
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json)
Hash identifier: WhCLc8BU6mVD/xaKZqK7VXCd+/x1KUzT7At3fCmotQk=
Subject key identifier: 96:82:66:A5:CD:85:D2:7D:DB:1D:32:82:0D:8B:43:F9:D6:F2:C1:2B
Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
Manifest number: 01DD
Signing time: Thu 16 Apr 2026 23:11:09 +0000
Manifest this update: Thu 16 Apr 2026 23:11:08 +0000
Manifest next update: Thu 23 Apr 2026 23:11:08 +0000
Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: ACw0jcwQfz8JUEQ9wBwjHB60PqLNdgC4ch265R1ucps=)
2: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (hash: eMoNWFAjlk42wYo90tOjaYJfYKyeXSPXFsOpwUhELOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Validity
Not Before: Apr 16 23:11:08 2026 GMT
Not After : Apr 23 23:11:08 2026 GMT
Subject: CN=69e16c8c-870e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:82:c1:a0:17:58:2b:9c:32:86:0c:73:29:
71:94:3d:d0:6b:31:02:5f:42:6a:b1:b4:78:78:8a:
f9:88:08:81:7b:b8:0d:ee:2c:b9:7a:ee:63:28:92:
ac:8f:b8:e5:e1:25:41:63:8d:55:c9:59:ca:ba:37:
b3:80:31:90:0d:7d:04:c8:30:51:3f:9f:ca:bf:06:
56:70:96:74:df:b5:44:72:ce:57:4a:c2:2d:a7:82:
27:1c:42:b2:07:2f:b4:a0:8e:95:b3:29:d9:96:83:
07:b4:4d:3c:f0:f8:ff:38:e8:cd:75:69:fc:f7:3f:
3a:ce:81:10:1e:d0:6c:6a:33:83:a4:74:30:69:20:
37:46:5d:f2:88:53:22:f1:a1:73:df:f4:98:b7:6d:
0a:38:3d:a5:8f:60:dd:60:50:ae:63:91:ae:b6:f3:
70:09:7f:7f:ab:9f:64:47:67:e3:90:ae:46:44:4a:
be:b5:7f:2b:1a:11:42:be:c2:ed:de:52:c6:f7:5d:
f9:68:3e:e9:25:b8:1f:78:45:b8:5d:8d:5d:59:df:
ee:cc:3e:23:11:30:1e:50:d8:74:4c:5d:b0:dd:19:
d5:81:22:ab:5e:71:1b:90:60:45:30:a1:f9:9c:a0:
7d:00:ba:1f:9c:b4:fa:cd:65:e4:d8:49:5c:46:6c:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:82:66:A5:CD:85:D2:7D:DB:1D:32:82:0D:8B:43:F9:D6:F2:C1:2B
X509v3 Authority Key Identifier:
keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:8f:72:d9:1e:93:43:b8:db:a2:8e:5a:a4:70:27:26:73:
ca:91:16:04:dc:10:aa:f4:e1:84:89:89:bc:0e:dc:c7:a6:b7:
5d:fc:53:59:94:25:34:70:a2:2b:e7:5b:bd:87:7f:2c:be:95:
7c:fa:07:f8:3f:de:73:2f:ed:46:1b:b3:f3:b0:b6:eb:a6:fe:
b9:33:77:30:6c:07:2f:c3:13:3f:fc:4d:37:cd:7b:02:1b:ed:
fd:2f:48:e5:29:99:28:bf:75:fd:64:2f:1d:5b:37:74:3c:d1:
61:4e:33:95:38:fb:57:8e:ec:47:ca:3f:e1:9f:7d:ca:63:21:
7d:a2:ac:e3:0c:fb:0d:8b:68:da:07:c4:01:d9:57:0e:e5:96:
ef:02:a2:d4:95:75:b2:37:d0:08:85:eb:e3:9e:ee:04:f5:5b:
9a:46:b6:ce:7a:9d:dc:42:94:c0:d5:4d:f3:2a:0b:40:2b:11:
2c:74:e0:79:12:e3:73:5c:1c:06:db:25:96:f3:38:72:8a:d3:
45:67:69:5d:6d:4d:39:20:42:3f:24:27:5a:3b:50:b6:75:19:
e0:2c:f3:fc:97:c6:9b:47:25:71:b1:50:23:32:ae:ad:e3:36:
8d:cd:42:5c:a4:a3:66:27:28:58:9e:97:d9:6a:9f:0f:1e:ea:
79:50:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:40 2026 by rpki-client