
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json)
Hash identifier: dZanqHwFFDL4dKksFHPwF8iNT9jRJEXZx9Aw20QnIag=
Subject key identifier: 50:D4:2C:E9:8D:D5:0E:1E:61:05:B0:99:99:D2:43:4D:51:3B:3A:AB
Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
Manifest number: 85
Signing time: Wed 25 Mar 2026 06:51:51 +0000
Manifest this update: Wed 25 Mar 2026 06:51:50 +0000
Manifest next update: Wed 01 Apr 2026 06:51:50 +0000
Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: wNx2suPl5dPZDII8M1YW1YXIuQNohMRg3N0t4a0tufU=)
2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6
Validity
Not Before: Mar 25 06:51:50 2026 GMT
Not After : Apr 1 06:51:50 2026 GMT
Subject: CN=69c38607-b4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:c1:cc:c2:c6:12:3c:aa:91:5f:66:73:27:
c9:2c:56:1a:d3:8b:ba:06:7a:c1:b3:09:57:01:5a:
16:71:c8:ac:e0:7c:5c:f8:b3:7e:6f:43:63:55:9d:
e1:bf:23:48:1b:4f:8e:ab:1a:63:05:b1:60:53:ff:
97:1f:0d:b0:05:e4:ea:fd:d7:06:1b:55:43:1c:48:
e1:50:0e:20:80:8d:06:18:99:d2:98:48:41:99:b3:
3e:05:d0:c4:1d:19:92:56:66:c1:46:a9:e0:95:ac:
a7:0f:6b:e1:1a:03:ab:40:cc:2c:9f:12:03:91:f3:
87:52:92:04:8c:fc:75:4c:ef:97:39:1d:d6:1f:9c:
cb:f1:d5:4f:a9:ad:ba:8d:df:03:5f:44:2b:f5:b0:
b8:b5:3d:57:75:9a:d1:bb:e3:3f:42:3f:03:47:ab:
a4:09:75:7b:41:ba:8e:7f:1d:69:ac:f9:97:17:a8:
c7:74:6c:97:89:47:a5:c4:48:56:58:3d:18:1b:32:
ed:38:62:6e:f2:96:2b:70:4f:0b:43:c3:9a:6b:e9:
37:0a:94:eb:d7:8f:27:e6:6d:56:e8:23:3b:71:2f:
08:d2:77:f8:37:4b:de:b7:30:81:d3:bf:2c:3e:9d:
48:58:2e:61:4f:3d:17:3d:ea:d8:20:33:ec:00:46:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D4:2C:E9:8D:D5:0E:1E:61:05:B0:99:99:D2:43:4D:51:3B:3A:AB
X509v3 Authority Key Identifier:
keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:3f:16:8c:9e:8f:0c:8f:a3:30:20:ee:9d:6b:13:9c:c3:66:
d0:e8:a1:ff:96:d7:12:c6:bb:0a:c5:5b:d4:1b:1a:9f:17:d3:
f7:0e:39:1e:43:66:51:70:3a:cc:c8:c7:6a:07:61:fc:62:88:
ff:f0:c6:d2:05:4a:76:65:72:f1:68:1a:3f:6e:2b:c7:54:96:
37:87:bf:72:72:f6:a5:ab:5b:22:d7:9e:4e:11:0b:48:15:fe:
76:4d:cd:ae:8c:46:e7:8b:a7:2a:52:0a:d7:83:e0:fe:35:3b:
95:ec:1a:26:f8:45:a2:a8:ef:ee:08:72:c2:47:62:a8:05:d9:
01:d7:44:0b:7f:46:30:6f:37:17:c0:50:ba:81:94:7b:70:08:
2a:2a:74:d9:7a:63:62:27:ac:59:17:5a:34:98:c3:55:91:e1:
0f:4d:3f:dc:e8:0e:a5:0c:56:20:5c:3f:89:53:95:ca:eb:35:
a3:4a:59:22:53:62:8d:02:7d:94:e1:0f:cd:8c:36:52:18:d4:
95:db:e1:15:76:93:a9:48:fa:eb:08:62:b6:e2:1d:6d:d0:00:
f6:02:79:ea:59:73:8a:e3:d2:53:e5:83:9b:f7:47:b4:c0:e9:
de:0b:f6:56:e7:26:9d:d1:79:13:76:e9:fb:a1:03:e8:78:3f:
5b:f0:ca:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUxREUxMTAvBgNVBAUTKDZCODI5NkE1ODE1NDMwMjc4RUMzMTFCNUU5Q0JFQjdG
RjBBOTBEQzYwHhcNMjYwMzI1MDY1MTUwWhcNMjYwNDAxMDY1MTUwWjAYMRYwFAYD
VQQDEw02OWMzODYwNy1iNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1iPBzMLGEjyqkV9mcyfJLFYa04u6BnrBswlXAVoWccis4Hxc+LN+b0NjVZ3h
vyNIG0+OqxpjBbFgU/+XHw2wBeTq/dcGG1VDHEjhUA4ggI0GGJnSmEhBmbM+BdDE
HRmSVmbBRqnglaynD2vhGgOrQMwsnxIDkfOHUpIEjPx1TO+XOR3WH5zL8dVPqa26
jd8DX0Qr9bC4tT1XdZrRu+M/Qj8DR6ukCXV7QbqOfx1prPmXF6jHdGyXiUelxEhW
WD0YGzLtOGJu8pYrcE8LQ8Oaa+k3CpTr148n5m1W6CM7cS8I0nf4N0vetzCB078s
Pp1IWC5hTz0XPerYIDPsAEaT2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDULOmN
1Q4eYQWwmZnSQ01ROzqrMB8GA1UdIwQYMBaAFGuClqWBVDAnjsMRtenL63/wqQ3G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS84NzFGREEzNjYw
QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9hNEtXcFlGVU1DZU93eEcxNmN2cmZfQ3BE
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTFERS84NzFGREEzNjYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9hNEtXcFlGVU1D
ZU93eEcxNmN2cmZfQ3BEY1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABj8WjJ6PDI+jMCDunWsTnMNm0Oih/5bXEsa7CsVb1BsanxfT9w45HkNmUXA6
zMjHagdh/GKI//DG0gVKdmVy8WgaP24rx1SWN4e/cnL2patbIteeThELSBX+dk3N
roxG54unKlIK14Pg/jU7lewaJvhFoqjv7ghywkdiqAXZAddEC39GMG83F8BQuoGU
e3AIKip02XpjYiesWRdaNJjDVZHhD00/3OgOpQxWIFw/iVOVyus1o0pZIlNijQJ9
lOEPzYw2UhjUldvhFXaTqUj66whituIdbdAA9gJ56llziuPSU+WDm/dHtMDp3gv2
VucmndF5E3bp+6ED6Hg/W/DKwQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:34 2026 by rpki-client