
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
File: 4W5PZeLjl-n84FeFomXGGXyCIMk.mft (raw, json)
Hash identifier: 5FOT9i9CeDQ5WmUvH9zfjbD3vFCYlUfWW+fThhR8Mdg=
Subject key identifier: 6D:AB:05:70:01:DC:9F:33:CC:58:A9:F2:61:0A:D7:DB:86:D4:50:0D
Authority key identifier: E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
Certificate issuer: /CN=A916DED9/serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
Manifest number: 01BA
Signing time: Fri 27 Mar 2026 03:22:17 +0000
Manifest this update: Fri 27 Mar 2026 03:22:17 +0000
Manifest next update: Fri 03 Apr 2026 03:22:17 +0000
Files and hashes: 1: 4W5PZeLjl-n84FeFomXGGXyCIMk.crl (hash: QdV3Qy4xWraGeGWHGawEwMDms1cpsnbAVCB2MB5NvuM=)
2: 880E53BC852A11EE8B988A85C4F9AE02.roa (hash: k5DYksJixKDhcJPFopcX+J9k9P/tVTzxnGH1/taUbzM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DED9, serialNumber=E16E4F65E2E397E9FCE05785A265C6197C8220C9
Validity
Not Before: Mar 27 03:22:17 2026 GMT
Not After : Apr 3 03:22:17 2026 GMT
Subject: CN=69c5f7e9-50cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:89:bf:9d:90:20:df:b6:d3:c0:64:20:87:
19:1e:10:89:16:11:d6:5c:36:af:34:c8:b3:f2:30:
9c:88:69:0e:f1:cd:20:ee:da:17:fc:7f:4d:ef:ed:
2e:70:60:ab:d1:c1:d1:bb:c3:9d:94:c9:3a:ff:e7:
50:3f:ac:19:17:50:42:9a:ba:65:51:37:8d:19:b5:
fa:dc:84:bb:54:19:58:b8:c9:e0:de:25:a5:ff:c7:
be:f3:af:d4:51:4b:b1:40:95:7e:63:5c:47:c1:67:
47:99:1a:71:6e:17:c7:94:20:4b:d8:40:ff:50:6b:
3c:1c:46:1d:36:66:99:bb:b5:cf:41:c6:be:04:2e:
e4:37:43:3e:b9:51:7b:c1:b4:1c:aa:69:e9:8b:19:
0d:65:0c:ec:48:8c:ba:a3:58:21:74:8c:2c:39:e1:
74:d2:61:23:7f:90:13:bf:65:e6:00:82:f1:30:51:
64:8c:6f:a4:66:65:15:16:32:56:94:24:bd:59:9c:
e0:7d:43:af:41:71:6b:96:36:39:38:e0:b6:66:f2:
7b:ca:cf:38:97:8d:25:fe:8a:b5:2d:00:40:76:61:
c9:55:8c:0d:37:a4:c0:da:3e:71:05:c2:43:10:fb:
61:c3:2d:f6:fb:5d:3f:26:bb:72:e3:10:4f:f6:b8:
12:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AB:05:70:01:DC:9F:33:CC:58:A9:F2:61:0A:D7:DB:86:D4:50:0D
X509v3 Authority Key Identifier:
keyid:E1:6E:4F:65:E2:E3:97:E9:FC:E0:57:85:A2:65:C6:19:7C:82:20:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4W5PZeLjl-n84FeFomXGGXyCIMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DED9/DF15B3B8852911EEAFD04C84C4F9AE02/4W5PZeLjl-n84FeFomXGGXyCIMk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f1:fe:f6:48:8a:95:da:e1:b1:26:65:99:15:c0:2e:0a:97:
65:e1:38:e9:72:17:30:01:02:7c:77:8a:44:8f:cc:52:79:58:
cd:ba:5b:91:28:6f:81:ac:86:6d:67:15:8f:97:04:35:f5:74:
db:f1:a5:98:04:29:0e:e5:19:0e:b8:3b:84:70:50:67:ad:9e:
e9:16:30:4d:c6:11:52:f1:4c:87:b3:79:19:3b:97:79:16:86:
7b:9d:2a:15:e5:f7:0c:7a:55:d2:c2:a9:98:ab:17:4a:8b:4d:
d7:40:ef:c9:cf:5b:53:30:5a:63:f0:84:cc:59:82:7b:68:a0:
0b:05:3c:e8:54:30:76:90:06:61:5d:76:aa:a1:d4:cd:c3:bf:
2f:10:e1:d3:50:f3:fa:32:e7:d9:3e:c9:5c:4c:92:b1:46:98:
86:75:b8:4a:e9:00:3f:d8:11:d9:32:18:56:2c:b8:48:1f:ed:
72:42:93:d1:6d:3c:ac:d4:e8:a4:b9:40:b2:88:aa:15:7c:97:
96:89:35:44:6f:a4:ff:bd:62:34:87:17:d5:53:f5:62:1d:78:
f1:ad:46:b8:b8:8d:19:85:b3:dd:e4:17:fd:d3:5c:81:8a:3f:
bd:84:c3:50:d6:c0:55:08:49:07:15:a5:60:d2:f2:34:01:c9:
79:33:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:56 2026 by rpki-client