
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
File: 4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json)
Hash identifier: HKkdxAUOtG/6pRJ+nBApnAty/olfbL9ka6NuV38z4yc=
Subject key identifier: A6:B0:6E:6B:50:50:97:72:E4:FB:35:65:05:D4:D6:45:6D:B3:33:58
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial: 0963
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
Manifest number: 0952
Signing time: Mon 02 Mar 2026 01:10:23 +0000
Manifest this update: Mon 02 Mar 2026 01:10:20 +0000
Manifest next update: Mon 09 Mar 2026 01:10:20 +0000
Files and hashes: 1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: 81cOMeKQfiBFw+OcF7YT4txl7n1V9YPJ45MHBV3K63w=)
2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: KShq5BmuPEepsEU7x+JbRfGgfm8cmEzXAADusI8In3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Validity
Not Before: Mar 2 01:10:20 2026 GMT
Not After : Mar 9 01:10:20 2026 GMT
Subject: CN=69a4e37e-7e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:c4:02:3b:ec:1a:08:fe:bc:23:4d:3e:8e:
14:f7:7b:d5:4a:35:94:9e:28:38:04:b4:e7:80:9d:
2b:33:bb:3b:6d:41:ac:78:11:5a:7c:2c:8d:ce:07:
52:84:e5:1d:b4:ad:dd:36:34:40:fd:f5:e2:b2:ac:
68:a5:63:36:ee:00:7a:5a:bb:25:9a:26:a1:90:a8:
f8:07:dc:2b:52:a2:e6:ec:70:bf:89:f9:29:93:2c:
fc:8b:8e:a1:b0:d8:01:06:b6:35:dc:1c:17:76:e9:
61:11:42:42:06:e5:f4:50:af:01:89:27:f0:cd:4e:
f9:86:2c:d3:59:37:e7:b0:53:9d:6a:19:76:8f:23:
ec:c9:67:16:08:37:94:66:3e:a0:e4:54:05:30:16:
70:b6:e2:35:d1:21:6b:a5:cd:90:0f:78:e5:b9:12:
51:87:0a:14:3d:32:8c:59:65:8e:0b:60:19:c6:38:
32:18:d7:06:49:3a:00:c1:6e:86:3a:65:e5:3e:3c:
9b:ee:74:b8:23:38:50:43:f9:7b:83:c3:80:69:8f:
aa:5d:a2:d3:b9:f0:24:2f:fa:91:36:ca:cb:fd:7e:
25:3d:49:c8:b2:09:c6:6a:51:52:0f:74:30:fd:2e:
c9:94:ec:14:7c:d6:20:ac:0f:b3:cd:d1:4f:36:08:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B0:6E:6B:50:50:97:72:E4:FB:35:65:05:D4:D6:45:6D:B3:33:58
X509v3 Authority Key Identifier:
keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:53:e8:60:85:dc:cd:d8:24:7d:e1:17:30:a2:d3:f6:33:9f:
f3:7e:f0:0c:05:bb:f0:64:c1:19:5c:4b:11:cd:fd:33:43:29:
a4:99:6d:5b:bb:4d:31:5e:ff:95:af:e9:61:1c:b7:ac:e4:dd:
8c:94:f8:8c:6d:f0:25:0a:f9:54:3a:86:19:ba:5a:ea:c8:83:
3a:66:52:52:10:8c:96:df:76:6c:19:2c:3a:3a:78:ef:6c:97:
d8:c5:03:f5:13:3f:b5:79:aa:1f:ae:f3:f0:cc:35:5f:d6:cd:
df:0a:04:6b:dc:48:52:da:3e:9e:08:39:2c:e5:3b:2f:7f:b4:
ed:7a:f6:9a:78:f1:12:a8:f4:86:8f:58:cd:2c:67:ad:b8:48:
15:67:86:45:20:72:ba:36:05:a1:ef:c1:da:65:43:fa:48:55:
b4:e9:02:25:55:82:12:31:7c:1e:64:71:b5:e6:84:c1:83:2c:
b3:b7:58:d1:dc:57:49:92:6e:67:23:cd:30:6c:90:42:bf:68:
8b:a8:a1:d4:d3:af:a5:39:ce:bd:ed:74:84:fa:d7:1d:a4:9d:
7b:e9:57:d0:cd:9f:7d:c5:a6:68:a1:02:28:f8:4b:cb:ba:69:
c7:67:f4:c3:6b:76:8e:37:3f:8a:1b:a6:6c:b9:5f:80:5c:ed:
75:50:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:25 2026 by rpki-client