
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier: y9cwiqT4MxUe5Tw+N+tvfokCcTVJL6vJLP/j3qBrXsw=
Subject key identifier: D6:19:F6:B4:F8:AA:50:10:9C:E9:84:F9:4C:AE:19:0C:FF:D8:5C:9C
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial: 24D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number: 4899
Signing time: Tue 12 May 2026 15:46:37 +0000
Manifest this update: Tue 12 May 2026 15:46:37 +0000
Manifest next update: Tue 19 May 2026 15:46:37 +0000
Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: ixmss/c4Qu6VdswXkSDhXB2GKqDoCuG+PoLkXDN9P2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9433 (0x24d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Validity
Not Before: May 12 15:46:37 2026 GMT
Not After : May 19 15:46:37 2026 GMT
Subject: CN=6a034b5d-9ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:1c:de:d6:8f:57:cd:4e:07:9e:e8:47:af:
6e:bc:2e:a9:60:e0:04:da:ff:2b:20:0b:77:44:a9:
9f:38:cc:b1:79:83:0e:4c:e4:43:3d:bd:7d:38:30:
be:ad:8c:1e:4c:75:1a:d6:fc:67:be:4c:4f:78:24:
c4:ae:e7:fe:65:40:aa:bf:ea:2a:77:a7:82:e8:ae:
f1:c5:60:39:06:29:67:95:7a:81:f5:73:a5:ae:72:
f1:74:39:39:3f:a9:06:72:cb:81:12:c5:4a:a7:0f:
a5:25:59:af:ca:4e:b2:c7:77:04:17:c1:13:e8:ac:
21:8b:0c:65:9d:78:e7:4d:dc:ec:08:cb:02:fe:a5:
73:5f:71:2e:6d:ad:88:33:18:61:e2:af:0d:6b:29:
17:14:e1:31:7c:c0:a7:37:49:6f:aa:23:cb:68:e6:
b6:a4:d1:ea:a8:26:c1:7a:81:79:5e:15:c3:af:42:
3a:be:0d:09:31:14:56:38:a1:e6:be:47:01:6b:a4:
88:b0:fe:67:5f:86:cf:f2:b8:34:a2:97:49:e7:72:
75:85:7b:05:19:af:0e:7e:ff:f8:ee:f6:9c:f6:8c:
37:45:f1:bb:ec:0b:d0:18:be:49:e7:1d:ca:5d:0d:
81:68:e1:0d:1e:fb:16:bf:b6:61:ab:7d:17:81:b9:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:F6:B4:F8:AA:50:10:9C:E9:84:F9:4C:AE:19:0C:FF:D8:5C:9C
X509v3 Authority Key Identifier:
keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:6f:5b:26:e0:22:24:62:9e:95:7b:2d:03:29:74:1a:f8:
82:bb:c9:c5:78:c5:90:6c:5d:c3:db:fd:b5:0a:fc:2d:f9:e9:
55:78:df:b1:e1:49:99:da:f0:be:a2:a9:81:7a:a0:36:af:3a:
25:4d:ac:50:b4:d0:6a:39:51:f7:fd:a7:aa:0f:eb:0a:0b:f8:
34:be:79:5e:3c:6c:35:bb:a0:ec:3d:2d:5d:e4:bf:3d:0a:d1:
39:16:4a:21:b9:37:75:20:16:bb:9f:e8:55:4f:ae:4e:be:41:
87:da:de:b0:69:2f:8d:2e:60:c2:91:3a:f9:d7:2c:78:f8:85:
a1:b2:8b:80:c6:15:fb:10:d2:71:20:ba:4a:55:36:96:26:30:
02:fb:bf:15:d0:cc:8a:55:1c:0c:c2:d5:53:92:5c:90:57:25:
81:3d:71:1c:c1:68:be:75:ca:e4:1e:cc:83:fc:c0:b4:67:b1:
0b:8d:09:e2:74:52:08:72:85:74:60:af:c2:bb:0e:cf:8f:28:
60:80:06:29:45:98:19:8c:e5:42:71:cd:38:f9:a4:08:b5:92:
97:22:af:e8:ae:87:47:dd:53:6f:65:47:3c:e6:6e:2f:44:13:
9f:78:9f:2e:de:73:78:06:d9:dc:f3:e0:36:ce:49:82:be:3d:
bf:da:ec:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB
NDg4REM5M0QwHhcNMjYwNTEyMTU0NjM3WhcNMjYwNTE5MTU0NjM3WjAYMRYwFAYD
VQQDEw02YTAzNGI1ZC05ZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMcc3taPV81OB57oR69uvC6pYOAE2v8rIAt3RKmfOMyxeYMOTORDPb19ODC+
rYweTHUa1vxnvkxPeCTEruf+ZUCqv+oqd6eC6K7xxWA5BilnlXqB9XOlrnLxdDk5
P6kGcsuBEsVKpw+lJVmvyk6yx3cEF8ET6KwhiwxlnXjnTdzsCMsC/qVzX3Euba2I
Mxhh4q8NaykXFOExfMCnN0lvqiPLaOa2pNHqqCbBeoF5XhXDr0I6vg0JMRRWOKHm
vkcBa6SIsP5nX4bP8rg0opdJ53J1hXsFGa8Ofv/47vac9ow3RfG77AvQGL5J5x3K
XQ2BaOENHvsWv7Zhq30XgblakQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYZ9rT4
qlAQnOmE+UyuGQz/2FycMB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1
MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW
N3FMOGpDdnRqMGFraU55VDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALk5vWybgIiRinpV7LQMpdBr4grvJxXjFkGxdw9v9tQr8LfnpVXjfseFJmdrw
vqKpgXqgNq86JU2sULTQajlR9/2nqg/rCgv4NL55XjxsNbug7D0tXeS/PQrRORZK
Ibk3dSAWu5/oVU+uTr5Bh9resGkvjS5gwpE6+dcsePiFobKLgMYV+xDScSC6SlU2
liYwAvu/FdDMilUcDMLVU5JckFclgT1xHMFovnXK5B7Mg/zAtGexC40J4nRSCHKF
dGCvwrsOz48oYIAGKUWYGYzlQnHNOPmkCLWSlyKv6K6HR91Tb2VHPOZuL0QTn3if
Lt5zeAbZ3PPgNs5Jgr49v9rs8w==
-----END CERTIFICATE-----
Generated at Wed May 13 15:38:38 2026 by rpki-client