
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json)
Hash identifier: 9SyqCvTSMJIQ5UowWfpTDRshfc3XqzRVvJX/+dq17Fs=
Subject key identifier: F1:01:DF:98:E9:A4:8D:CD:49:DE:FF:55:95:B0:F1:7D:CA:7B:AB:AF
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial: 0851
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
Manifest number: 083D
Signing time: Thu 16 Apr 2026 20:52:01 +0000
Manifest this update: Thu 16 Apr 2026 20:52:01 +0000
Manifest next update: Thu 23 Apr 2026 20:52:01 +0000
Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: OOYMfBu6+uO8o+6IfxTBQg1zh+4kao2qPKH96h2jhO0=)
2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: g7qg1j/BlXjx4IL6IJ73Vzos8b7yBkmpoG+vbhDXfpI=)
3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 2R/fqixLYXQj2CN0sqD6jpnwoixSqADSrbi58jnvIx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Validity
Not Before: Apr 16 20:52:01 2026 GMT
Not After : Apr 23 20:52:01 2026 GMT
Subject: CN=69e14bf1-a385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:d1:c2:9e:4c:67:75:fa:04:72:b9:b5:00:
c0:ca:88:80:a0:41:2b:3f:1b:e1:77:66:ed:9f:24:
7c:34:41:82:86:b3:87:b5:c2:6a:d3:63:72:60:e3:
90:3d:45:f9:7e:f3:1c:da:bb:93:b4:c4:6f:8c:f7:
29:2b:ae:54:7f:b0:7b:81:fe:11:1e:3c:17:50:4f:
13:db:36:a7:12:2c:c4:b2:6d:a3:4a:b7:8c:e3:c7:
45:5d:1e:07:bf:8e:59:31:49:95:54:24:05:01:0d:
86:a0:c5:a0:e3:5c:bd:0e:47:97:fb:ec:61:49:59:
5f:e6:3a:6d:e9:fe:ab:ad:c3:3c:df:10:f7:df:e1:
33:30:1f:9f:1e:bd:8b:33:e7:8a:5a:33:84:d4:0f:
1e:76:47:d4:de:b8:49:43:96:b5:31:0e:5d:92:ef:
a0:97:5b:71:fd:07:8e:e9:7e:68:ac:30:95:36:fb:
c2:89:45:14:95:5d:d0:f7:da:b8:72:20:4f:6a:1c:
21:e0:09:07:21:24:c3:a6:5e:a4:b4:db:d9:91:e6:
f7:5b:e0:26:d1:6d:ea:88:01:0d:08:34:8b:bb:75:
8e:a2:ad:72:2c:92:d9:d9:98:d1:7b:6f:a5:cf:08:
8a:f4:67:73:2d:66:9f:c2:9d:e1:06:14:64:c5:94:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:01:DF:98:E9:A4:8D:CD:49:DE:FF:55:95:B0:F1:7D:CA:7B:AB:AF
X509v3 Authority Key Identifier:
keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c8:ee:ae:7d:41:5e:dd:4f:9b:f7:71:8c:e3:cc:a4:e4:2d:
0b:46:f4:c3:0a:e7:ed:c6:61:56:28:61:38:2a:89:c6:c4:f6:
2b:73:a4:49:9e:17:73:3e:8a:c9:09:b8:28:eb:c0:3f:2a:10:
83:36:d6:2c:f6:6a:65:0c:39:5c:7f:0f:36:23:78:a4:c6:1e:
bd:1c:f5:50:b6:3e:3f:57:3c:24:68:39:08:7d:18:a0:e9:46:
16:5c:47:61:0d:52:d4:9a:f3:55:36:df:a7:a4:3f:7b:8e:a7:
8c:74:00:e3:b1:4c:3b:d1:83:96:fc:78:d7:9e:bf:28:94:f1:
86:ab:92:a6:31:c5:27:1c:46:1f:20:d5:ab:7f:fc:9f:df:18:
f3:5f:11:a9:a7:f8:89:77:8e:1e:4e:db:c5:4c:06:d5:2c:21:
55:fd:eb:1d:56:35:92:d1:ff:ad:1f:47:e4:ce:f3:5a:49:42:
a4:79:a4:a9:14:51:e1:9e:3a:f8:19:d5:30:1c:48:1f:60:6b:
25:b5:c3:73:df:0c:09:c7:32:5a:a9:e2:70:b6:3e:8a:5c:92:
70:bd:e8:c7:57:d4:00:47:c3:0b:e3:5c:e4:70:02:9c:88:30:
32:5e:c2:a0:14:aa:ee:a9:19:d5:af:b8:e1:6f:b4:24:0c:8c:
c1:09:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:22:01 2026 by rpki-client