c:54:62:
e9:39:f1:86:2a:c9:82:ce:7a:43:3b:95:67:e3:9d:ba:5f:42:
f6:5f:15:ba:70:8a:ef:c6:0d:d5:ff:aa:c4:53:fa:49:b8:fd:
0a:c7:bc:d8:6d:69:5b:65:0d:3f:5a:c5:91:79:7b:eb:82:31:
23:05:ee:f8:a2:1c:02:b0:0d:86:5c:9a:57:ed:4b:96:5f:af:
c5:b5:27:8e:d4:15:68:3a:ce:42:84:4b:25:be:04:97:56:35:
8e:30:88:f0:61:93:5d:16:fb:46:59:71:dd:db:69:2b:62:4b:
7d:8f:5e:5e:2b:6c:1f:9b:bf:c0:40:c7:7d:01:d4:19:7c:e3:
ea:7f:e1:a9:e2:bb:78:cb:3a:e3:c5:ef:71:e2:24:7e:72:84:
b3:70:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:50 2026 by rpki-client