
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
File: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json)
Hash identifier: +Wkz7HjJEv6OTmUHRMCiODRFneKqUgYvF9MCSTFb0FQ=
Subject key identifier: F3:76:2C:70:EB:14:99:11:76:33:4A:18:C6:A1:39:62:17:C3:A7:6B
Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF
Certificate issuer: /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF
Certificate serial: 0134
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
Manifest number: 0134
Signing time: Wed 25 Mar 2026 04:39:48 +0000
Manifest this update: Wed 25 Mar 2026 04:39:47 +0000
Manifest next update: Wed 01 Apr 2026 04:39:47 +0000
Files and hashes: 1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: 0pNT/pjJtWmdzxWNXZI8WeaQKUoWVJwdg229kxDuR2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl
rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110E65, serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF
Validity
Not Before: Mar 25 04:39:47 2026 GMT
Not After : Apr 1 04:39:47 2026 GMT
Subject: CN=69c36714-a0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:05:67:95:99:79:8a:94:3e:3e:45:bb:80:
b0:73:8c:ca:ca:86:25:8e:bd:f3:86:cc:49:83:79:
03:c2:6c:6b:1a:37:84:50:ad:98:d4:ce:fd:7e:09:
98:9c:b0:36:17:eb:b3:7d:01:f0:71:05:61:b1:fe:
ea:73:63:b7:86:6f:8c:ef:49:ef:04:23:ac:7a:dc:
f5:aa:b1:0c:e1:99:0f:51:12:0d:71:b9:ef:26:33:
7c:09:2c:4d:92:ce:0a:d0:d3:23:88:cf:ea:6d:02:
19:82:05:27:30:24:2b:f7:78:48:ae:6e:0f:8a:d7:
41:37:67:42:45:e7:07:f9:34:22:97:f4:e6:68:c0:
95:50:ac:3d:51:67:b1:ff:50:74:3b:3a:70:32:15:
4d:f1:7f:5d:68:ef:dc:cd:5c:71:1c:1b:31:58:7b:
a5:70:f6:24:ae:6e:4c:98:cf:54:2e:1b:f0:a6:c8:
41:18:82:98:e0:be:d4:f3:2c:73:b1:ba:3d:d4:a7:
b1:6d:4c:14:63:75:46:ce:86:ff:e3:37:8e:db:f5:
43:4d:69:6e:92:f7:f4:be:66:66:60:a8:ac:46:a4:
45:65:5a:dd:04:cf:28:c6:e0:8d:58:6d:89:e8:22:
07:8d:92:5e:42:2f:10:eb:d7:23:b3:6d:5a:3a:7a:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:2C:70:EB:14:99:11:76:33:4A:18:C6:A1:39:62:17:C3:A7:6B
X509v3 Authority Key Identifier:
keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3f:92:a6:91:ce:45:82:0e:52:97:d2:6b:ea:94:1f:33:84:
b6:ff:61:91:90:9c:8f:9c:2a:65:90:9d:56:71:a9:1e:03:85:
14:a4:7d:6c:b5:bd:04:a4:8b:ff:f7:27:02:64:c9:ea:9d:f0:
19:74:26:4a:9a:1f:3e:df:58:6f:09:32:5d:77:0f:15:cb:2a:
be:45:20:70:11:dd:52:6c:d8:49:73:cf:1b:86:70:e1:84:d3:
f5:0c:6b:ff:bc:37:08:89:e4:84:5a:ea:dc:5a:b6:50:7a:c6:
7f:2d:cf:a9:78:62:7e:76:f8:e7:13:cf:f2:e8:66:f7:c3:47:
ce:ac:02:fa:59:61:7e:1d:42:bd:ce:7e:aa:12:55:0d:b5:c1:
db:69:3c:82:66:cc:c4:89:0a:34:81:4d:35:50:b6:db:5b:f4:
28:ff:c2:2e:90:69:47:30:ca:b0:02:bc:d6:79:10:33:9d:24:
9d:7a:8a:e3:f6:27:29:81:1e:8b:47:1a:ac:40:e2:2b:67:a5:
66:39:5d:7e:cc:ed:ff:d3:09:af:ca:39:d2:ce:8f:45:71:0f:
00:3c:aa:0b:6b:9b:22:cd:7d:cc:f4:26:9d:44:83:09:8e:04:
ca:a2:21:32:fe:34:0a:0c:17:50:ad:79:38:cb:c3:48:f5:57:
a7:4e:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:39 2026 by rpki-client