
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: vnMx4Uxu2GMEvD0unWsoyv/fBwWcoVGGB3EndKjSo3s=
Subject key identifier: B4:36:87:31:05:BC:60:A6:55:EE:12:02:BF:26:98:09:34:86:C9:04
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 0227
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 0215
Signing time: Thu 23 Jul 2026 04:18:07 +0000
Manifest this update: Thu 23 Jul 2026 04:18:06 +0000
Manifest next update: Thu 30 Jul 2026 04:18:06 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: qfBzOuhjuQMi4fvWF3y7KxUCxbMd+M+nbf6bCruAix4=)
2: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=)
3: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=)
4: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Jul 23 04:18:06 2026 GMT
Not After : Jul 30 04:18:06 2026 GMT
Subject: CN=6a6195ff-0283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:a6:c1:a9:c6:6a:8e:fb:05:68:68:7c:ab:
64:6a:34:c7:a1:f6:88:59:63:a8:eb:71:9f:df:a9:
5c:29:b5:6d:c7:82:81:50:f3:f0:67:b1:52:23:54:
ee:c2:c5:62:2f:25:56:b8:7e:f7:24:4c:0f:78:14:
33:b9:7b:9a:15:dd:29:b4:63:d4:0c:64:ee:f8:5a:
e7:c6:84:21:f8:ae:bf:8c:ab:a4:4e:4b:e3:95:73:
40:96:94:e4:f9:00:13:c3:88:ef:11:90:6f:31:88:
c0:cd:98:6f:2b:2c:dc:6f:74:af:c4:84:64:d8:b7:
33:85:30:a4:b5:06:e7:c9:4c:16:ed:4f:30:d6:5b:
5a:d3:d3:08:7f:0b:7b:89:58:ba:87:17:1e:73:da:
c5:b3:49:27:db:bc:04:15:43:36:29:ed:ae:6b:8b:
4b:42:1e:78:bd:4b:fb:40:93:b3:db:e0:96:98:69:
fa:b9:75:d2:c6:0b:60:52:7c:de:29:f6:87:86:fe:
cf:50:85:f2:ab:b4:11:86:33:fa:5a:79:b1:79:4c:
ff:0c:2f:b1:ae:1f:37:ed:36:a7:23:5d:e4:9d:d2:
bd:3a:33:2f:5e:71:a1:4a:4f:b8:79:4a:b6:ad:bd:
be:ac:c7:08:6c:be:79:e5:15:01:fc:2c:fa:9a:da:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:36:87:31:05:BC:60:A6:55:EE:12:02:BF:26:98:09:34:86:C9:04
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:2b:d9:20:0a:2e:0f:7f:0f:c2:40:31:1a:bf:15:9b:c7:5b:
3a:73:aa:0e:67:b8:bb:92:c6:93:45:17:f1:60:b7:59:2c:36:
2f:61:54:74:a1:b5:b4:1f:50:ff:c3:f3:f7:f5:16:2a:98:18:
3e:9f:97:c4:4b:51:9c:e2:d7:71:e6:e0:8f:42:a4:6d:61:33:
49:f2:a3:c3:09:7e:d7:a4:fe:9a:9d:99:a9:76:7a:91:39:a8:
d2:22:a6:6f:b4:2a:05:cc:07:7f:18:85:a0:73:16:1d:a6:11:
49:0e:61:54:0d:5a:4c:2d:b4:44:a8:a6:85:0c:b6:6d:8d:e9:
ad:cb:5b:12:09:61:6f:9d:bc:c7:df:70:aa:1c:6e:d7:00:b8:
05:92:a3:a5:6b:ab:6c:67:e4:40:49:ae:99:a0:6d:16:b9:74:
a3:ea:a3:48:13:c1:c4:67:af:f2:d7:20:68:1a:a4:44:8a:40:
3a:20:d7:86:3e:5b:ab:f4:2a:83:e5:68:79:64:4d:cf:f9:7e:
81:81:3f:c3:fe:32:c0:b3:cc:72:93:7f:07:45:e6:1a:5d:8f:
d2:6c:88:43:68:42:0c:5e:dd:4d:06:58:3f:e8:46:2f:5f:06:
17:7b:e7:3f:d0:30:ba:45:d8:6f:1d:f3:06:18:76:8e:a4:45:
47:95:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:54 2026 by rpki-client