
$ rpki-client -vvf rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
File: M_vQn8uwMstkN8-6pg9cH6xVob8.mft (raw, json)
Hash identifier: Ms1D/kCuOdHnk+OOvA9dUN+v4deHjI7IGzJzsXBx19s=
Subject key identifier: EC:66:EB:A6:A8:1A:9F:FD:8E:5E:80:F0:59:9B:52:DD:FA:B0:06:C8
Authority key identifier: 33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
Certificate issuer: /CN=A91201EE/serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
Manifest number: 49
Signing time: Sun 19 Apr 2026 07:59:48 +0000
Manifest this update: Sun 19 Apr 2026 07:59:48 +0000
Manifest next update: Sun 26 Apr 2026 07:59:48 +0000
Files and hashes: 1: M_vQn8uwMstkN8-6pg9cH6xVob8.crl (hash: kv8LzQnToze3wvelcdK/mFXm2J8NZm62QgJ0iLSoBY0=)
2: 5922C8E2DA7011F095E8A22F9BD3641D.roa (hash: XJ8M9A8mI6SrwXUmjGLeL6tg84g5T3IN8OttgBdZuFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91201EE, serialNumber=33FBD09FCBB032CB6437CFBAA60F5C1FAC55A1BF
Validity
Not Before: Apr 19 07:59:48 2026 GMT
Not After : Apr 26 07:59:48 2026 GMT
Subject: CN=69e48b74-5dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:b0:bb:cb:40:41:d9:5c:4e:f2:23:b3:b7:
f0:62:4d:29:15:c8:a6:47:89:ad:1d:d6:38:da:3a:
25:2d:ec:37:1e:e6:8e:7a:8d:5e:11:b6:17:1d:ef:
06:4d:cf:7f:09:66:13:e7:f9:42:51:86:6f:24:1d:
86:28:c9:b5:db:79:05:7f:eb:e6:f3:cf:af:6d:f2:
18:7f:21:57:39:fd:de:cf:97:25:1f:77:2a:ef:ff:
bd:6c:83:fa:4a:45:fc:32:22:7c:13:ef:de:8e:5f:
4f:1d:1b:f5:33:96:a8:7e:6f:61:f9:4e:a6:8e:8d:
88:27:64:42:3f:f0:b1:23:5a:c8:20:a1:3d:8e:ee:
55:62:c3:02:18:c3:3e:13:07:45:0e:02:24:a5:5e:
b1:a5:fc:21:3c:e5:ae:e3:06:2e:30:b1:c0:af:65:
4d:b3:8c:63:51:a6:25:be:3e:02:a1:7a:0d:5e:98:
14:b0:c3:ec:1d:01:51:be:04:da:28:5b:90:d8:92:
a8:1b:9f:a3:c9:65:3f:e0:b9:f7:74:a9:d0:0b:f7:
6c:d8:fb:8a:a3:94:a5:61:e1:e1:77:b5:00:5e:e0:
81:2b:52:03:68:eb:46:26:69:84:e6:5b:d7:d2:54:
da:e2:ec:4b:d7:3f:9c:d7:3b:5e:79:3f:43:e9:09:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:EB:A6:A8:1A:9F:FD:8E:5E:80:F0:59:9B:52:DD:FA:B0:06:C8
X509v3 Authority Key Identifier:
keyid:33:FB:D0:9F:CB:B0:32:CB:64:37:CF:BA:A6:0F:5C:1F:AC:55:A1:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_vQn8uwMstkN8-6pg9cH6xVob8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201EE/CCB85142D74F11F08CDF14BC6DD3641D/M_vQn8uwMstkN8-6pg9cH6xVob8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:17:5b:7e:90:43:87:e8:ad:db:e2:62:3d:2f:ba:7c:fb:d2:
46:9c:c1:78:42:ba:b7:80:0d:0c:fd:ec:86:a0:d8:8e:a6:a6:
1d:12:6a:0e:ad:73:ec:32:ec:fd:38:92:84:09:8b:f8:9d:42:
b1:85:01:45:24:df:fc:ca:fb:75:bb:ab:cd:5c:53:ae:d2:fa:
11:72:86:c6:9d:2a:17:77:7e:be:91:15:17:5f:8b:9a:9d:ab:
31:dc:cd:33:be:81:9f:26:a8:f2:5b:9f:90:a8:9c:b7:ac:8c:
43:6d:3a:ff:18:e2:62:d0:83:b9:e7:27:a7:b1:30:3b:46:9d:
54:b4:f5:f8:3a:4f:11:42:a3:dc:7b:52:e3:a4:7a:8f:13:40:
71:f2:2a:a4:15:61:dd:7d:0b:ed:25:15:02:17:a3:64:51:6d:
c7:69:8c:6e:c6:3e:d0:64:af:11:19:b4:f0:08:57:0e:a4:24:
e5:61:6d:71:33:33:89:cb:b4:69:8e:cd:62:cd:79:8c:60:19:
16:9d:0c:af:26:a9:6e:dc:68:1f:14:f7:eb:f3:1b:ba:74:87:
5f:3d:3a:24:ba:4c:3e:82:51:54:a8:3f:ac:f7:77:fc:41:10:
f6:eb:45:34:5c:c7:e9:08:fb:b4:96:89:68:21:1a:ba:89:dc:
46:fd:2a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:19 2026 by rpki-client