
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File: 4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier: yVUdrE0cNQF4ic2S26rl/eoA5lSFrpY4E01uQLhFzDk=
Subject key identifier: BD:98:81:7E:8B:F3:DA:7B:1A:3A:15:51:D8:77:C7:D8:3B:AB:84:F6
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer: /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number: 69
Signing time: Tue 29 Sep 2026 08:35:20 +0000
Manifest this update: Tue 29 Sep 2026 08:35:20 +0000
Manifest next update: Tue 06 Oct 2026 08:35:20 +0000
Files and hashes: 1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: yiKCz5Bfp2CGAVJOyTkvAvxsVcSIP1UCDQis/GAeqx4=)
2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 08:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Validity
Not Before: Sep 29 08:35:20 2026 GMT
Not After : Oct 6 08:35:20 2026 GMT
Subject: CN=6abb7848-6d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:0b:c4:6f:86:a7:4a:ce:55:6c:19:82:e0:
ac:df:36:c4:a0:41:b1:0a:2f:6f:d7:8a:ce:9e:6c:
91:5a:03:45:1e:98:8e:06:9c:5f:bf:42:3f:4c:45:
d5:6f:df:d7:4e:82:c0:4f:8f:69:3e:f5:5d:19:ae:
77:60:b1:0c:66:24:22:47:f7:6b:dc:12:fd:fd:f2:
37:27:60:ed:ea:0a:dd:5d:40:53:97:26:2f:fc:26:
c0:ef:0b:3a:bd:b2:ce:9b:a9:3b:e4:c2:84:0a:c1:
47:51:a1:66:ae:e5:31:e2:e8:dd:ed:4b:d6:20:a9:
8f:ab:71:35:6d:fc:23:70:56:dd:ce:99:06:43:fb:
c6:ec:e7:51:1b:21:c6:2b:e6:1e:80:cc:35:3f:be:
45:4f:17:7c:a2:03:c7:7b:10:fc:73:a0:ee:b1:88:
7c:16:38:e6:1d:f0:e6:a7:49:44:74:e3:b4:d0:b1:
f6:80:92:34:b5:ad:7e:03:1a:d2:f7:ce:b5:dd:8b:
65:4f:7f:15:ca:00:2a:e9:e6:78:ce:fe:aa:7f:55:
a9:ca:a7:1c:0e:67:d3:2e:7c:85:d4:62:63:10:26:
2d:fd:fc:8f:62:a1:c4:b8:9b:39:44:d4:7f:2c:cf:
8f:44:ee:36:1e:21:58:81:b3:5b:3d:97:1c:9c:f5:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:98:81:7E:8B:F3:DA:7B:1A:3A:15:51:D8:77:C7:D8:3B:AB:84:F6
X509v3 Authority Key Identifier:
keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:c6:7a:d0:63:9a:ff:06:4b:90:45:38:84:a7:95:dc:ef:27:
28:5f:17:de:06:0d:74:fd:57:18:1f:1b:20:2f:8a:09:0b:9f:
18:e5:9b:50:94:81:80:ae:02:4f:3c:9a:4d:63:79:ec:c0:f0:
9c:7a:07:d1:d7:e3:85:11:27:5f:39:11:8b:07:9b:4c:26:00:
58:9b:a8:d2:4d:1d:f0:37:8a:10:e4:a0:b3:a8:af:bf:ce:d5:
49:fe:9b:de:40:1b:c3:78:c2:ed:09:c7:99:9c:4a:9a:3e:ad:
11:83:4c:f0:fc:91:84:e2:d8:4c:dd:ab:86:c4:04:f2:bc:d7:
19:12:07:8a:72:1c:2e:91:4c:71:f5:3c:16:b8:9e:f7:ef:cc:
df:22:02:58:9c:b0:56:2d:e7:82:44:cf:92:a3:e7:e8:6f:df:
0b:17:3b:83:69:3c:5a:95:20:57:eb:6e:4e:88:2b:70:0a:3f:
5e:e1:b7:4f:a7:8e:6d:fe:ab:fc:31:cb:15:11:27:cd:21:8b:
d0:53:f9:b5:d2:9f:b5:8c:63:bb:8d:04:78:b7:a9:f6:23:8c:
88:14:57:b9:6f:2f:ae:c5:d7:3e:7e:24:c3:3c:cd:2d:89:5d:
73:a2:e5:28:5c:92:a3:b4:74:54:87:c3:70:a1:d2:b8:12:19:
8f:c6:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:46:14 2026 by rpki-client