
$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json)
Hash identifier: XuCBlQDlH99DbJ1bAjzx1UvgXPom9mM0hlTzutmTbkc=
Subject key identifier: C1:87:25:A2:01:19:84:30:69:1E:B8:B0:E8:F5:93:52:33:17:18:43
Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
Manifest number: 0190
Signing time: Fri 17 Apr 2026 04:06:59 +0000
Manifest this update: Fri 17 Apr 2026 04:06:59 +0000
Manifest next update: Fri 24 Apr 2026 04:06:59 +0000
Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: KKgAr8bsmyI1LXbx4o95FdwlqHg8KeHG/oWASkY1D7A=)
2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: /nSONda3h8Q8eZ5jy2F36VmYz3WvK3T5pKue5DyH0zM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl
rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213
Validity
Not Before: Apr 17 04:06:59 2026 GMT
Not After : Apr 24 04:06:59 2026 GMT
Subject: CN=69e1b1e3-1cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:23:7b:03:d4:14:35:54:29:71:78:2f:2b:
1a:31:0d:91:6f:83:fa:98:3b:8a:86:34:18:7b:6f:
c9:45:90:61:a0:43:0c:18:c5:4c:0c:af:23:46:a6:
74:6b:ea:71:d9:5a:ae:03:7a:96:eb:60:60:e8:33:
c8:e4:00:c1:b2:4c:10:0b:4b:56:2b:cf:68:e6:79:
12:87:3e:39:a9:5f:61:aa:89:b1:82:aa:0c:48:49:
d9:88:ab:fe:ad:0f:7a:98:79:e6:11:db:c1:e8:f9:
49:c5:24:fb:97:e8:fe:4f:0c:e4:50:85:0e:88:9b:
86:b9:e3:6d:be:02:27:fd:25:b0:ed:ec:b2:fc:ae:
ae:51:3e:2a:ed:d2:65:ba:c9:52:bd:9d:da:75:3e:
14:b9:18:2c:f8:aa:ff:5b:37:51:39:46:96:37:47:
c5:34:55:0f:e2:f8:a3:91:cc:93:05:bd:04:15:69:
5d:3e:5e:43:90:5b:6f:81:bb:de:3e:b9:ab:08:d6:
ad:19:b1:8e:fb:5a:ed:03:3a:68:e4:0c:b7:40:14:
f3:f9:04:10:ec:cb:75:86:7d:76:1d:f0:a7:64:6b:
45:e8:fe:8c:89:5e:93:18:ca:76:13:02:bc:2e:9c:
1a:31:0f:69:b2:54:68:00:f9:bd:db:00:f5:24:e3:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:25:A2:01:19:84:30:69:1E:B8:B0:E8:F5:93:52:33:17:18:43
X509v3 Authority Key Identifier:
keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:97:3c:f4:ad:16:79:80:17:12:90:9a:47:5d:0d:5c:e6:3e:
68:23:10:27:48:19:59:dc:37:c4:40:01:89:12:1f:73:49:4b:
e4:b7:f0:f9:49:1b:fb:77:71:a2:5f:29:2a:e4:a4:1e:2e:5b:
06:ff:aa:f7:7e:1f:22:a2:44:0b:23:50:80:a2:d2:ad:87:c8:
64:69:f4:0b:23:ab:7f:39:07:49:8c:9c:db:b0:63:2f:70:9f:
d1:67:07:fd:1f:62:fa:7f:49:00:f4:68:e9:b1:ad:9c:19:eb:
0b:79:27:0c:da:44:1d:bb:d1:b7:4f:57:4b:60:b2:eb:6d:f8:
55:27:15:cf:b7:a0:0e:c5:bc:48:8b:58:e4:f4:9f:ac:03:0e:
d1:d0:f6:14:5b:ec:95:37:82:37:2c:ae:7f:72:2b:ba:81:2f:
16:78:c1:63:24:97:67:16:c5:fd:b4:6a:d5:db:c8:8f:55:78:
c8:9d:60:c8:fa:8b:aa:49:d0:75:f6:f6:1d:d2:45:c8:80:3f:
35:de:ba:f2:4d:c6:aa:b1:b3:1b:6c:75:fa:0c:9d:9d:a2:48:
da:04:f9:af:52:a8:eb:fa:dc:ae:fb:1d:20:b0:52:b6:1c:d3:
50:7b:66:9b:66:b4:dc:bd:51:2d:61:dd:67:51:4d:13:e1:64:
9f:9d:ca:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:05:04 2026 by rpki-client