
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
File: 4-j_B54D_aQzRoidk3ZblZ9uHVk.mft (raw, json)
Hash identifier: ZUuQKJMp1sNyEsX1W0qTgzlf8PbqC8qVA97BIHD7Q0Q=
Subject key identifier: BA:E8:84:E6:12:D2:76:02:B3:E3:82:01:C5:70:F7:DD:22:ED:88:48
Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
Certificate issuer: /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
Manifest number: 014E
Signing time: Wed 25 Mar 2026 04:22:27 +0000
Manifest this update: Wed 25 Mar 2026 04:22:27 +0000
Manifest next update: Wed 01 Apr 2026 04:22:27 +0000
Files and hashes: 1: 4-j_B54D_aQzRoidk3ZblZ9uHVk.crl (hash: c9p6Oqk/MVZKLWCDmImksvtVPRw34EP5mCghI+SQiyM=)
2: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (hash: vxjovfY5SPA64YdQcHwIKV0R4UjpzTcrTS3QLvsp0Cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09B8, serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Validity
Not Before: Mar 25 04:22:27 2026 GMT
Not After : Apr 1 04:22:27 2026 GMT
Subject: CN=69c36303-05de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7a:56:11:f6:c0:72:be:b9:f4:f3:c5:b1:c2:
43:16:70:39:55:d1:b9:fe:f4:8e:28:1c:07:4c:75:
b5:cc:51:f6:c9:cc:bd:d3:52:36:e6:37:fc:b9:cb:
03:90:20:06:7a:94:9a:42:91:99:c0:88:15:f8:3b:
61:72:b9:89:f4:59:bc:80:a2:46:27:bf:50:d0:f9:
ab:7b:af:7d:e2:f3:da:6f:02:49:af:14:de:a1:3f:
a0:f4:ea:f6:7c:ff:7b:b2:67:3f:94:db:bb:36:ff:
bd:82:79:d9:46:61:84:20:97:0e:d7:f9:f5:00:01:
55:ba:73:5f:c2:da:d2:0b:46:78:f9:3c:7b:68:36:
59:8f:ce:e2:3b:d3:77:18:e1:fe:5c:1c:ce:e2:e2:
d2:88:28:8f:44:4e:20:7f:92:82:4a:8c:8c:11:59:
e5:ed:1f:28:e0:ce:ee:30:b1:c4:9a:7c:7f:b3:9e:
3d:ea:bb:6d:c0:25:4f:3b:4a:e6:b8:ac:5c:00:11:
32:0d:81:0a:4f:1c:c0:b2:8b:87:c4:39:05:10:b5:
0b:4e:95:43:47:b6:95:02:5f:4d:a4:14:ff:f1:e9:
fc:89:c5:89:9f:f5:75:e4:99:f0:9d:91:2d:58:6b:
90:dc:56:63:b1:13:a5:c8:5d:3a:41:01:39:15:8f:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:84:E6:12:D2:76:02:B3:E3:82:01:C5:70:F7:DD:22:ED:88:48
X509v3 Authority Key Identifier:
keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:6a:ae:f6:ee:ed:64:8e:32:80:5b:04:d5:a6:8c:00:6b:c1:
a5:70:26:99:73:2e:7a:71:14:19:9a:63:01:1e:1e:9f:62:f3:
34:67:64:91:cc:82:3f:fb:5e:4e:48:68:db:63:5d:6d:f0:cf:
7c:5f:39:ad:cb:1b:e9:0b:15:2b:a5:64:67:e0:67:3e:96:de:
9e:d6:4c:36:55:95:59:3e:fd:99:77:8e:04:5d:b9:30:f6:77:
24:5e:94:84:c6:35:83:1d:56:a0:12:ea:d2:f2:4f:51:c6:ab:
7a:80:24:58:a5:54:fe:e8:d0:2d:6c:70:98:a7:d1:bb:18:62:
6a:2e:27:4e:8b:d2:b8:0f:bf:60:da:b7:6d:12:59:9d:fe:23:
f7:c3:be:19:24:33:8d:d3:a4:3f:80:2a:e1:a5:dc:0c:79:d9:
c2:96:cc:a3:e2:34:b5:d9:76:06:1a:b5:f6:29:b5:3b:49:b6:
a8:b8:6d:4d:7e:c6:28:32:47:ae:46:de:e6:c9:17:93:35:28:
1c:18:c1:42:f8:ab:ab:4a:ba:68:bf:72:51:01:f2:d1:92:e2:
c0:25:77:3c:b7:3b:64:f2:e0:da:7b:b3:ee:a4:c8:bf:78:c2:
e0:77:64:96:bc:d0:09:05:a1:ef:0d:bb:3b:79:a5:39:5d:ab:
a9:b5:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:49 2026 by rpki-client