
$ rpki-client -vvf rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
File: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft (raw, json)
Hash identifier: SjV4Q20tlg7J8bwiMJb3qELAxp242Ff7SwIwi3oH/9k=
Subject key identifier: F6:90:29:85:FB:EB:1D:D3:5C:AC:CF:92:88:77:59:BC:A6:48:1E:FD
Authority key identifier: E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
Certificate issuer: /CN=A91493FC/serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
Manifest number: 0250
Signing time: Wed 25 Mar 2026 01:42:54 +0000
Manifest this update: Wed 25 Mar 2026 01:42:54 +0000
Manifest next update: Wed 01 Apr 2026 01:42:54 +0000
Files and hashes: 1: 4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl (hash: 3FoHkWcW17JvfZrpatBEa9bRmF/W3o3hYW285BBnlMs=)
2: D076B1A49F2911ED937CF05AC4F9AE02.roa (hash: 0mStAYqkRJzWhbr9vtFnPK6aXqaBSA4ax3GBzsLy3eM=)
3: 38702E769AF611ED8D41985BC4F9AE02.roa (hash: mhkOh2zSHS1+l3qaaKFXDPoYKhGJyCSHTM8TY0dVm/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91493FC, serialNumber=E1C1C72B6793A903BA3DE031027519B43021756A
Validity
Not Before: Mar 25 01:42:54 2026 GMT
Not After : Apr 1 01:42:54 2026 GMT
Subject: CN=69c33d9e-58fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:2f:ef:ac:e7:72:cd:51:a5:0a:27:82:f8:
0f:8b:ea:01:ff:ba:2e:80:be:1d:c5:4b:4a:ab:ed:
d5:91:87:a4:f6:92:ce:7d:9d:bc:02:dc:3a:24:2d:
64:63:3a:36:4a:19:00:d8:de:4f:c6:23:76:fe:96:
64:c3:6e:6c:4b:8b:15:60:bf:bd:47:ad:12:36:14:
a3:48:50:c9:aa:a5:27:ac:04:c7:0c:28:9e:33:2c:
50:78:8f:17:b6:6c:08:6f:86:35:9a:d3:70:f5:ea:
fd:f3:c9:ee:63:bb:73:6b:f6:32:21:0b:a1:04:74:
76:dc:99:d2:22:a8:0e:64:f1:ea:79:47:49:e4:df:
40:65:db:fc:15:d6:c3:56:42:f0:00:5a:d7:0e:2c:
34:18:d6:ee:57:95:c7:76:c9:a2:d5:ff:54:b6:aa:
cc:11:b9:a0:52:c0:a8:10:64:a9:e1:82:30:28:f1:
c2:91:a3:db:b7:ca:6a:61:fb:9a:79:c7:9e:36:3e:
ad:6c:70:5e:62:00:19:38:fb:81:e6:2b:ea:e0:06:
d6:8d:4b:68:9c:38:85:bb:99:e4:8f:60:37:34:de:
fd:0c:5f:48:c5:44:04:93:ad:c8:c5:7b:c6:16:39:
c7:fb:78:de:31:ef:c4:df:4f:62:96:b5:92:1e:ce:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:29:85:FB:EB:1D:D3:5C:AC:CF:92:88:77:59:BC:A6:48:1E:FD
X509v3 Authority Key Identifier:
keyid:E1:C1:C7:2B:67:93:A9:03:BA:3D:E0:31:02:75:19:B4:30:21:75:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cHHK2eTqQO6PeAxAnUZtDAhdWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493FC/A96F4B789AF311ED901AE45AC4F9AE02/4cHHK2eTqQO6PeAxAnUZtDAhdWo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4d:1b:b4:e9:f4:cd:82:8a:65:bf:2f:28:8e:01:53:a9:8c:
c1:dd:cf:9a:d4:a9:49:c4:37:fb:2a:08:98:70:e8:6b:b7:f5:
78:57:dd:9d:e6:1f:5d:4d:c9:69:61:99:a3:cf:db:07:da:d2:
d4:bc:da:ae:2b:53:ae:c6:55:a9:91:67:b8:4a:6b:a5:7d:83:
14:b1:27:d8:89:6d:df:c5:e2:dc:1b:42:5d:4a:74:72:21:83:
2a:af:27:48:d7:1d:14:1c:9c:d8:30:f4:18:df:7a:9e:72:71:
3b:9a:91:ca:35:cf:37:fc:66:03:6c:05:a6:ee:c4:2b:98:ed:
ed:7c:70:be:ec:94:2a:9b:29:a4:3c:76:86:97:54:af:ae:84:
36:6d:97:fb:e2:74:36:1e:39:d6:49:69:a3:e6:5b:79:df:a2:
87:27:3f:08:ea:ca:bc:aa:75:37:10:fb:59:06:23:cd:41:d7:
73:4e:a6:f4:8f:7f:70:0f:82:1d:a5:00:39:0b:bf:7a:5c:c9:
a3:1e:5a:db:bb:05:02:79:9e:93:1c:bf:37:f3:97:e7:93:75:
92:4f:f9:44:4b:b9:a4:43:b0:50:bc:0c:bc:51:17:26:3a:db:
a0:ad:9d:a0:d2:37:8a:3a:4f:45:06:06:15:e7:9c:2f:60:0b:
d6:7c:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:22 2026 by rpki-client