
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
File: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft (raw, json)
Hash identifier: cgy4nZsHnvOY62khO+StEyezatkd8H8UVHQchTBXWBI=
Subject key identifier: 9B:98:38:58:12:C6:82:02:25:A3:55:A0:B1:0F:F5:A2:11:B1:3D:31
Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6
Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
Manifest number: 040F
Signing time: Wed 25 Mar 2026 00:04:27 +0000
Manifest this update: Wed 25 Mar 2026 00:04:26 +0000
Manifest next update: Wed 01 Apr 2026 00:04:26 +0000
Files and hashes: 1: 4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl (hash: opSW9xHzps7QhyqafTHTYMiMaEcwUDRNr7znSn/KIf8=)
2: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (hash: xV0Ej2ei7P3BzqT9DGunMw06az/Ps86Fi6yisNe6riM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl
rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6
Validity
Not Before: Mar 25 00:04:26 2026 GMT
Not After : Apr 1 00:04:26 2026 GMT
Subject: CN=69c3268b-5768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:d2:49:e4:11:32:e6:af:ed:47:68:37:3a:
c9:e4:53:22:ab:24:62:59:f6:1d:3d:2a:7f:cd:20:
b2:8d:4d:a8:11:25:e1:ef:4d:9c:1c:1d:27:8d:fe:
f5:7b:c4:6f:f9:09:37:0c:6d:5d:a3:3f:9f:19:20:
32:85:f5:eb:c7:0a:42:13:d3:cc:4a:50:65:44:bd:
a9:f1:17:9e:98:fb:0d:43:10:b8:3d:14:0a:40:14:
bc:36:ec:9b:04:58:ea:0b:aa:e8:ff:56:6d:ba:c7:
76:a1:28:54:50:d1:8a:83:1d:3e:1f:aa:de:b9:ba:
24:88:c9:e7:31:02:7f:67:61:ec:d5:de:7a:7c:ab:
52:89:c6:25:a3:82:25:de:aa:b2:b6:2f:ad:b8:10:
2f:06:95:ad:4b:cc:b0:b0:9b:d1:18:f7:74:3c:a1:
34:7c:20:76:42:a8:b1:06:3d:4a:a0:49:51:88:eb:
63:31:47:72:ee:74:2b:8d:c6:8f:7e:7b:55:1b:f3:
a1:af:30:ab:72:7b:9f:ab:87:8b:6d:e8:34:1b:f5:
d7:95:a1:6c:53:92:45:4c:72:5e:01:2e:88:2d:1d:
cf:ea:32:7a:d8:4b:6e:10:d2:ab:1b:b9:04:c7:23:
ee:92:2b:37:26:14:04:b0:de:3a:14:6b:2a:74:82:
88:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:38:58:12:C6:82:02:25:A3:55:A0:B1:0F:F5:A2:11:B1:3D:31
X509v3 Authority Key Identifier:
keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:39:98:10:c2:82:c7:20:30:5f:68:f6:fe:ea:83:9d:1e:54:
16:98:a8:62:16:34:f9:1b:72:ff:1f:8f:b7:20:01:af:c2:b8:
d4:88:d4:5c:63:ad:f3:34:f0:01:53:ba:92:11:6c:fa:28:c0:
f5:9a:4e:e0:a2:d5:92:03:66:e2:a4:83:eb:0e:97:b7:28:a2:
97:d7:b4:e5:b0:0f:22:5a:4c:fb:9f:bc:88:01:7d:3e:ce:cb:
81:29:64:ae:78:12:a8:03:4d:be:76:3d:5d:81:e3:07:74:62:
fc:72:8f:45:fb:7f:3b:96:bc:fa:54:1d:d4:13:a7:77:e9:27:
b3:e7:4d:4a:1a:64:89:3a:32:dd:57:6f:80:54:82:f8:1d:b0:
6b:71:f9:6f:bc:a5:58:4c:79:86:7e:ba:5c:7f:93:b8:44:85:
01:1f:4c:9c:4a:84:3a:22:e7:54:78:d6:8f:ba:e2:cd:be:4e:
b4:fd:cf:46:56:74:a7:3a:06:a1:bf:50:94:86:61:a6:51:4b:
6b:e9:84:06:d9:cc:c0:83:ea:cf:90:d4:52:f6:6c:d9:41:b9:
c9:ca:d5:dd:a6:90:bc:0e:c6:75:fc:a8:95:94:85:64:48:a5:
ca:2a:29:c7:1c:c1:6b:ef:6a:0c:f1:48:cd:1e:38:95:56:80:
ce:3f:ea:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz
MjE0QzI3RTYwHhcNMjYwMzI1MDAwNDI2WhcNMjYwNDAxMDAwNDI2WjAYMRYwFAYD
VQQDEw02OWMzMjY4Yi01NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqe3SSeQRMuav7UdoNzrJ5FMiqyRiWfYdPSp/zSCyjU2oESXh702cHB0njf71
e8Rv+Qk3DG1doz+fGSAyhfXrxwpCE9PMSlBlRL2p8ReemPsNQxC4PRQKQBS8Nuyb
BFjqC6ro/1Ztusd2oShUUNGKgx0+H6reubokiMnnMQJ/Z2Hs1d56fKtSicYlo4Il
3qqyti+tuBAvBpWtS8ywsJvRGPd0PKE0fCB2QqixBj1KoElRiOtjMUdy7nQrjcaP
fntVG/OhrzCrcnufq4eLbeg0G/XXlaFsU5JFTHJeAS6ILR3P6jJ62EtuENKrG7kE
xyPukis3JhQEsN46FGsqdIKI9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJuYOFgS
xoICJaNVoLEP9aIRsT0xMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB
NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUUxQy9GMDc0NzNBRUFBNjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRF
T2VLbzd4M0VCazB5Rk1KLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlDmYEMKCxyAwX2j2/uqDnR5UFpioYhY0+Rty/x+PtyABr8K41IjUXGOt8zTw
AVO6khFs+ijA9ZpO4KLVkgNm4qSD6w6Xtyiil9e05bAPIlpM+5+8iAF9Ps7LgSlk
rngSqANNvnY9XYHjB3Ri/HKPRft/O5a8+lQd1BOnd+kns+dNShpkiToy3VdvgFSC
+B2wa3H5b7ylWEx5hn66XH+TuESFAR9MnEqEOiLnVHjWj7rizb5OtP3PRlZ0pzoG
ob9QlIZhplFLa+mEBtnMwIPqz5DUUvZs2UG5ycrV3aaQvA7GdfyolZSFZEilyiop
xxzBa+9qDPFIzR44lVaAzj/qdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:42 2026 by rpki-client