
$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json)
Hash identifier: b+WeWmcWytAAG1LnnyGk8it8SGZY2AxvDqdFH2N0/og=
Subject key identifier: EF:51:A9:47:FA:9F:06:22:AE:5A:12:C0:54:8F:BA:15:0B:A7:5E:16
Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
Manifest number: 0132
Signing time: Wed 25 Mar 2026 04:43:43 +0000
Manifest this update: Wed 25 Mar 2026 04:43:43 +0000
Manifest next update: Wed 01 Apr 2026 04:43:43 +0000
Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: a1BEGgp/TJop69XtgaVTGUnb2iAn7K/oxoqOkupBgdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Validity
Not Before: Mar 25 04:43:43 2026 GMT
Not After : Apr 1 04:43:43 2026 GMT
Subject: CN=69c367ff-5ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:a5:2d:0c:d1:14:03:76:33:23:3a:89:e4:
71:da:44:15:84:3c:d6:f2:fb:8a:fe:c6:e9:6c:b6:
b1:df:af:95:35:99:65:62:15:2b:70:7b:24:ae:f0:
5b:1d:c8:82:c8:7c:07:cc:91:8a:33:9b:27:2d:74:
45:73:41:11:5e:82:84:84:c7:95:c1:d9:94:a9:7c:
9f:b3:3b:d3:a5:35:60:da:14:78:57:13:86:22:b9:
43:05:8d:28:fb:67:51:89:1f:ca:57:ad:11:49:5a:
e4:de:85:76:87:4a:0e:42:14:02:04:68:69:e6:ab:
ab:70:bf:d1:cf:f7:85:65:17:63:6d:8b:e1:d9:1c:
2f:c5:fa:34:96:a7:72:e0:ca:bb:9b:d8:a7:19:38:
2e:94:bc:7c:41:d9:a5:ec:91:d2:36:1f:e1:c4:c1:
4a:ea:ce:9d:e5:2d:47:5c:4a:55:96:4b:0f:ba:92:
ea:62:d6:a4:7f:30:05:60:11:d6:31:96:fc:a8:97:
67:52:9a:93:b1:66:60:8d:21:ac:96:af:74:07:c6:
a2:51:7a:4b:26:ee:58:eb:27:82:18:66:08:ac:0d:
f6:9f:82:0c:12:4b:5f:41:b9:9a:f8:7e:a6:4d:ab:
f8:8b:03:74:f5:75:05:7a:f1:03:92:0d:c7:0d:5f:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:A9:47:FA:9F:06:22:AE:5A:12:C0:54:8F:BA:15:0B:A7:5E:16
X509v3 Authority Key Identifier:
keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fe:f6:5d:87:1c:65:6c:16:a4:bf:4a:06:83:7c:cc:ae:ec:
9c:7a:8f:d2:dc:0b:50:09:05:d6:25:e7:31:8f:41:fa:e5:35:
53:d7:69:c0:29:df:50:39:8e:92:dc:d2:a4:31:93:c4:3f:24:
99:cf:d7:a1:19:8b:17:bc:59:be:38:7c:9c:27:a6:6f:5a:bc:
2d:8f:ee:7e:e3:a7:a0:0d:d3:06:46:fe:fc:7c:0a:c5:61:08:
56:3f:fd:52:a2:9f:e1:c8:50:28:39:22:1c:99:c6:8b:3a:6d:
c9:2b:27:e0:50:d2:d8:5f:8c:03:6e:b4:a0:f7:78:96:73:5b:
0e:9e:f6:18:7a:1e:61:f0:0e:cf:e9:e0:1c:d2:89:b6:c6:46:
c4:de:24:d5:ac:26:f7:ca:8a:42:7d:76:35:20:5f:d9:64:bb:
08:5b:c9:2c:76:6c:af:a0:7d:b6:0b:22:36:65:0a:aa:7e:3e:
2a:d6:52:32:ed:98:0d:4f:d1:44:8e:a9:e4:57:f2:ea:cf:43:
ee:14:ad:d0:d1:5f:f8:50:7e:0a:fa:81:9b:ca:38:9b:24:ae:
ce:8f:df:fa:63:1a:0a:0c:37:ab:4d:43:da:6c:f6:bf:a4:de:
d0:cf:4c:25:63:df:a2:c5:c4:30:7d:de:f7:b7:15:e8:04:9e:
de:05:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:27 2026 by rpki-client