
$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File: 4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier: H/qXHpq7wZB6YBHgJ7Zcm/qPMDNRpZg6sMgAlZ4WCHo=
Subject key identifier: C0:15:A0:34:04:32:6A:24:CD:3E:2F:9C:FF:DA:9C:E8:3C:F6:F0:6A
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer: /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number: 16
Signing time: Fri 17 Apr 2026 08:42:33 +0000
Manifest this update: Fri 17 Apr 2026 08:42:33 +0000
Manifest next update: Fri 24 Apr 2026 08:42:33 +0000
Files and hashes: 1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: GhFmHph9R8Evrx/64/K9TWh5AQ1n4k4p07fbEZMsqXI=)
2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:42:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Validity
Not Before: Apr 17 08:42:33 2026 GMT
Not After : Apr 24 08:42:33 2026 GMT
Subject: CN=69e1f279-a9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:f4:f4:f0:18:ab:a0:a3:69:67:56:7b:8f:
fe:a5:8e:8a:b7:a3:69:59:98:97:c2:fe:c6:4e:91:
91:01:d4:a9:58:2b:ab:35:dd:12:13:6c:31:cf:be:
ec:54:f0:3d:21:13:98:19:30:b1:8b:e2:28:23:f7:
b6:d5:85:28:7c:ed:06:3f:c8:37:9e:b2:89:a4:7e:
31:4e:30:20:27:b7:12:b5:92:77:12:c4:a8:69:77:
b7:8b:a8:c6:8a:fc:ce:4a:17:ca:b1:10:7c:be:1f:
e3:7f:a2:15:44:49:47:cb:ce:6f:bc:e0:98:7d:a3:
9c:99:ad:74:53:74:8d:dd:61:b5:f7:e3:e5:9d:c8:
fb:d4:6c:5a:a1:c9:d4:0c:35:fb:0a:28:8c:62:7a:
62:5d:6e:37:c8:4d:8b:1d:d3:66:5b:3c:c6:69:0f:
c0:7d:26:70:a3:83:3c:91:bd:fb:85:13:3f:04:04:
cc:e6:4c:9c:96:3f:62:0a:da:de:90:c9:de:6e:e6:
1c:20:50:72:d0:32:80:2c:07:39:8f:56:14:9c:f0:
6a:5a:b9:85:0a:c4:97:c3:d4:01:fb:84:86:45:99:
c1:82:ed:12:bb:ee:47:c5:28:c1:8c:f9:d7:f7:47:
ae:42:c8:53:67:35:2e:d2:9d:d0:eb:77:d6:cb:3d:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:A0:34:04:32:6A:24:CD:3E:2F:9C:FF:DA:9C:E8:3C:F6:F0:6A
X509v3 Authority Key Identifier:
keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:5a:a6:3d:d9:e9:2c:4c:f1:b5:d0:8a:79:fe:18:74:bb:
26:3c:ae:a0:86:d3:3c:53:07:54:80:c2:e8:dd:06:24:e9:5c:
8b:2a:19:5d:9e:cc:95:df:69:09:63:ae:b5:43:b3:50:fa:42:
33:a2:36:6a:2b:bb:c4:8d:7f:f8:8f:4e:9f:cb:de:16:7a:9c:
8c:68:0f:62:4e:05:30:cc:f5:67:f8:35:c2:6b:94:73:ae:bf:
5b:27:d9:46:38:40:fb:2d:a6:b7:a2:9c:9f:7c:8b:15:8a:d9:
68:0f:eb:77:68:f9:58:d3:6b:4a:72:32:c5:8d:93:55:48:d7:
ae:0c:3f:d4:c4:65:85:6e:38:37:27:b7:14:1f:45:0e:d9:82:
74:5e:c0:5b:aa:56:0f:e6:3a:e1:3c:14:d0:56:08:b5:7e:38:
1f:a4:16:64:e3:85:85:71:21:84:44:65:c1:7d:e8:b0:c7:51:
1a:0e:30:bb:99:5c:7d:d3:2b:81:3c:41:a8:3d:b6:6f:85:aa:
3c:a7:76:b4:46:4a:86:44:9e:76:94:bc:ca:bf:74:26:df:2b:
4a:91:16:ff:f4:90:1e:0d:eb:ec:01:ca:89:68:c4:ea:91:dd:
77:2b:b6:ec:7b:a5:72:1e:57:20:97:39:4b:97:f0:bc:90:81:
7a:46:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:26 2026 by rpki-client