
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
File: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft (raw, json)
Hash identifier: WyP21rYl2KXhD6mQBA3PUo2iKCUsQZJoDYkiQEHP5rE=
Subject key identifier: 98:72:E6:ED:F6:DC:69:C7:0A:B2:E0:D6:0C:96:75:58:0F:13:72:29
Authority key identifier: E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
Certificate issuer: /CN=A91273A9/serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
Manifest number: 022D
Signing time: Mon 11 May 2026 02:40:49 +0000
Manifest this update: Mon 11 May 2026 02:40:49 +0000
Manifest next update: Mon 18 May 2026 02:40:49 +0000
Files and hashes: 1: 4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl (hash: LejOqRB72MSf/SO9G7bx5ooMVI76cLMd+pfI+oTq+2I=)
2: 831C2D12FAD711EDBF5E232DC4F9AE02.roa (hash: 9ETu4UCRD2ZBbdrYTYmy+B4SALk6WyjDYk0Dd6dJYMc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273A9, serialNumber=E0B4458B9ABD3203517353EC80BE310C36554DAE
Validity
Not Before: May 11 02:40:49 2026 GMT
Not After : May 18 02:40:49 2026 GMT
Subject: CN=6a0141b1-9230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:1f:d1:c2:2e:6d:f7:0b:b4:48:04:bb:d5:
1c:7b:fc:21:f9:6a:d5:a5:0c:91:7e:38:61:f9:d8:
1d:23:b2:b4:a3:4d:1d:e8:a5:90:0b:d0:3d:78:89:
52:7e:d4:3e:6d:f7:3c:47:80:a7:7b:32:3e:6b:09:
ac:e4:08:2d:d7:7d:2d:05:e9:01:5c:01:27:84:67:
86:3d:fb:59:ee:09:48:fa:1c:37:47:c4:4c:18:a3:
98:a8:5a:f8:a6:67:f9:df:b6:31:f1:8f:6b:2a:ba:
7d:4d:76:93:f6:ed:9e:8b:b0:d8:f1:a4:13:4a:e2:
32:af:d0:b9:07:83:10:ef:89:c7:e3:c4:99:5b:b4:
cf:b3:8c:c2:7c:83:de:cb:88:1a:8b:99:b8:e7:06:
e5:c1:c0:57:ae:72:ae:07:ca:b3:85:91:39:a8:39:
1f:54:56:48:df:cd:3e:65:3f:34:96:b3:5d:97:f4:
5d:3a:08:f9:72:9e:11:b5:43:28:5c:5c:ab:fa:b1:
0b:c2:08:87:ca:79:4d:a2:55:cc:4e:40:41:6d:a9:
68:2a:e7:52:e2:ac:54:20:15:f1:c0:4d:ad:12:f6:
31:18:0a:a7:f0:cc:12:2d:31:56:e9:85:84:6b:c8:
0a:83:72:da:2c:48:c8:55:68:b3:ac:a6:74:5e:d1:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:72:E6:ED:F6:DC:69:C7:0A:B2:E0:D6:0C:96:75:58:0F:13:72:29
X509v3 Authority Key Identifier:
keyid:E0:B4:45:8B:9A:BD:32:03:51:73:53:EC:80:BE:31:0C:36:55:4D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4LRFi5q9MgNRc1PsgL4xDDZVTa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273A9/D8EF13C2FACC11EDB55ABE87C4F9AE02/4LRFi5q9MgNRc1PsgL4xDDZVTa4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:39:7d:3a:32:25:3b:ac:8e:6a:3f:ca:fa:78:48:b2:33:42:
fe:3e:dd:af:55:51:18:87:c0:ec:72:ed:c6:0c:15:cb:99:3f:
70:af:ef:ae:60:8d:8f:d0:5f:82:07:10:f6:08:7d:d7:02:85:
73:cc:b1:52:a3:06:5a:ea:59:d6:04:eb:42:3a:ad:2f:bb:12:
03:ef:5d:50:0c:01:84:a2:05:a7:fb:73:fa:7c:91:61:99:76:
81:89:6e:03:ed:ae:5c:90:5a:41:cf:af:7a:85:83:78:44:fd:
62:64:f4:7e:60:31:a6:0a:15:c0:41:12:40:21:9a:2d:81:78:
4c:1a:14:b5:94:1c:38:45:9a:42:97:1c:ef:34:69:98:a4:03:
c4:9f:11:d3:98:ba:29:9c:80:ed:6e:27:52:33:f1:1d:ac:8d:
80:50:b5:c0:a2:2d:e2:c3:ed:62:f9:f2:84:f6:4d:d7:e5:59:
73:d9:cf:b8:f6:51:8a:a9:4e:4d:a7:f5:5f:99:33:18:6b:7c:
df:fc:c8:c1:60:46:d8:52:fa:ba:41:12:97:d3:80:60:6d:1a:
9f:6f:9d:b3:00:0b:a8:43:09:60:20:ee:8e:3d:c6:91:2b:de:
54:b1:58:44:06:9f:a5:0f:f4:26:9d:e3:b0:82:36:f4:88:59:
e8:e3:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:36 2026 by rpki-client