
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier: B02TLzTTXdljvsVAMPYY8ff96TGU9Czj32vtYul9Cn4=
Subject key identifier: 27:7E:93:C5:75:7B:1F:47:E0:C0:AF:BC:9B:82:CD:67:04:13:55:30
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial: 026C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number: 0265
Signing time: Wed 25 Mar 2026 01:33:22 +0000
Manifest this update: Wed 25 Mar 2026 01:33:21 +0000
Manifest next update: Wed 01 Apr 2026 01:33:21 +0000
Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: ubpN6S8Hn1hNDquHiWgbj+HZTbdtC+IRxkPgeQDUnuU=)
2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Validity
Not Before: Mar 25 01:33:21 2026 GMT
Not After : Apr 1 01:33:21 2026 GMT
Subject: CN=69c33b62-ff74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:f3:bb:2f:3d:b4:5e:76:fb:0b:76:32:e8:
ad:43:e2:aa:af:67:76:e1:0d:a1:ec:37:10:96:8f:
ba:dd:69:a9:ff:8d:76:57:49:c8:5f:4b:9f:f1:47:
20:e7:b2:0c:70:07:e9:6f:e4:7e:d0:c7:54:77:ff:
98:9a:d6:6e:f5:42:46:a0:99:2b:00:ef:08:7a:b3:
77:6f:3d:21:91:93:e8:7d:44:97:8d:37:78:cf:10:
2a:ab:32:07:19:6f:01:e0:f2:cf:36:5e:b8:ca:ac:
bf:45:a9:de:27:62:1a:3c:10:5e:c9:ca:97:71:31:
bb:01:f1:5f:dd:bd:be:7b:db:81:e7:54:9e:09:60:
5c:f6:93:7d:81:44:fe:95:53:12:16:94:78:cf:8a:
76:a8:de:b1:22:82:dd:91:36:55:30:b0:bf:b6:46:
64:45:95:82:7b:00:b2:ed:d7:cc:f1:f7:be:58:af:
bf:7f:7c:4e:af:21:a0:77:78:44:60:71:87:be:69:
cb:da:41:29:a8:c3:dc:47:b1:31:82:2b:2f:56:23:
7b:8f:44:61:b8:ea:aa:a6:d4:7c:f2:e4:94:a7:f2:
96:27:65:b7:07:df:c5:b0:0c:4d:0f:07:68:02:65:
f1:1d:62:75:3c:bc:a5:a3:0c:a9:2f:7e:7f:82:8a:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7E:93:C5:75:7B:1F:47:E0:C0:AF:BC:9B:82:CD:67:04:13:55:30
X509v3 Authority Key Identifier:
keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:89:ed:36:ca:c3:4c:90:7b:37:22:e9:b5:c4:13:e8:c4:cf:
bc:02:1d:86:cc:d0:05:06:c2:17:aa:54:e1:82:9e:38:91:fb:
ef:a1:4b:7e:14:52:ed:c7:94:a9:cd:54:dc:9d:d8:dc:be:6f:
c7:44:c1:a3:28:98:f6:10:e0:ec:b2:87:60:d3:c6:fb:3a:17:
04:6d:e0:df:9b:3f:30:db:29:57:5f:e1:14:59:46:e3:2a:b1:
54:76:2a:75:56:20:a5:f0:b5:0f:17:c4:f9:b1:a3:7b:d4:df:
26:08:02:70:bb:4e:8f:7f:50:dc:59:e1:e9:da:c8:0a:24:b3:
f0:b7:7c:dc:1d:d0:bb:a2:8b:b6:53:61:90:d5:66:46:4e:a3:
99:6b:27:5f:c2:3c:16:74:41:25:f8:07:15:b7:59:37:12:f5:
77:32:e1:07:f0:4d:9c:10:fa:c0:c9:75:f0:09:2f:0d:73:ea:
97:21:70:82:bc:d7:03:90:d9:10:ef:3b:12:f8:ac:cf:b5:76:
1e:86:1a:b6:7b:63:23:77:b2:ae:3f:df:30:89:ea:a3:cf:fb:
2a:02:35:0b:c4:e1:a5:44:14:42:e0:ef:ee:90:00:43:e9:e3:
8f:b9:80:6c:97:f5:d2:e6:e1:76:a1:b6:89:b9:a7:6b:85:40:
70:7e:a6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:35 2026 by rpki-client