
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
File: 4ISfBUORggKxeEROX_IviZ-eMg4.mft (raw, json)
Hash identifier: KRYRJMpRVGyryFVhVKDRMply+qMwiirUdsIUZhWutjQ=
Subject key identifier: C9:C8:EB:55:A9:1F:EC:99:3B:36:ED:D4:BE:F3:B6:8F:AB:AE:E5:31
Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Certificate serial: 054C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
Manifest number: 0546
Signing time: Sun 01 Mar 2026 00:01:48 +0000
Manifest this update: Sun 01 Mar 2026 00:01:48 +0000
Manifest next update: Sun 08 Mar 2026 00:01:48 +0000
Files and hashes: 1: 4ISfBUORggKxeEROX_IviZ-eMg4.crl (hash: vrup63XldGE0C0BdbIvkrcpj7nMwehYmni4C+CiwLhs=)
2: 145F8B6434D211EEA9BD8F64C4F9AE02.roa (hash: LIC3UjwuX1L1kGuepSck3yzfK3nMMe4EkNAzNmI2D14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl
rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1356 (0x54c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DBA, serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Validity
Not Before: Mar 1 00:01:48 2026 GMT
Not After : Mar 8 00:01:48 2026 GMT
Subject: CN=69a381ec-7572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:48:ce:23:e8:73:92:18:64:dc:6f:02:84:
f5:92:62:f5:02:66:da:11:89:a7:d6:28:2f:13:6c:
78:89:c6:ab:20:ae:23:59:71:72:14:c7:28:8b:e2:
4e:21:83:dd:12:8e:35:4d:76:19:ba:18:2f:ef:d8:
d6:44:d1:db:10:1d:79:bf:7f:5e:e4:41:aa:6c:df:
c1:50:ba:24:ae:f0:b1:1c:c9:8c:59:30:76:9b:ee:
f7:e5:9c:af:52:2b:82:a1:3c:9e:67:36:e4:8f:89:
6a:c2:d0:96:ba:32:c5:9c:32:7d:7d:3b:14:bb:e1:
20:67:0e:99:a0:5a:15:4c:c4:e7:2b:e0:df:fd:f5:
c5:e4:3e:a3:7a:85:38:bc:36:45:d4:3a:a8:8d:af:
9a:e9:0b:4c:c1:9c:53:9b:22:5d:41:8e:5d:10:79:
65:8f:75:71:8a:2f:74:bb:17:64:e2:46:52:df:bf:
fb:84:5f:8d:e5:d5:75:4c:44:15:01:10:b9:b5:ad:
9b:7b:1e:9a:ea:dc:d3:3a:41:ef:ae:9f:37:2f:fe:
7e:fa:a5:1d:28:16:46:7a:04:44:c0:71:52:f1:f5:
ef:53:07:16:7b:60:6f:68:20:cc:a2:47:7c:ea:2c:
94:21:66:c4:9d:43:97:14:bd:c2:6f:fa:4f:80:9d:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:EB:55:A9:1F:EC:99:3B:36:ED:D4:BE:F3:B6:8F:AB:AE:E5:31
X509v3 Authority Key Identifier:
keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:ac:8b:8e:c9:14:47:16:35:f0:5c:23:c2:6a:3d:32:9a:ef:
a3:7f:05:be:c2:16:50:3c:5b:9c:86:49:35:74:fc:37:e9:99:
70:cc:1d:01:28:93:6b:9e:a5:10:08:c6:79:27:f5:d3:77:7b:
c3:ac:25:d2:e1:28:4d:ac:83:97:1f:4d:bd:00:44:92:a2:4c:
2b:3f:29:13:d7:0b:ac:41:12:80:63:7f:d3:93:74:b3:4c:9c:
bd:8d:7c:48:7c:ab:94:ae:ee:11:ed:06:6c:c3:35:e8:ca:44:
1d:d8:b8:a6:67:8f:19:3a:4f:e5:8d:3f:7a:37:8d:e5:9a:14:
da:77:a3:32:74:7c:a0:b5:ae:0f:bd:8f:49:a1:8b:71:0e:9c:
fd:b6:03:75:54:80:07:f1:44:8f:db:2c:28:fe:0d:d7:da:a9:
26:ad:37:52:9b:86:30:68:dd:a9:13:fe:33:44:01:7b:d2:f5:
2e:e8:2d:45:10:94:11:ee:53:16:81:5b:1a:18:18:d0:09:63:
9d:52:7a:85:9a:33:39:cb:28:39:99:4b:8c:fe:0c:02:bf:5f:
56:09:1d:83:fe:bf:61:03:5f:a6:88:be:69:c4:a9:1b:0b:98:
07:f8:37:48:78:b4:38:e4:3f:9e:c4:1e:1c:d9:8c:4e:6a:aa:
60:e4:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:57:06 2026 by rpki-client