
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier: p0ej7XPCGdXRQvK4uYpbAOKllbbSRw45EYg24MXZlYo=
Subject key identifier: 51:22:57:8D:65:F5:76:A7:C9:C2:23:1A:BE:CB:49:31:E3:CD:DD:D2
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number: CB
Signing time: Wed 25 Mar 2026 06:03:01 +0000
Manifest this update: Wed 25 Mar 2026 06:03:00 +0000
Manifest next update: Wed 01 Apr 2026 06:03:00 +0000
Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: iGQK1S6DO8XDSXQ/JspjpS/YfBEqeVnDD+j6BUmK1Ew=)
2: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: bi6yZUP9Smkax+xVdkGT/x3hFrhWjvPzPQn2lGZjFLA=)
3: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: A9CzU8MDj6rLJSlF21HcobLlJ5jlCrKiSpiRirq4aHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Mar 25 06:03:00 2026 GMT
Not After : Apr 1 06:03:00 2026 GMT
Subject: CN=69c37a94-9828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:86:7f:36:19:50:2f:83:e5:90:0d:80:7e:
98:f1:06:a6:de:ce:60:11:34:7b:2b:13:cc:f0:3a:
57:54:fb:71:b2:e4:ae:a0:d1:fc:01:94:c3:6e:dd:
3e:65:6a:61:a2:99:61:40:09:a0:a5:3d:ad:20:5c:
74:bc:7a:50:43:1d:3f:96:51:7c:44:47:a8:04:39:
8b:c5:d3:45:23:17:a9:7e:8e:90:b7:db:8d:97:3d:
eb:f6:94:7a:46:db:74:bf:eb:5b:f8:34:c3:1b:4f:
a9:f2:ee:06:38:ba:0b:c4:3d:a0:35:83:65:4b:2b:
37:3a:8c:81:57:47:f0:04:70:13:2d:aa:34:74:51:
39:03:c9:ed:0d:ff:22:63:6c:97:35:f9:f5:14:cc:
cf:a2:78:63:42:9a:ba:cd:fc:56:af:ef:21:58:ee:
84:53:51:83:0f:3b:cc:5c:fb:7b:af:76:f3:29:6d:
6a:19:3d:83:81:72:17:89:ec:ae:a6:98:17:ce:35:
26:c0:6b:e1:70:15:b9:cb:e1:fc:0a:19:39:45:e8:
ba:82:e2:34:25:5b:7f:c7:e8:03:fb:7f:d1:82:5a:
85:b0:5a:d0:d1:a9:23:04:9d:74:48:7f:32:61:e4:
2d:37:d2:88:1d:ae:5a:ed:89:bd:14:6f:3c:d2:af:
4d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:57:8D:65:F5:76:A7:C9:C2:23:1A:BE:CB:49:31:E3:CD:DD:D2
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:3f:19:84:e6:ee:ec:29:8d:0b:47:e1:39:09:ee:9c:50:b0:
10:c3:26:20:99:1f:f7:8e:35:79:97:a0:16:26:00:31:d0:4d:
ce:9b:11:aa:aa:16:a2:51:30:8a:81:7b:bd:84:2b:fb:80:73:
38:e2:d9:96:cc:eb:08:a5:f0:bc:19:01:75:d3:57:a1:2a:19:
aa:61:21:86:97:8a:ca:05:f9:7a:f6:85:48:09:22:52:ae:40:
63:68:38:6b:4f:3f:64:eb:6a:be:a9:e1:79:09:ee:bb:cd:8a:
b8:c3:74:e8:b0:50:c6:00:33:98:76:5f:48:21:1d:42:ea:47:
9f:3f:12:99:21:36:b4:e8:61:d1:32:db:52:d8:24:9e:21:8f:
07:7c:8f:af:00:e5:6b:b8:58:58:7a:eb:5e:75:96:bd:fc:73:
56:95:86:01:8e:6d:89:8b:86:ca:fa:fc:08:ce:8a:a4:23:81:
5d:24:f3:2d:7f:d1:7b:3e:7d:c2:17:a9:80:31:21:e0:f0:55:
25:8b:d6:4a:89:39:eb:fe:c4:57:0f:fb:88:92:aa:6d:f7:61:
28:e6:a9:99:fb:e1:e0:bf:37:a1:8d:47:1f:8c:4b:36:49:c5:
bd:06:e7:63:94:20:33:18:73:77:be:a9:38:be:9a:9d:8b:d3:
2f:2d:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:46 2026 by rpki-client