
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: gcw/8NhOSKoxiHxP2hcEIBSAvPsPWq+2K8h6XlCqMxQ=
Subject key identifier: 3D:B3:E3:1C:9C:0E:2D:2D:38:62:01:E6:5F:26:E8:95:17:83:1F:A0
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 01F2
Signing time: Wed 13 May 2026 03:27:33 +0000
Manifest this update: Wed 13 May 2026 03:27:33 +0000
Manifest next update: Wed 20 May 2026 03:27:33 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: dG78sfAYNRbqSPm3Hq7k1/cwAx4kFQSPb0SOQH0eAYo=)
2: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=)
3: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=)
4: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: May 13 03:27:33 2026 GMT
Not After : May 20 03:27:33 2026 GMT
Subject: CN=6a03efa5-57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:36:9e:0f:e1:58:ee:f4:05:33:4b:91:9a:
02:98:d1:00:16:f5:df:f9:07:ac:12:74:7d:df:9d:
21:d9:d3:72:da:48:6e:a4:57:de:52:93:4e:1b:9c:
54:15:a5:37:f0:aa:ec:b1:5f:f4:4e:72:f6:ea:f8:
e8:fb:7f:e5:40:50:9c:86:33:93:e3:1d:12:04:29:
94:e1:87:63:a0:b8:98:d7:4e:b7:7c:d1:ee:2d:b8:
0a:8f:88:7c:4b:f9:3c:c2:ff:30:7d:39:d9:b5:86:
85:41:3b:16:fd:97:6b:ac:6d:25:eb:0b:1f:01:70:
d1:37:67:07:4c:34:31:10:22:0e:c9:f8:5a:f3:08:
06:70:ca:3d:40:68:aa:46:9a:07:bd:b3:3c:6a:96:
58:f3:2a:d8:74:c5:9e:10:1c:77:26:e9:b9:ff:f6:
6c:75:4d:01:d9:ed:e1:ce:b0:b9:af:15:a5:66:fb:
82:9b:92:0b:9c:40:7e:20:b3:f4:70:dc:3b:75:7e:
f0:f3:4a:98:e0:34:25:59:4a:8f:3a:5c:be:9e:6b:
f6:77:70:a9:e3:7e:cd:e1:b2:ae:74:54:1f:6e:09:
c1:59:18:5d:ab:96:96:8c:70:b9:13:7d:ca:b3:4b:
b5:00:a2:9d:2a:62:0b:66:b2:c9:a6:21:13:84:1a:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:E3:1C:9C:0E:2D:2D:38:62:01:E6:5F:26:E8:95:17:83:1F:A0
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:2d:45:00:15:10:04:ee:38:8f:20:1c:b7:6f:5b:ad:26:1c:
e1:50:42:10:a7:87:b7:fb:0f:5c:b5:3b:c9:8f:53:f2:74:43:
19:90:6f:f8:f8:6c:eb:fc:c7:df:ea:b1:5c:dd:3a:b4:c5:d5:
8a:05:a9:b5:b0:c2:66:e8:0f:aa:3b:6f:3a:d9:49:2d:da:20:
06:8b:62:a4:be:60:48:09:9e:a1:db:92:a8:ac:f3:44:42:f4:
a5:a2:14:bd:cc:fe:67:f1:66:46:38:3b:eb:db:8a:a8:02:93:
fe:2b:f8:6b:d6:e0:63:64:a6:67:92:e0:02:0e:72:f0:a9:b3:
c9:fb:47:e2:4e:1d:17:a5:82:ec:7f:6b:db:2a:09:d5:0f:62:
ac:2a:98:d6:41:f2:f7:9a:f4:ff:3a:b4:95:a9:85:f0:1a:25:
8f:ca:f6:5d:e9:b0:50:46:37:cf:a9:5c:34:89:56:ab:cc:ad:
e1:1d:cd:b2:ee:f7:98:a2:40:11:c6:ba:f4:3d:e7:c4:41:07:
2f:6e:c3:d9:9c:49:1e:53:43:a3:fa:ed:15:50:67:64:a7:28:
7b:74:6d:9d:8a:29:15:d6:62:af:f8:38:36:b3:8e:b3:2d:58:
ad:5b:11:7e:4b:c2:42:6c:5a:f5:14:62:6d:59:e5:2e:38:27:
bc:30:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:45 2026 by rpki-client