
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier: N0pXHeR+rLTBPpzBe8ALMdX2rWQ1KFc/AfbPp9CVKD0=
Subject key identifier: 9A:AD:77:3E:F1:74:73:16:6C:60:98:13:47:A0:4A:9A:66:D3:27:A3
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number: 027E
Signing time: Wed 13 May 2026 01:59:04 +0000
Manifest this update: Wed 13 May 2026 01:59:03 +0000
Manifest next update: Wed 20 May 2026 01:59:03 +0000
Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: jl/oLiLNbhcv5TqKuHTMs1xXDqsdcm0l9KM0HK7X6jQ=)
2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Validity
Not Before: May 13 01:59:03 2026 GMT
Not After : May 20 01:59:03 2026 GMT
Subject: CN=6a03dae7-5881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:c4:d5:00:29:5e:96:cf:e4:4c:fb:de:1d:
15:1b:ec:9e:cc:52:c6:37:cd:e6:9d:39:43:39:ef:
ff:4f:79:fd:52:c1:cc:e5:bd:e5:7d:2d:67:90:25:
a5:a6:0b:00:3d:d7:fa:70:db:59:6e:39:f6:92:74:
a5:20:f3:28:f9:39:e6:33:99:e5:2d:aa:13:b6:02:
8e:fe:27:29:a6:73:29:b0:53:02:b8:1d:0d:0d:4f:
ba:2c:94:f8:62:a8:d1:74:41:ec:9c:42:23:a3:b9:
d5:6a:d7:05:9f:ab:10:d3:3e:8c:d3:a0:6d:df:63:
ea:60:b8:5d:b2:03:d7:09:e4:16:88:00:19:7d:4b:
af:07:17:83:35:9f:fe:91:f2:06:16:90:cf:53:d7:
9f:fb:9d:22:34:73:64:ee:7f:a1:fa:46:1a:6d:f1:
2b:d5:43:a3:9d:da:16:4f:9b:3a:53:d8:62:3e:bb:
df:cd:6e:98:24:47:a1:af:7d:06:ee:e3:46:2d:56:
f2:7c:c6:a3:f8:1f:57:29:b3:f2:dc:2b:2c:9f:5a:
40:63:0e:ac:46:71:e9:bc:08:16:70:d3:4f:2b:d6:
cf:46:5d:c5:df:c4:7e:f2:48:2c:e0:f5:63:70:df:
65:eb:03:5c:d9:38:85:93:95:94:df:80:40:96:bd:
8d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:77:3E:F1:74:73:16:6C:60:98:13:47:A0:4A:9A:66:D3:27:A3
X509v3 Authority Key Identifier:
keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6e:e6:0b:99:c3:34:ef:ce:1b:44:35:17:d9:b4:ba:26:aa:
1e:bd:3d:7e:17:9e:b4:8d:db:53:37:c7:e7:fa:06:5d:68:2c:
e0:bb:a0:b6:83:bd:10:ff:b1:b8:1b:0d:ab:4c:7e:72:26:55:
50:0f:f4:9c:ec:b3:2d:f3:bc:ea:bc:d5:50:45:03:90:b5:94:
1e:4e:7a:5c:4f:19:70:21:9c:82:13:53:aa:c0:aa:7e:04:cc:
68:c8:0f:03:ea:e3:09:44:f9:c6:32:da:74:c9:37:b2:3a:29:
7e:cb:0e:3c:f3:43:42:f2:72:41:3f:77:c3:02:b1:76:ae:7a:
e8:97:77:88:95:f1:cc:5d:25:55:ce:55:ee:88:22:12:b2:bb:
ab:9a:21:8f:fc:f9:09:56:5d:34:7f:50:ef:e3:d4:4f:f7:5e:
7d:38:86:10:71:a1:7c:c9:00:be:65:5b:91:7b:4d:1b:cf:70:
b7:8c:61:d1:df:72:29:7b:06:ac:c3:7a:30:58:92:db:5f:3a:
c8:87:d4:e6:ca:58:75:0e:e3:88:d1:28:9d:2e:a9:81:a4:98:
f1:6d:86:be:ab:3b:be:60:d7:1f:04:f1:b4:cc:98:7e:67:d8:
62:f1:6b:93:3f:9a:e5:f6:4c:95:5e:12:b1:75:8e:58:28:d2:
8b:59:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:12 2026 by rpki-client