
$ rpki-client -vvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File: 4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier: UBTobS3QhBolfC/84UsIyJ3T1jKVssk8qM4GA2eZ2Rg=
Subject key identifier: E1:1E:25:FC:8F:BB:8E:EE:D0:76:C3:51:BB:52:59:17:13:DB:D5:53
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer: /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number: 46
Signing time: Wed 25 Mar 2026 07:35:25 +0000
Manifest this update: Wed 25 Mar 2026 07:35:24 +0000
Manifest next update: Wed 01 Apr 2026 07:35:24 +0000
Files and hashes: 1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: llkJMWxvGH5NG6+hIRCYA6G7TtUrEVTVpSn7G7aUlRg=)
2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Validity
Not Before: Mar 25 07:35:24 2026 GMT
Not After : Apr 1 07:35:24 2026 GMT
Subject: CN=69c3903d-3012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:75:86:9c:1b:3b:e1:7c:32:03:51:73:45:
56:40:ab:6c:30:5a:15:4d:9b:41:82:dc:2e:e1:2f:
3b:3d:bb:ee:fc:fc:8a:c0:a5:9d:07:41:83:38:62:
b7:f0:37:2f:a2:4f:b2:f4:45:cf:ba:9b:63:b5:45:
85:20:85:93:c9:58:ba:2e:22:19:19:6b:cb:33:a4:
54:23:af:b1:41:7e:cf:40:2e:a5:85:1c:34:e9:d3:
38:20:23:81:53:6c:24:ed:22:1f:6d:1d:23:41:ac:
45:50:ba:4b:48:14:e1:1e:12:c2:c5:44:54:7a:7d:
48:f1:3d:e6:f0:53:f3:28:91:e4:3b:bb:8c:1c:f1:
f0:a9:57:f8:fe:92:d4:6f:4f:9f:70:f8:f1:e4:c2:
fe:96:4b:4a:43:43:55:14:8d:0c:9e:1d:66:73:fe:
0c:d2:ca:90:9b:6a:18:b8:8d:4e:2c:67:3f:05:79:
34:06:fd:a6:3b:18:56:1f:33:2c:58:4f:4f:d8:50:
8c:13:f6:b5:2c:ef:d0:12:1e:64:3b:fa:5a:31:1b:
53:94:9c:59:90:d1:4e:d6:14:40:ec:88:7c:55:1a:
d9:9b:b1:c8:06:19:82:55:cb:98:2f:42:35:2f:ee:
38:0b:df:16:01:b1:53:64:4b:16:49:dd:26:0c:24:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1E:25:FC:8F:BB:8E:EE:D0:76:C3:51:BB:52:59:17:13:DB:D5:53
X509v3 Authority Key Identifier:
keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4f:e6:40:6e:fb:ee:db:e3:5f:86:0e:04:d5:30:e3:fc:67:
36:53:0e:9b:81:3f:cd:66:42:cd:0c:24:e4:8f:7c:a4:3b:ec:
72:3c:56:14:1f:62:c7:a1:0f:04:ea:ea:8c:cf:fb:ed:43:a7:
7f:21:cf:90:19:7d:a5:5b:39:cb:6d:76:e4:8d:02:6d:c3:af:
f3:30:21:df:31:5a:47:a7:46:51:34:38:23:84:e3:32:e7:78:
b4:dc:f3:55:83:f0:c7:94:b3:66:d8:67:15:97:d7:12:6a:2b:
a3:7a:33:52:04:75:e2:f7:39:fd:e8:2c:13:85:ec:70:69:a2:
d4:f8:19:fd:d7:d3:32:64:ad:ce:03:78:a8:30:72:12:fd:8e:
0b:4e:37:8a:5c:0b:4e:31:4b:ec:f3:48:d2:1e:fc:53:1a:67:
52:aa:7e:7f:cc:b0:ed:d4:8e:dc:04:54:06:d7:c9:e5:0d:08:
eb:d2:4d:4a:07:af:59:82:db:74:17:7b:e6:32:25:aa:49:0b:
91:32:b8:53:0a:04:99:0a:21:20:b9:53:e5:de:d0:4d:07:8d:
a9:2e:1d:07:ba:fe:9f:5e:2c:d4:f3:0f:f1:bb:16:16:94:32:
73:6c:7c:e5:c9:9a:21:c8:e3:8a:9f:9e:02:48:2b:81:84:2e:
0c:4b:b8:16
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
OThCMTExMC8GA1UEBRMoRTMyNjVGNDExRENCQjBGMTE3NDg1MjM4NkU4MTdGRTI3
OEQyRjkwRTAeFw0yNjAzMjUwNzM1MjRaFw0yNjA0MDEwNzM1MjRaMBgxFjAUBgNV
BAMTDTY5YzM5MDNkLTMwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvDHWGnBs74XwyA1FzRVZAq2wwWhVNm0GC3C7hLzs9u+78/IrApZ0HQYM4Yrfw
Ny+iT7L0Rc+6m2O1RYUghZPJWLouIhkZa8szpFQjr7FBfs9ALqWFHDTp0zggI4FT
bCTtIh9tHSNBrEVQuktIFOEeEsLFRFR6fUjxPebwU/MokeQ7u4wc8fCpV/j+ktRv
T59w+PHkwv6WS0pDQ1UUjQyeHWZz/gzSypCbahi4jU4sZz8FeTQG/aY7GFYfMyxY
T0/YUIwT9rUs79ASHmQ7+loxG1OUnFmQ0U7WFEDsiHxVGtmbscgGGYJVy5gvQjUv
7jgL3xYBsVNkSxZJ3SYMJBLZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4R4l/I+7
ju7QdsNRu1JZFxPb1VMwHwYDVR0jBBgwFoAU4yZfQR3LsPEXSFI4boF/4njS+Q4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5OEIxLzcyMDI3NkIwQzY2
NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BFWFNGSTRib0ZfNG5qUy1R
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNHlaZlFSM0xzUEVYU0ZJNGJvRl80bmpTLVE0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5
OEIxLzcyMDI3NkIwQzY2NTExRjA5QTkwM0UzN0M0RjlBRTAyLzR5WmZRUjNMc1BF
WFNGSTRib0ZfNG5qUy1RNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCkT+ZAbvvu2+Nfhg4E1TDj/Gc2Uw6bgT/NZkLNDCTkj3ykO+xyPFYUH2LHoQ8E
6uqMz/vtQ6d/Ic+QGX2lWznLbXbkjQJtw6/zMCHfMVpHp0ZRNDgjhOMy53i03PNV
g/DHlLNm2GcVl9cSaiujejNSBHXi9zn96CwThexwaaLU+Bn919MyZK3OA3ioMHIS
/Y4LTjeKXAtOMUvs80jSHvxTGmdSqn5/zLDt1I7cBFQG18nlDQjr0k1KB69Zgtt0
F3vmMiWqSQuRMrhTCgSZCiEguVPl3tBNB42pLh0Huv6fXizU8w/xuxYWlDJzbHzl
yZohyOOKn54CSCuBhC4MS7gW
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:12 2026 by rpki-client