
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json)
Hash identifier: trvoMy2BLfHHwrBFNG3GozhyliJArVXHqY3BbiztX9w=
Subject key identifier: E7:F6:F4:D0:80:87:94:F0:2C:7F:F6:D2:6C:A8:58:29:49:9C:CF:14
Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82
Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
Manifest number: 0123
Signing time: Sun 29 Mar 2026 05:23:19 +0000
Manifest this update: Sun 29 Mar 2026 05:23:18 +0000
Manifest next update: Sun 05 Apr 2026 05:23:18 +0000
Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: A/RmOgsRMK8MaCajJ0LjqG+yTqeQQXWuONHjWBVRoIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl
rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 05:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882
Validity
Not Before: Mar 29 05:23:18 2026 GMT
Not After : Apr 5 05:23:18 2026 GMT
Subject: CN=69c8b746-54fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:a0:76:3a:4c:25:df:95:14:9d:43:dd:a5:
19:15:30:42:0d:bd:41:27:fc:1b:27:cd:99:54:09:
99:76:15:87:ba:f9:1c:37:e9:78:a2:f1:1b:2f:18:
ce:f8:c6:c0:b5:de:89:0f:83:ca:4c:ef:de:a0:f3:
d7:82:bd:4a:64:0b:16:da:f8:54:ae:c6:b3:65:e7:
59:62:ab:f5:ca:84:a1:af:07:36:27:75:fd:4a:a1:
8e:ff:2a:5e:08:71:6a:03:49:91:2f:6a:29:23:b6:
9c:f4:08:b2:9a:71:1d:f0:72:e8:89:9c:e1:2d:e3:
9c:b8:ed:e5:1f:74:43:9d:1c:c4:89:60:ab:31:ec:
51:3a:3e:af:44:60:8d:bb:73:cd:be:69:74:ba:67:
92:b7:c5:c3:49:68:ce:39:5d:a4:72:87:24:78:cf:
f5:cc:84:be:36:a1:f9:18:36:13:43:c5:46:84:7b:
86:11:3b:c1:58:ea:f5:39:b5:9f:86:92:5e:60:98:
27:74:04:32:5a:a2:15:3f:2f:1b:f3:29:2d:f9:8f:
9c:56:29:cd:d1:60:63:43:98:be:3f:95:78:ae:bd:
54:88:ff:1f:f1:86:cc:28:8d:4f:e1:02:07:9f:73:
c2:99:20:b9:6a:66:7c:ae:c6:09:b6:c4:db:36:18:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:F4:D0:80:87:94:F0:2C:7F:F6:D2:6C:A8:58:29:49:9C:CF:14
X509v3 Authority Key Identifier:
keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:b0:71:27:f1:8f:25:2b:a5:06:a9:b8:20:d1:fe:5d:1a:
00:5f:f8:7d:4d:0e:ae:08:33:60:60:ce:3e:20:13:38:42:d5:
a6:57:8a:9d:97:2b:a3:4a:8b:d4:55:2e:b4:58:44:73:a3:22:
ca:05:6f:b9:f0:3e:27:81:57:16:67:2b:98:cd:83:4c:d4:a7:
f6:72:32:54:7b:11:d3:5e:c1:ea:8e:14:6b:46:94:ed:7c:0d:
00:87:7a:f2:c5:b5:b2:db:68:cb:73:c5:81:17:e8:35:d3:dc:
e5:31:a4:54:a4:70:b8:6b:2a:61:ef:fa:cf:6f:42:27:2e:a3:
89:0e:12:21:79:21:82:ed:4d:05:3c:ad:12:56:d2:24:2f:f6:
d5:78:b4:71:e6:b2:2d:ec:b7:6a:9a:b8:ef:ca:98:fd:19:43:
bb:c9:85:56:40:61:14:69:68:55:6b:50:33:23:8d:3a:31:1e:
f1:95:75:72:29:cc:82:3e:d2:bd:1d:19:d0:ab:c7:93:ba:30:
5a:fc:23:8f:8d:80:1b:b5:77:0d:14:ba:ea:94:3a:ad:db:0b:
9b:b9:69:ab:2f:d8:16:8a:90:c3:f4:d5:d5:9d:03:e8:a7:1c:
ac:f3:56:47:d6:16:1f:61:1c:e6:ee:8e:0c:38:aa:19:bf:36:
0f:e5:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 10:31:10 2026 by rpki-client