
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
File: fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json)
Hash identifier: xsGAIEGSDHTVPOdFnK1Figpbtbasb38PCgy+q1EZZYM=
Subject key identifier: 5F:89:6D:0F:A0:0D:04:9A:9C:D2:2C:55:A5:D3:C0:35:42:D4:BC:A3
Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
Certificate issuer: /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
Manifest number: 4C
Signing time: Wed 25 Mar 2026 07:28:24 +0000
Manifest this update: Wed 25 Mar 2026 07:28:23 +0000
Manifest next update: Wed 01 Apr 2026 07:28:23 +0000
Files and hashes: 1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: s1kRwLDFee99YlS22nfglCvofTUezzWUMic7nIAxREE=)
2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Validity
Not Before: Mar 25 07:28:23 2026 GMT
Not After : Apr 1 07:28:23 2026 GMT
Subject: CN=69c38e98-3756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:21:69:65:25:cd:33:9b:ca:84:47:d4:57:
45:29:b7:8a:2c:f9:fc:f6:9f:bc:33:8f:23:b9:ba:
69:78:85:21:75:05:b4:ae:b0:65:c1:b4:44:28:d5:
b9:4a:d7:b1:bb:5e:3f:f6:42:40:f4:4c:e7:87:79:
c6:94:10:53:e9:2c:7b:e2:84:ba:30:eb:a7:3a:72:
04:e0:80:4d:36:02:cb:dd:1b:45:26:5a:5c:90:d3:
52:dd:ea:21:e5:71:51:a0:bc:fd:14:5d:f5:3a:df:
1a:53:0d:1d:1a:43:79:00:ac:81:43:29:12:5e:1b:
4f:a9:d9:62:61:d1:90:2f:c7:c3:c7:72:48:14:3d:
09:d3:03:c1:69:17:7c:74:f1:59:e7:f8:8c:43:bf:
df:11:4e:48:8b:30:b5:f1:1b:f2:4b:bb:76:da:c6:
41:41:e0:ab:cc:46:d6:2c:8a:f4:27:88:20:77:1b:
53:b7:4a:c6:c0:36:9d:ea:e1:e6:7d:2b:fc:2e:cd:
f7:d6:55:db:ef:8d:f0:9a:84:d2:63:a3:b2:a3:f9:
51:59:78:73:d3:96:7e:f6:bd:67:68:57:01:fe:4f:
85:93:de:fb:d4:14:bf:d8:c0:1a:37:bc:82:3f:ea:
a7:f4:57:ed:17:32:f8:24:91:77:d6:8c:66:f1:83:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:6D:0F:A0:0D:04:9A:9C:D2:2C:55:A5:D3:C0:35:42:D4:BC:A3
X509v3 Authority Key Identifier:
keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:c9:59:1a:6a:83:aa:88:e2:0c:6f:72:65:3f:87:33:84:fe:
6d:b2:65:df:68:4e:eb:fa:56:99:cc:4a:f7:4f:76:ce:96:dc:
8d:c1:5d:f2:1a:d7:e6:14:c9:b2:1e:a9:b0:b1:a2:c5:8c:2f:
17:f0:0e:90:9c:ac:91:3e:cf:ff:38:62:14:ee:72:31:82:7e:
d7:9e:a3:fa:c3:7b:6b:81:39:27:94:5d:44:14:9d:e7:10:ce:
d0:88:25:dc:08:3b:4e:8f:2d:5f:b0:a6:b1:9e:22:5b:02:73:
d5:b0:38:fe:7d:17:70:9f:a1:5a:95:5a:1a:51:c1:4e:de:b8:
e1:8f:6a:89:2f:90:0e:77:7f:52:f4:03:00:8a:16:3e:2c:b3:
00:f6:fe:72:1a:97:18:44:77:22:7a:0e:13:bb:cd:c4:3e:b4:
30:c0:f8:1b:ec:b0:d6:33:27:60:38:ee:0e:e9:bb:37:ca:56:
30:ec:d2:38:c4:e8:15:a1:ee:61:51:ad:90:40:05:2a:c4:84:
8d:8f:91:40:0d:3e:91:76:68:0e:b6:c1:b9:3b:48:87:75:e2:
fb:4e:93:0e:a4:5f:7e:7e:b9:a0:01:4a:2e:68:e9:97:f3:1a:
49:97:77:15:fb:91:8f:b0:9e:e0:ac:c6:db:86:71:2b:09:08:
75:57:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:08 2026 by rpki-client