
$ rpki-client -vvf rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
File: _rv4NRuAvuL_tu8l-lfwhy9QkfI.mft (raw, json)
Hash identifier: 1Fjw3ho3VeXEH0aQqzvqYc5eHemt2EnTwZer1j/5wQc=
Subject key identifier: 63:18:9F:CA:17:92:9A:E3:40:73:CF:86:35:1E:4C:A1:BB:0F:73:F4
Authority key identifier: FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
Certificate issuer: /CN=A91133BE/serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
Manifest number: 2A
Signing time: Fri 17 Apr 2026 08:27:14 +0000
Manifest this update: Fri 17 Apr 2026 08:27:13 +0000
Manifest next update: Fri 24 Apr 2026 08:27:13 +0000
Files and hashes: 1: _rv4NRuAvuL_tu8l-lfwhy9QkfI.crl (hash: c/aisaFEtBrV0ziTzS02DJIQMo6zv6qqv47xcHQcfNc=)
2: D030482C001011F18942B574406F56BC.roa (hash: sbfrnLF6dkRPUD2i2wrrg7/6Vn8Z0is3ukK/xyl/U6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133BE, serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Validity
Not Before: Apr 17 08:27:13 2026 GMT
Not After : Apr 24 08:27:13 2026 GMT
Subject: CN=69e1eee1-2baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:cd:8a:a8:67:1f:5a:cc:bf:da:04:eb:d5:
ab:7b:5c:cf:4b:72:eb:3e:3b:15:d6:0a:f5:f4:98:
ad:d4:18:2e:5b:80:38:1c:4a:dd:51:c0:d7:cf:4e:
17:a9:ef:6f:d9:78:09:e9:2f:ad:fb:f2:21:28:68:
25:0e:6f:96:6d:d5:1c:5c:b3:6c:93:0a:d3:c4:ca:
88:af:a8:b7:09:e2:38:5b:7f:88:70:00:f7:16:e2:
68:42:1c:9c:78:78:6d:45:bf:3c:c1:ed:c8:1c:72:
ff:b3:55:99:13:03:7a:4b:25:95:79:2d:de:e4:c7:
37:4c:db:13:14:4d:d5:a8:4e:a4:ef:31:73:25:12:
06:7e:27:9f:e3:24:76:78:ed:67:e9:4c:e7:7b:54:
fc:71:70:8d:42:5d:37:09:90:cb:b9:85:8c:12:89:
eb:95:c9:38:67:91:71:c0:04:c3:0c:66:fb:da:f7:
70:c7:85:00:04:7d:9a:36:77:86:f1:aa:7f:ca:7c:
cd:e4:09:a1:76:1b:08:66:e3:cc:f2:fc:25:bb:0c:
2e:48:1a:27:5c:2f:a5:bd:74:8b:f0:ee:0c:6e:cc:
de:c7:3f:af:08:59:7e:ce:eb:e0:d3:fb:e4:b5:95:
c2:64:85:ed:de:8f:83:f0:69:71:fe:e6:8b:79:06:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:9F:CA:17:92:9A:E3:40:73:CF:86:35:1E:4C:A1:BB:0F:73:F4
X509v3 Authority Key Identifier:
keyid:FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:ba:93:bd:bd:d3:0d:84:17:a4:b5:49:53:f1:26:78:97:
05:64:dd:fc:66:85:42:d5:e9:d6:bd:1f:0e:ef:60:cf:7c:49:
b9:7d:5e:c9:36:67:bb:80:51:cf:00:0f:2c:18:1b:c6:93:9e:
63:65:bc:34:33:30:44:32:e5:6b:16:58:a7:c9:df:c4:9f:07:
ef:0d:c9:ad:7a:e5:be:b1:42:2c:fe:64:ae:47:4b:e6:ba:dc:
4d:01:53:06:c4:b4:65:e2:bb:4c:63:5a:2b:99:08:d2:d5:65:
4b:38:f3:29:28:41:a2:31:8b:7b:82:f5:cf:29:2f:f8:f8:b1:
99:95:52:0c:2d:39:60:08:a4:e0:33:5d:66:75:33:6a:ba:c2:
5e:f2:4b:ed:2b:b9:08:57:05:dd:22:4e:75:db:f2:7a:6c:7d:
d8:6b:cf:f3:31:43:92:df:a6:61:a6:55:06:1b:39:70:cb:2c:
b4:6b:52:91:f3:b8:b5:50:b7:a7:0d:10:5d:75:38:1e:91:2b:
f0:03:b7:95:5f:e7:eb:5c:cb:94:f7:5d:36:bc:0a:74:22:89:
7f:e0:64:a6:b9:d0:51:ae:b4:d3:1b:15:b7:71:fb:dc:76:34:
1a:e2:3b:28:f7:ad:3b:7d:04:92:be:15:24:cc:5a:8c:e7:7a:
b8:39:e1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:51 2026 by rpki-client