
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
File: 4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json)
Hash identifier: /zpFrU+YXMyCHD3k6K/74ukEzR/A20Y/EcK8IGUF/ck=
Subject key identifier: 9F:1F:7D:41:50:95:10:F7:F7:57:F1:32:DB:BA:69:EC:11:FB:20:1C
Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Certificate issuer: /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
Manifest number: 01F4
Signing time: Fri 27 Mar 2026 02:42:59 +0000
Manifest this update: Fri 27 Mar 2026 02:42:59 +0000
Manifest next update: Fri 03 Apr 2026 02:42:59 +0000
Files and hashes: 1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: PEi7JpsPs8NmCyrIh37qkE59imEMxAz9lPC2XJQzQEQ=)
2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: ReWfHLKEKoAywYXZiDMOK9dI287S9BEAejTHxvhLN0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8AF5, serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Validity
Not Before: Mar 27 02:42:59 2026 GMT
Not After : Apr 3 02:42:59 2026 GMT
Subject: CN=69c5eeb3-09da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:ce:27:ff:32:da:bf:21:7b:fe:a2:05:81:
aa:88:3e:89:9d:d8:24:fd:df:bf:e2:36:36:73:6b:
fc:b6:54:37:4e:8f:7b:0d:0e:b8:11:af:d7:31:12:
ed:1f:df:16:fb:33:9e:58:a4:a4:3c:c6:8e:51:77:
2e:f0:67:9a:aa:1e:13:13:79:ba:41:01:60:de:b3:
55:cb:51:40:35:1f:59:db:24:8e:ec:6e:dd:a4:87:
d1:e2:a8:8c:5c:91:4d:33:62:c2:21:e3:f9:c7:d2:
52:35:ff:27:71:b2:90:fd:46:8e:b8:fb:0a:16:34:
52:52:f2:e3:af:9a:56:40:a5:5c:56:50:0e:ff:d9:
79:72:28:44:1a:90:57:22:22:33:12:2b:32:d7:2a:
b7:11:b8:c9:73:3d:a5:32:8c:b4:ba:8a:68:bb:e8:
aa:02:7b:3e:68:7c:6e:9d:d5:ff:28:93:75:f1:33:
e5:a4:62:ee:90:28:fd:28:39:d4:f3:81:09:05:06:
6e:d1:db:d8:47:c5:6c:84:d3:0d:2d:f4:1a:0c:fc:
b8:2e:53:87:0e:56:e8:c8:08:d1:e0:d9:a9:4d:ad:
bd:96:be:f0:85:df:c0:5a:ed:b0:23:3d:7c:87:0f:
de:49:38:2d:33:16:af:d3:0c:dc:93:cf:5a:da:4d:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1F:7D:41:50:95:10:F7:F7:57:F1:32:DB:BA:69:EC:11:FB:20:1C
X509v3 Authority Key Identifier:
keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:3c:ac:5e:9d:33:09:de:69:5d:80:c1:69:8d:34:5a:74:0e:
f7:14:54:4d:e3:39:e4:d6:25:1b:10:1c:ce:bc:64:04:e2:6a:
9a:3a:29:eb:81:12:fa:8f:42:5f:4d:50:94:71:9b:ff:e0:c3:
0e:a7:1c:c1:e2:b9:21:49:d4:04:4e:81:cf:7f:45:76:a4:9c:
6e:94:f4:74:4d:53:0a:2e:1b:62:e3:94:08:56:a4:1f:a8:33:
14:ef:0c:ca:2c:0a:be:da:47:d1:ff:26:c0:aa:31:f0:dd:08:
ab:32:62:cd:44:a1:fd:92:b3:24:d6:ac:57:62:17:66:a5:c4:
e6:4f:56:e1:38:e4:5b:fc:32:0d:b0:62:64:3d:9a:b2:31:25:
55:36:b5:0f:3e:e7:cc:d1:cc:d0:2a:3e:bf:e4:a5:a3:c9:25:
1c:4c:5e:53:28:0b:d9:5e:80:47:f4:0b:9d:62:31:97:43:c2:
2c:6e:36:64:d8:97:71:77:3b:1e:03:e2:34:db:47:a3:a9:cb:
b1:43:fb:22:8f:00:6e:0f:9f:e8:55:de:9b:ab:54:a7:55:38:
64:88:15:b6:f1:4a:e0:21:f4:0d:19:27:c9:dc:86:25:f9:56:
6c:27:e8:dc:18:31:f8:46:24:87:ee:17:37:1e:1a:55:20:de:
68:89:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:54 2026 by rpki-client