
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json)
Hash identifier: roq6+XOqh3BBX28vtBvKy063/jZ1X7ZJO21WcaeynZY=
Subject key identifier: 15:33:77:B4:C4:48:8F:D5:EC:11:83:48:C0:C7:25:1B:A0:96:B1:94
Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
Manifest number: 013F
Signing time: Wed 25 Mar 2026 04:36:47 +0000
Manifest this update: Wed 25 Mar 2026 04:36:47 +0000
Manifest next update: Wed 01 Apr 2026 04:36:47 +0000
Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: Wm3qVt2+nn1REKBUlNxzk7ch62jd4YG+WgsxOUbgASQ=)
2: 47C532D045B911EF93633071C4F9AE02.roa (hash: Hl209KOZgglZ4+SCqzKmdcJ+m6OFPPd68T8PhDnGZH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:36:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Validity
Not Before: Mar 25 04:36:47 2026 GMT
Not After : Apr 1 04:36:47 2026 GMT
Subject: CN=69c3665f-34bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:20:6b:05:62:5e:d2:09:d5:0d:1e:cd:bb:
da:22:d8:49:70:3b:89:f0:7a:d0:c5:3b:90:0f:8a:
35:36:19:ca:e3:73:89:21:40:47:cd:17:7d:49:06:
73:5a:16:01:06:38:e9:13:ca:ae:08:8b:2c:d3:4a:
de:75:0e:dd:f7:66:fb:91:e5:9d:48:04:a4:e7:87:
73:bb:4f:98:85:65:73:50:c1:28:2e:89:6f:c0:d0:
f9:cf:a9:4f:0c:c3:81:15:35:f1:9b:5a:aa:87:97:
da:c5:fb:7b:46:2f:bd:94:37:0c:b5:d3:d8:36:1c:
8a:14:4b:38:38:70:af:9f:04:d8:a6:86:fc:79:9e:
f3:4d:de:12:ff:8f:b9:b6:ba:10:f2:bf:63:8b:d8:
14:3f:ec:00:80:96:81:98:62:ba:f9:76:b2:c4:34:
95:b9:a9:c8:10:42:e9:53:b0:01:d8:1c:cf:00:20:
46:4c:86:90:30:c8:84:b4:61:66:12:3c:fe:b9:27:
e9:5e:58:31:82:a6:eb:65:3d:07:37:ab:2d:fa:e5:
60:29:3c:61:26:24:2c:3a:0c:da:9c:41:c4:25:0c:
91:88:2f:ce:e9:3b:eb:c6:59:7d:a1:07:e2:27:ff:
bc:40:17:f6:01:26:4d:6e:75:59:6e:42:e9:68:04:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:33:77:B4:C4:48:8F:D5:EC:11:83:48:C0:C7:25:1B:A0:96:B1:94
X509v3 Authority Key Identifier:
keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f0:9c:94:37:61:fa:74:ed:00:2c:01:f0:55:00:6e:b1:66:
01:fd:d7:16:32:03:08:31:f2:ad:f1:65:2a:0e:60:0e:9a:c5:
c9:c1:97:68:ad:12:8a:c6:0d:b6:dd:41:33:1b:60:5c:bb:2f:
f2:5f:f9:c6:d2:2a:cd:a1:3b:23:25:6f:e1:c6:59:a1:19:07:
fb:f8:40:15:03:14:46:d0:5c:c0:d0:61:ff:1f:16:f2:c9:e5:
51:09:fe:0f:29:3e:6f:d3:08:d0:34:02:58:8b:36:a1:49:aa:
31:25:37:0f:33:04:37:5f:2a:ea:66:ab:e4:15:7f:6e:e0:28:
d4:e4:55:fe:1d:81:f8:bf:69:dc:e2:93:0d:6e:82:5c:4b:86:
0d:41:0f:d5:d5:1c:d1:ee:62:75:bd:f1:28:93:55:0d:02:19:
01:76:de:a0:df:dc:bd:9c:d9:8c:b2:1b:95:68:a3:c1:e1:7e:
5e:2b:2a:32:49:dc:ad:8b:38:2a:ae:33:d1:6e:c0:62:90:13:
87:2f:3e:7d:b7:4e:41:8e:0e:1b:e9:b1:bf:93:d6:e2:df:f9:
b4:fc:b8:38:99:45:fa:8f:4c:71:8b:e4:c4:b7:1d:15:ee:55:
cf:21:1e:05:bb:a9:70:bb:25:8a:f8:73:7c:46:1d:9e:35:51:
7f:b5:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:21 2026 by rpki-client