
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier: h+DK0S+vSuLS8JOLvtmFhWyKLgDs/5qEzDpQlscKo48=
Subject key identifier: 81:EB:1F:38:C2:6E:5A:9D:35:95:BF:55:1B:FE:B8:D3:6C:06:12:4E
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer: /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial: 05AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number: 05AB
Signing time: Sun 10 May 2026 23:11:42 +0000
Manifest this update: Sun 10 May 2026 23:11:41 +0000
Manifest next update: Sun 17 May 2026 23:11:41 +0000
Files and hashes: 1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: 13DEhCsIWxG/iN848HwHsZAH1t593s49XvyeIyym3N4=)
2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: WdImnCcnZcMtzi9Kuo/0VUvS1a6vE4XzsB1x3n+OVA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 23:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1455 (0x5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Validity
Not Before: May 10 23:11:41 2026 GMT
Not After : May 17 23:11:41 2026 GMT
Subject: CN=6a0110ae-58ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:d2:40:9a:f8:9d:ac:85:f9:f7:2f:b7:b7:
a1:91:1b:44:b4:cb:1d:83:3a:37:ce:3e:bb:2e:81:
d7:ad:72:68:a5:0f:71:f6:12:bb:51:77:b7:19:71:
ba:d6:2f:d6:ce:5d:64:2b:f0:e8:46:dd:7e:60:55:
0f:78:34:0a:d7:05:97:9b:5f:81:5f:5d:96:46:46:
a3:17:d0:e2:8f:dd:5f:52:71:a9:59:b7:0d:d8:a3:
ad:2a:24:57:c9:47:08:c4:5b:45:3c:73:81:46:23:
fd:62:19:57:e4:c9:54:e8:c5:57:44:f3:0f:1e:7f:
29:ca:6d:5a:e8:88:c6:61:ba:d7:19:e6:97:74:ce:
f9:4b:ff:4f:fc:77:e0:07:53:ca:fe:f6:63:be:1f:
73:e4:49:95:c9:15:5d:96:32:0b:18:c0:fb:1d:9f:
f7:46:b1:fd:b9:dd:15:a1:bc:ba:57:07:cd:b8:6e:
04:04:ad:de:6f:60:3e:fe:27:df:8b:50:2d:6e:1b:
6e:a1:2f:f0:ab:32:f6:69:e0:a8:1b:05:3c:75:91:
98:24:8d:b3:1d:45:72:60:08:b2:92:cd:ee:51:40:
f5:9c:ad:d9:1e:74:b7:a9:a4:4c:76:9d:24:27:d1:
d3:a6:12:b0:a8:5c:40:70:78:ec:95:a0:ea:7b:e5:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EB:1F:38:C2:6E:5A:9D:35:95:BF:55:1B:FE:B8:D3:6C:06:12:4E
X509v3 Authority Key Identifier:
keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:3e:4c:47:00:50:f6:b3:08:bd:a2:92:a0:ad:db:e5:2e:
e1:55:b4:6a:d9:c1:f4:24:fc:8f:76:0a:9e:c1:94:25:86:41:
69:12:0e:14:b3:70:19:e7:a5:f6:0a:48:24:db:8b:75:54:38:
83:f7:33:16:42:7e:6c:56:23:41:9d:08:b7:db:0f:91:24:75:
70:fa:1c:67:d7:ae:27:78:2e:65:ea:1c:83:c1:c2:06:82:25:
9b:68:d0:b6:91:28:7b:e1:dc:aa:64:04:5e:65:87:38:77:42:
8c:ae:d6:d9:7e:0a:d3:0e:db:47:6e:4e:8e:37:18:85:19:75:
49:46:c7:cb:84:6c:b3:51:0a:a5:08:64:82:13:1e:9f:6c:6e:
3d:eb:86:a9:b1:2b:c5:36:1f:10:4e:9e:af:90:c0:b4:bb:66:
b7:08:84:e7:10:6c:bd:0b:1f:2d:8c:f9:74:b2:f1:e3:7d:b3:
02:98:c9:14:20:7f:df:0d:a8:3f:51:c7:39:a7:b6:5f:14:6c:
02:61:3c:99:5d:af:0c:64:c6:86:2a:74:a3:30:c5:0a:38:34:
d7:28:63:2f:bc:47:20:78:8d:0d:91:ef:d6:3d:56:f6:3a:d0:
5c:da:9b:35:ce:8b:dc:16:65:52:22:c2:c8:ed:01:62:9e:3c:
da:a4:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:27 2026 by rpki-client