
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json)
Hash identifier: e0ZhI4NzYb9PncpHvBKmoQcV52nHpWZYLpqAU9wF6w4=
Subject key identifier: C5:EB:A5:6D:37:13:6A:CE:3D:64:C8:70:09:73:34:F6:65:12:39:CC
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0EA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
Manifest number: 0E7B
Signing time: Thu 24 Sep 2026 17:43:33 +0000
Manifest this update: Thu 24 Sep 2026 17:43:33 +0000
Manifest next update: Thu 01 Oct 2026 17:43:33 +0000
Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: 0Q+vvP1AeN8SaK7TF0JKGZvC0p6B3X/X7i+kZxiWu/0=)
2: 4F599628760C11F18FF6B7DA7BA30FBC.roa (hash: YaucXwzrY9zO3mN7fean4Hc2G9B8pNz4CzmpFpn3l8M=)
3: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: ABCE8poXuonnB72raAXSvHKphMYWzEPA5Z8Cf+KDtcM=)
4: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: ppNi38lhiBNB7Q6UOSSs1t7UtUP+WB5DnPLXstDa+Z4=)
5: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: BUqh8UiCsmWvNVOBiz1FTRn86yooou0qMt59DmQ1990=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3747 (0xea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Sep 24 17:43:33 2026 GMT
Not After : Oct 1 17:43:33 2026 GMT
Subject: CN=6ab56145-d125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:33:28:0e:e9:4e:67:20:35:27:d3:ca:78:
4b:9c:24:25:0f:7a:e2:76:e4:54:83:7e:ad:e9:c7:
d7:ed:c9:cd:9f:73:17:2a:36:c6:66:fe:ec:02:aa:
82:81:64:ad:56:09:b1:35:a5:cd:0f:6c:16:7a:da:
6f:03:46:75:79:9d:8b:e3:06:ad:53:ef:6a:22:b4:
44:ed:95:94:a0:ba:40:fe:53:92:7b:34:3c:b1:c2:
49:c0:88:26:d5:f1:bf:36:b5:2d:ff:d9:c9:37:86:
29:eb:d6:f1:b2:18:4d:ed:4d:53:a9:f4:fb:c4:2a:
15:4c:b5:6e:6e:32:eb:46:2f:2e:2e:cd:36:4a:4e:
e6:b5:85:4a:30:40:72:fb:d5:34:76:d3:cb:37:9a:
cb:2a:d1:c2:88:90:49:2a:f9:93:94:4d:9a:4c:af:
ae:fd:cb:cd:15:23:0e:c7:8e:a7:89:29:e9:4e:8e:
d0:f8:ec:74:51:f3:80:89:f1:07:36:09:98:62:58:
b8:31:e6:fb:e3:68:7d:bb:4f:0b:34:ce:a9:ff:e3:
ae:2a:f6:44:4e:ce:a7:36:6a:1f:c9:56:d2:f1:e6:
64:d1:8b:8e:24:5f:ee:8f:d4:84:90:48:81:38:bf:
e8:4e:b2:c9:aa:d7:07:e2:bc:11:db:22:cf:8b:de:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:A5:6D:37:13:6A:CE:3D:64:C8:70:09:73:34:F6:65:12:39:CC
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:55:71:dd:ce:d9:54:aa:36:17:75:9e:37:b4:01:b9:47:6f:
cd:0a:cb:1d:8f:17:b1:9c:bf:c7:9f:5f:ad:ea:48:57:ff:1f:
f5:53:77:32:55:c4:c1:76:fc:90:65:03:eb:1a:a9:f3:e7:79:
ce:29:73:8e:f0:dc:5f:d2:67:1c:37:81:e0:76:4e:50:e2:15:
73:2d:9f:42:61:78:0d:86:ad:6f:1c:4c:bf:93:1a:0f:a4:b8:
a8:7d:26:e0:7d:92:b3:4a:73:dd:99:a7:24:ce:fe:ac:bd:8b:
40:f6:e8:bd:e8:8d:a9:cd:8f:72:90:b9:76:c1:aa:c3:d8:b5:
9f:0c:cb:09:fc:cb:fa:a4:82:c2:2b:83:99:8a:0b:78:65:e0:
56:e2:31:c3:34:da:48:25:4b:b9:e6:7d:92:aa:70:b3:2d:7a:
25:92:54:de:26:0a:32:77:d5:bc:25:5f:2e:be:5b:da:01:92:
eb:18:9f:72:2f:c7:28:6e:c2:79:da:fd:40:82:8e:00:9f:6e:
eb:ae:e8:5a:62:ea:47:be:62:3f:b9:67:4c:bd:f9:c2:fd:26:
82:59:1d:26:0a:f3:89:0c:89:e6:4b:7d:3b:27:12:8e:25:f3:
7e:8d:88:d3:e3:2b:f1:c7:1d:e5:82:2f:3f:44:c9:d5:a0:6c:
90:67:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:50:16 2026 by rpki-client