
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json)
Hash identifier: VZmRU4m6igNFmk7/c1XXuiOplYl8ir1SjLsNxnTmks8=
Subject key identifier: 93:30:5F:78:27:08:0F:FC:8C:A8:C7:44:04:20:1F:5F:4A:54:EE:47
Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
Manifest number: 4C
Signing time: Wed 25 Mar 2026 07:28:21 +0000
Manifest this update: Wed 25 Mar 2026 07:28:21 +0000
Manifest next update: Wed 01 Apr 2026 07:28:21 +0000
Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: nZo9AEy+SE36DjUX0peRQe9Schbjtj5ntEclYrWMoYA=)
2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 58sEBeu/Lw41bnGWkn+BoX7gGqJ3oc1042/9t7Bx+7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Validity
Not Before: Mar 25 07:28:21 2026 GMT
Not After : Apr 1 07:28:21 2026 GMT
Subject: CN=69c38e95-d985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:4f:5f:fa:2a:74:62:64:5d:09:d8:27:47:
57:fe:09:4d:d2:ae:d8:d6:cd:a0:c4:6f:9c:1c:62:
dd:1c:a5:19:05:26:19:12:f8:15:3c:b8:50:29:64:
ea:54:b3:5f:d6:72:00:c5:ed:91:aa:a0:12:c1:05:
1e:41:c1:7e:2d:c3:bf:a6:45:33:cd:08:c9:b4:0f:
b4:5e:b5:95:14:16:da:2c:0b:dc:c5:19:95:a5:6e:
8a:3d:48:b3:2c:5f:4f:c7:bc:ab:c3:dc:2c:be:74:
45:68:07:70:d3:1e:cc:48:c1:1a:5a:bf:6a:97:89:
ec:03:71:57:4d:29:29:a1:eb:cc:29:c2:b3:28:d7:
d7:cc:a7:e2:bc:1f:24:fd:ec:49:6b:ce:ca:17:1d:
57:fb:d3:de:97:43:ab:ea:3f:c0:14:14:d2:45:7d:
2d:1e:28:9c:cb:1b:8b:54:9c:9a:3e:e3:06:0c:b5:
a6:15:65:f2:af:b4:14:e2:ab:93:11:12:01:26:51:
de:c4:96:76:a6:d2:54:b3:95:94:22:08:8d:3c:3e:
9e:dc:96:22:ea:a8:4f:b6:f1:48:c3:32:5f:84:18:
10:5d:a1:99:f4:14:40:2f:c7:1b:40:de:0f:c0:77:
12:2c:b2:e4:0a:08:d0:55:c4:6e:e0:22:55:cb:9d:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:5F:78:27:08:0F:FC:8C:A8:C7:44:04:20:1F:5F:4A:54:EE:47
X509v3 Authority Key Identifier:
keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:58:07:ee:16:7f:8b:66:e6:63:14:83:45:c4:79:2c:cb:
0f:04:ac:f3:a2:b1:e3:7d:e2:50:a7:e6:66:77:08:8f:a0:b5:
5e:99:2d:ad:cf:57:af:b1:28:5e:85:9e:f5:46:e9:42:54:28:
97:70:9d:e0:ab:f5:6f:51:11:97:dc:51:e4:1f:23:a6:e2:c6:
be:69:8b:71:1c:9d:10:24:ab:5f:0b:c2:fc:b4:0d:f2:6a:ec:
60:e0:7e:35:c2:eb:4b:65:a9:f5:1c:63:b1:ff:1e:25:5d:c3:
37:26:80:f7:22:8a:9e:dc:81:c5:e0:76:04:31:3f:1a:fe:2e:
cf:a9:c0:8b:a6:9f:7f:8b:1b:37:5d:c0:2f:08:1b:fa:15:6e:
4a:cc:c7:38:cb:05:c4:92:7f:52:1d:eb:33:63:a3:89:51:6a:
e8:6a:24:12:da:da:f6:a1:b4:ee:59:61:af:80:72:98:33:02:
1b:1c:c8:a3:f6:8d:0d:5f:ac:d3:3e:42:c1:0c:1a:2d:a2:d1:
7c:01:42:86:2e:d9:e8:74:de:f4:b7:d0:d9:5a:ab:bf:e4:a9:
f8:8c:26:03:bc:6d:c3:6e:d5:92:5d:01:f0:9e:47:f5:0b:6c:
ff:43:84:12:10:ae:1d:61:59:55:81:aa:7e:83:9b:05:c4:ee:
be:7e:8c:ea
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
OUNENDExMC8GA1UEBRMoM0Y4RjM4NjMwRjREM0Q3MEVERDlFNUM5MUUzNkVDNDhF
RkI5RkQ2MjAeFw0yNjAzMjUwNzI4MjFaFw0yNjA0MDEwNzI4MjFaMBgxFjAUBgNV
BAMTDTY5YzM4ZTk1LWQ5ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnck9f+ip0YmRdCdgnR1f+CU3SrtjWzaDEb5wcYt0cpRkFJhkS+BU8uFApZOpU
s1/WcgDF7ZGqoBLBBR5BwX4tw7+mRTPNCMm0D7RetZUUFtosC9zFGZWlboo9SLMs
X0/HvKvD3Cy+dEVoB3DTHsxIwRpav2qXiewDcVdNKSmh68wpwrMo19fMp+K8HyT9
7ElrzsoXHVf7096XQ6vqP8AUFNJFfS0eKJzLG4tUnJo+4wYMtaYVZfKvtBTiq5MR
EgEmUd7Elnam0lSzlZQiCI08Pp7cliLqqE+28UjDMl+EGBBdoZn0FEAvxxtA3g/A
dxIssuQKCNBVxG7gIlXLnc9dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkzBfeCcI
D/yMqMdEBCAfX0pU7kcwHwYDVR0jBBgwFoAUP484Yw9NPXDt2eXJHjbsSO+5/WIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5Q0Q0L0RFNTMxMDgwQjk1
NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhEdDJlWEpIamJzU08tNV9X
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUDQ4NFl3OU5QWER0MmVYSkhqYnNTTy01X1dJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5
Q0Q0L0RFNTMxMDgwQjk1NTExRjA5QTdGNkQ3MUM0RjlBRTAyL1A0ODRZdzlOUFhE
dDJlWEpIamJzU08tNV9XSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA5WlgH7hZ/i2bmYxSDRcR5LMsPBKzzorHjfeJQp+ZmdwiPoLVemS2tz1evsShe
hZ71RulCVCiXcJ3gq/VvURGX3FHkHyOm4sa+aYtxHJ0QJKtfC8L8tA3yauxg4H41
wutLZan1HGOx/x4lXcM3JoD3Ioqe3IHF4HYEMT8a/i7PqcCLpp9/ixs3XcAvCBv6
FW5KzMc4ywXEkn9SHeszY6OJUWroaiQS2tr2obTuWWGvgHKYMwIbHMij9o0NX6zT
PkLBDBototF8AUKGLtnodN70t9DZWqu/5Kn4jCYDvG3DbtWSXQHwnkf1C2z/Q4QS
EK4dYVlVgap+g5sFxO6+fozq
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:43 2026 by rpki-client