
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier: k5l/zsyB5flJG8dDlkI1pEVVuiMwLoskXSGSYNat6uk=
Subject key identifier: 81:0C:6E:A9:1D:5E:54:C8:20:26:CE:F4:56:78:61:8C:CB:77:34:8B
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 27EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number: 278F
Signing time: Tue 24 Mar 2026 15:36:18 +0000
Manifest this update: Tue 24 Mar 2026 15:36:17 +0000
Manifest next update: Tue 31 Mar 2026 15:36:17 +0000
Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: euyVEdrGJf4J6P4GS/5DpF09PnHGgrSzoYYJti9qabc=)
2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: W4I7YPOuWVvwmHp1ZJLPAJvoqNMOXVHgJ7mR8552CZw=)
3: 79393030926D11F0B792FC45C4F9AE02.roa (hash: xTWQ2YY51Yjv1sC0QX+NsLpLvl8JaZ7NwJLpiNVnw2Q=)
4: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 8d/EsyvXZ0sZ4UIJJOhDUVw09qD8ry/nM19Udtp/aCs=)
5: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: m8LjRReURkNYQlFbq8Oxyk7Q/R4DlXQJo+P+UmQjlpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10222 (0x27ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Mar 24 15:36:17 2026 GMT
Not After : Mar 31 15:36:17 2026 GMT
Subject: CN=69c2af71-739d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:4e:92:9a:79:89:98:01:69:0d:e0:53:ec:
8c:cf:2f:e3:57:97:36:76:12:28:75:01:e5:69:7c:
19:be:92:62:26:55:4b:59:36:cb:5a:cc:75:c9:5b:
22:67:00:d9:87:57:85:0a:67:52:e9:ef:1d:c9:d2:
e7:51:7c:76:23:c4:44:6f:3d:5e:91:05:24:d3:a2:
5b:45:45:8f:45:f7:65:c0:df:47:4c:9f:4d:d1:39:
7b:66:97:d5:d2:f1:94:3f:89:7a:b9:97:22:5b:f2:
a5:3a:d2:1d:7d:72:7b:fd:b2:35:2e:c8:43:95:75:
2f:30:fa:25:d1:0b:e6:e5:86:1a:57:83:bd:ef:6f:
ed:8d:73:5e:63:00:18:93:65:df:d0:73:7e:b7:fe:
aa:77:d2:58:3c:58:60:2b:58:76:54:6d:d6:e4:f8:
6d:81:03:dc:e2:23:6e:2a:14:b5:8d:b4:79:23:35:
91:5d:c5:3b:48:85:07:9b:28:39:8d:15:c5:57:f6:
19:86:83:93:dc:00:84:2a:5f:cc:e9:d0:16:d2:26:
15:e4:84:b9:25:70:59:2c:a5:58:c6:78:1c:a9:8f:
3c:22:8b:c9:36:d4:44:57:3e:6f:9a:d1:46:bd:db:
b9:97:9d:78:58:97:3d:b2:58:f7:19:3a:74:d7:0e:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:6E:A9:1D:5E:54:C8:20:26:CE:F4:56:78:61:8C:CB:77:34:8B
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:cb:86:0a:42:6c:cb:e6:37:b8:cb:bd:74:39:49:6b:1b:0a:
0d:bd:8b:f9:ff:2e:1a:b6:05:c5:2a:8f:af:58:0f:87:11:a5:
04:8f:ed:09:10:55:79:ad:38:de:33:7b:32:b1:56:a6:2d:30:
14:5e:ab:ce:84:fd:00:5f:82:ed:42:f2:8d:27:96:e4:65:69:
35:43:bb:a8:fb:1e:e6:18:d5:25:26:ae:ca:1d:44:45:c2:69:
40:02:77:14:b6:a0:6c:35:9c:15:d2:b5:4c:d1:19:a3:b5:c0:
c7:94:61:6b:9b:0a:23:54:7b:8c:0a:d5:37:c5:02:48:e7:8a:
56:93:36:91:9c:76:1e:c6:f0:dd:b3:3a:4e:a1:d3:4e:aa:1b:
11:88:6e:d8:8b:cb:f3:c1:42:46:60:57:e8:13:4f:a5:54:55:
97:df:bb:11:8c:fc:1d:97:a0:b6:ac:2f:3a:b3:a1:b9:84:fd:
50:0d:e5:02:db:cd:00:7d:3f:ff:a4:17:5d:2b:29:7b:ae:34:
f7:6b:23:1b:b2:a9:43:3c:bf:fe:ce:82:6b:1b:2d:58:48:ec:
32:7b:5e:ab:ca:8b:89:fc:0c:c1:ad:c8:b9:3e:57:1b:92:e6:
98:9d:d6:a5:68:5c:c2:bd:9c:c4:1c:3e:cb:1f:fa:e9:15:eb:
8e:dc:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:35 2026 by rpki-client