
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier: hONBu4/NZOxMfu3ogPeUQCf5NT7kq7CwlitoQTeRDG0=
Subject key identifier: 20:15:74:A6:48:78:95:40:8E:CC:E2:FF:09:E1:6C:94:8B:9B:53:B0
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number: 0213
Signing time: Wed 25 Mar 2026 02:15:43 +0000
Manifest this update: Wed 25 Mar 2026 02:15:42 +0000
Manifest next update: Wed 01 Apr 2026 02:15:42 +0000
Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: 9ESdcE7uy8OA+KUlhysSK02Cvpa4yk8MdabJNYqO7M4=)
2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: AhGKgfXwB3QCEYVYk2JC1x2s8zC2sNYIPveCwndDaTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Validity
Not Before: Mar 25 02:15:42 2026 GMT
Not After : Apr 1 02:15:42 2026 GMT
Subject: CN=69c3454e-aa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:61:4f:08:14:bc:9f:d2:1f:61:8b:79:b1:
97:f0:70:69:5a:e6:0f:aa:dd:e7:ba:a4:bb:ec:8e:
8f:e9:d6:e6:81:81:e6:01:7d:c2:d7:29:85:b1:86:
51:f5:d5:86:13:0e:15:03:70:0f:b1:b6:12:04:c4:
e0:21:4e:ab:a1:05:f5:2d:7b:11:8f:5d:69:6a:45:
47:cb:30:5d:3a:c8:32:95:43:e9:d8:1e:db:0c:29:
a4:4a:b6:c4:89:7e:d2:eb:4e:15:82:08:f5:29:15:
e5:03:8d:64:12:92:a1:c8:5d:3a:1f:7c:9c:2d:41:
a1:01:f1:ac:2b:83:f3:ef:f9:c9:f4:ec:c6:96:6b:
b8:0e:24:e3:79:50:76:98:c8:56:4b:db:5b:a6:e3:
28:8a:ba:02:12:95:5d:99:7c:37:54:b7:42:60:cd:
fd:a3:03:18:b2:ed:f5:bf:e9:87:4c:87:f3:a3:83:
a9:d1:05:4b:ec:36:ff:1d:b8:2f:00:7a:fe:8d:6f:
f1:f5:92:a5:d6:9d:51:4e:35:e6:b8:71:72:c1:d6:
da:38:c1:d3:25:b6:ec:dd:06:24:a9:7b:44:73:88:
40:79:f5:16:80:bb:91:aa:6c:3f:b6:5f:ea:11:bf:
6c:62:fc:6e:6c:ca:3a:73:87:08:95:d0:c7:64:9f:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:15:74:A6:48:78:95:40:8E:CC:E2:FF:09:E1:6C:94:8B:9B:53:B0
X509v3 Authority Key Identifier:
keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5d:57:33:fe:06:79:e5:1d:3d:5f:cc:c8:73:99:5b:b3:a5:
84:2b:3e:bf:66:ba:a0:e0:a4:f9:fd:75:2b:4c:a6:f4:fe:46:
2b:ba:39:4a:d0:73:d7:97:20:bb:7e:cf:57:e5:98:67:bc:14:
e0:99:05:2e:2a:48:e0:27:78:dc:68:b1:6a:f9:11:da:0d:0f:
c2:b1:00:83:42:db:b1:25:d0:37:51:0f:71:0e:c1:bd:68:be:
35:0f:66:00:ef:43:41:2c:23:8e:e5:ff:0f:e9:d2:4b:8c:42:
32:1b:fa:41:74:3a:b1:ee:2a:8a:a4:fb:b5:90:67:46:8b:5d:
79:ab:41:59:9b:ac:3d:f7:ce:6f:e7:16:64:a3:80:52:37:ee:
d4:82:d6:bf:1e:a7:63:69:cc:25:86:bf:f1:9b:2b:a0:3e:5e:
42:93:48:0d:a1:1d:53:42:04:5a:44:1f:2d:09:52:48:7f:5b:
d4:1e:37:19:8b:18:13:41:2f:2b:b8:8d:67:44:e2:38:79:65:
dc:86:4e:b7:1d:5a:a1:79:56:bf:f8:84:a4:32:10:f6:70:7b:
ce:e2:e4:f9:a8:da:b4:e1:79:43:29:b2:12:55:89:f6:7e:9e:
b5:9d:73:0d:a3:2f:99:b0:5c:c6:4f:c4:6f:c1:b5:e2:54:f9:
8c:ad:da:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczQTkxMTAvBgNVBAUTKEUwQjQ0NThCOUFCRDMyMDM1MTczNTNFQzgwQkUzMTBD
MzY1NTREQUUwHhcNMjYwMzI1MDIxNTQyWhcNMjYwNDAxMDIxNTQyWjAYMRYwFAYD
VQQDEw02OWMzNDU0ZS1hYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGRhTwgUvJ/SH2GLebGX8HBpWuYPqt3nuqS77I6P6dbmgYHmAX3C1ymFsYZR
9dWGEw4VA3APsbYSBMTgIU6roQX1LXsRj11pakVHyzBdOsgylUPp2B7bDCmkSrbE
iX7S604Vggj1KRXlA41kEpKhyF06H3ycLUGhAfGsK4Pz7/nJ9OzGlmu4DiTjeVB2
mMhWS9tbpuMoiroCEpVdmXw3VLdCYM39owMYsu31v+mHTIfzo4Op0QVL7Db/Hbgv
AHr+jW/x9ZKl1p1RTjXmuHFywdbaOMHTJbbs3QYkqXtEc4hAefUWgLuRqmw/tl/q
Eb9sYvxubMo6c4cIldDHZJ/+pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAVdKZI
eJVAjszi/wnhbJSLm1OwMB8GA1UdIwQYMBaAFOC0RYuavTIDUXNT7IC+MQw2VU2u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNBOS9EOEVGMTNDMkZB
Q0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1nTlJjMVBzZ0w0eEREWlZU
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMUkZpNXE5TWdOUmMxUHNnTDR4RERaVlRhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNBOS9EOEVGMTNDMkZBQ0MxMUVEQjU1QUJFODdDNEY5QUUwMi80TFJGaTVxOU1n
TlJjMVBzZ0w0eEREWlZUYTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyl1XM/4GeeUdPV/MyHOZW7OlhCs+v2a6oOCk+f11K0ym9P5GK7o5StBz15cg
u37PV+WYZ7wU4JkFLipI4Cd43GixavkR2g0PwrEAg0LbsSXQN1EPcQ7BvWi+NQ9m
AO9DQSwjjuX/D+nSS4xCMhv6QXQ6se4qiqT7tZBnRotdeatBWZusPffOb+cWZKOA
Ujfu1ILWvx6nY2nMJYa/8ZsroD5eQpNIDaEdU0IEWkQfLQlSSH9b1B43GYsYE0Ev
K7iNZ0TiOHll3IZOtx1aoXlWv/iEpDIQ9nB7zuLk+ajatOF5QymyElWJ9n6etZ1z
DaMvmbBcxk/Eb8G14lT5jK3alg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:48 2026 by rpki-client