
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
File: 4deDfrzHqaTRdRZXhgR2OivQQnI.mft (raw, json)
Hash identifier: VpYPOJFyI13NfEyxNxBxD0UK1KtozseZtglHLJ7a/qY=
Subject key identifier: 49:D8:43:7A:DD:23:6F:32:FA:6D:5B:6D:18:8B:9A:FC:A3:5B:52:D8
Authority key identifier: E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72
Certificate issuer: /CN=A91EE92F/serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
Manifest number: 0126
Signing time: Wed 25 Mar 2026 04:57:41 +0000
Manifest this update: Wed 25 Mar 2026 04:57:40 +0000
Manifest next update: Wed 01 Apr 2026 04:57:40 +0000
Files and hashes: 1: 4deDfrzHqaTRdRZXhgR2OivQQnI.crl (hash: 4CnHZTslYmgdzc+LkiEcYKlSfnx0wzWHJjo+StPa3aA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl
rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE92F, serialNumber=E1D7837EBCC7A9A4D17516578604763A2BD04272
Validity
Not Before: Mar 25 04:57:40 2026 GMT
Not After : Apr 1 04:57:40 2026 GMT
Subject: CN=69c36b45-7b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:db:b5:20:ca:33:c4:39:61:9f:3a:5e:5d:
aa:99:f0:45:4b:d0:ce:76:8d:a7:0f:3e:60:1c:59:
90:aa:56:a1:52:bb:00:a1:8d:5c:30:7a:0b:46:05:
97:2b:90:c1:25:03:48:2f:5b:57:bc:3b:23:ea:c8:
8e:fd:c1:6c:5b:f6:c0:24:49:b4:71:9b:0b:4a:17:
20:f0:1c:d6:78:30:cc:98:a9:7a:0c:03:4b:b0:68:
4e:c3:23:bc:a8:9f:27:ec:1a:84:f4:54:9e:8a:51:
c0:c2:07:0b:e8:d3:05:d7:77:dd:4c:25:3f:18:b4:
e0:0b:f6:bc:bd:c2:87:25:c1:16:50:23:72:9e:0b:
54:96:45:31:0a:94:73:bd:fc:44:ba:3a:1e:d7:96:
a2:d1:fe:79:9d:d5:56:2c:db:33:ba:ce:a0:ef:f8:
a1:04:b9:1c:72:a6:ec:61:af:8c:02:82:2c:c0:ce:
03:4b:b1:c8:13:e6:14:11:57:d7:bb:cf:46:ae:00:
0f:45:72:69:37:64:32:28:b3:a2:db:f7:46:84:7e:
f7:98:cc:b0:6b:95:0e:6d:f0:a6:f0:78:2b:b6:db:
ac:29:fa:cf:30:5a:ca:84:db:62:a7:05:43:53:ec:
c2:c4:87:a7:70:67:c1:58:05:d0:91:eb:79:ec:22:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D8:43:7A:DD:23:6F:32:FA:6D:5B:6D:18:8B:9A:FC:A3:5B:52:D8
X509v3 Authority Key Identifier:
keyid:E1:D7:83:7E:BC:C7:A9:A4:D1:75:16:57:86:04:76:3A:2B:D0:42:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4deDfrzHqaTRdRZXhgR2OivQQnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/1B290B5E740B11EF9E9C0336C4F9AE02/4deDfrzHqaTRdRZXhgR2OivQQnI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:08:7a:5e:13:ea:da:ca:c7:90:9e:83:7f:eb:cd:3e:15:a9:
2a:07:92:aa:14:a4:12:f7:28:75:0a:ad:39:e9:8d:b9:07:c8:
18:07:f9:c0:8f:87:9b:e7:d1:a3:42:55:81:89:df:a6:d9:28:
f6:7b:95:80:b1:3d:2d:f5:2b:1f:32:0e:28:52:f4:93:38:58:
55:6e:40:d9:af:0c:43:0b:f1:a2:21:73:c3:81:9f:31:73:0e:
b9:b9:25:70:cf:e3:08:a8:68:16:3e:07:9c:b6:5d:b8:5e:77:
07:ec:ea:50:8b:56:b9:99:c8:87:e2:d8:9a:4a:05:4b:86:5c:
cb:bd:68:40:33:0d:ac:a4:e7:02:c4:f9:89:8f:7c:91:65:dd:
ab:f2:25:a9:68:e3:aa:ad:6f:b6:7b:2c:fb:1e:42:27:8f:c8:
fe:fc:f3:37:77:d4:8c:f9:ad:e4:52:e9:67:2f:a1:c6:42:80:
ab:30:a6:0a:ac:d8:d9:26:9f:1f:79:6b:d2:82:df:4b:b4:7e:
73:c2:4b:50:90:f7:60:d6:63:61:33:a1:08:e2:c7:a6:d6:4c:
c8:b8:f0:1f:de:5d:dd:bb:db:28:f6:b4:40:20:fd:47:3b:ff:
96:aa:34:cc:38:64:ad:37:58:cf:17:f3:b3:86:bb:eb:19:c2:
99:5b:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:26 2026 by rpki-client