
$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File: 4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier: dC1DPaspmo5gyeCWbj412CrdhhRRXVX/ScE6YCMK2KI=
Subject key identifier: 64:9F:0A:F6:40:CE:7A:4D:37:1B:DC:C4:C0:95:46:0D:08:87:3E:96
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer: /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number: 0A
Signing time: Thu 26 Mar 2026 02:50:40 +0000
Manifest this update: Thu 26 Mar 2026 02:50:40 +0000
Manifest next update: Thu 02 Apr 2026 02:50:40 +0000
Files and hashes: 1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: AJRAIXXpuXtXmUI82TDyHR9yiYlk+dvSJxFrWT4HkSU=)
2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Validity
Not Before: Mar 26 02:50:40 2026 GMT
Not After : Apr 2 02:50:40 2026 GMT
Subject: CN=69c49f00-91d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:2d:10:3f:76:1f:f2:fe:a6:64:88:19:00:
f6:e9:08:e4:1f:34:ed:25:a2:ff:06:5e:d5:41:19:
25:91:5d:35:6c:c3:15:a5:5a:2e:d4:df:c9:74:de:
60:d6:10:a9:a8:78:99:50:a0:6b:e4:2f:9e:91:ba:
33:ac:39:16:4c:f8:3f:1e:39:28:27:69:bf:90:bc:
a0:9a:66:b5:ee:3f:54:40:29:f5:9d:d8:1d:1b:e9:
68:c6:46:4f:8d:57:85:75:a5:f6:83:19:23:28:4a:
30:6c:9b:ca:b1:a0:6c:a0:60:74:7b:08:aa:af:7c:
ed:b6:3a:c2:cf:19:7c:5c:83:6e:ea:71:d1:e0:af:
cb:12:c3:19:ff:f9:22:bf:30:9e:c9:be:0d:59:93:
6f:0f:38:1a:62:24:4d:80:ef:69:5f:b3:79:f2:f9:
96:a8:09:83:90:46:cb:c4:87:c6:58:37:ae:88:e9:
a1:bd:ce:ea:28:62:13:8e:f1:a2:d1:0d:91:2d:40:
e5:a3:c2:b9:11:55:53:99:57:80:27:0a:77:c2:c1:
9d:52:9c:99:5c:7e:24:80:28:fb:b6:a5:cd:f9:87:
21:0f:44:a1:d0:0b:27:e5:ae:12:55:07:b2:7d:f6:
d8:6e:7f:81:d2:b7:e6:6e:4d:77:7c:4c:6f:f3:c8:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9F:0A:F6:40:CE:7A:4D:37:1B:DC:C4:C0:95:46:0D:08:87:3E:96
X509v3 Authority Key Identifier:
keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:53:db:f6:96:6e:41:05:17:f3:23:7c:7d:ed:47:a1:3a:b2:
1a:2f:e2:27:f6:76:53:db:87:b7:5d:0e:55:3b:1e:be:86:e6:
59:09:41:bb:94:df:60:7a:f8:76:4c:10:a8:88:a3:47:4e:0b:
b4:4b:ed:8e:7b:96:af:b1:e6:99:37:70:e9:24:21:49:c7:b0:
e1:ac:2e:2a:ed:d3:9a:13:30:e2:a4:05:9c:de:96:7c:ef:cd:
af:95:61:ff:fd:65:42:bf:fc:a7:5c:97:70:f8:73:18:1d:e6:
5f:a4:5c:0f:d7:1a:53:0b:d6:f7:99:cd:d6:92:6d:14:19:a8:
64:d3:3e:58:44:79:e8:d3:83:8d:86:18:c2:7a:15:fc:c6:43:
78:6b:9b:a5:9e:8f:3a:8c:9b:d0:e8:8b:e1:5f:07:38:bd:59:
ce:07:79:bf:93:5b:a6:f1:84:cd:67:d2:c6:6a:be:d7:96:51:
e6:b0:4d:ec:2f:71:1c:a7:6b:45:80:4c:71:cd:18:c3:f8:43:
8e:98:5c:6e:a5:b0:cb:22:99:bb:1a:d5:e0:2a:f3:a7:75:bb:
70:2a:b6:c3:8b:64:da:62:e8:e4:1e:59:e8:3c:9a:2c:9e:4c:
b2:69:1b:ed:7a:d7:d4:75:62:40:fd:43:79:c1:33:ad:7b:c2:
89:1e:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:41:18 2026 by rpki-client