
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier: HjllzSYCfPnp2gMQk8Pui1VlkF/iTy3pjUF2ba17QkI=
Subject key identifier: 03:56:E7:F0:36:1C:1A:8A:C2:E4:DD:51:B5:F6:84:FE:4E:ED:13:02
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial: 0A7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number: 0A6B
Signing time: Thu 16 Apr 2026 19:31:30 +0000
Manifest this update: Thu 16 Apr 2026 19:31:30 +0000
Manifest next update: Thu 23 Apr 2026 19:31:30 +0000
Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: wvbBFQmUWdXMnz0b80eW6bdAsfn9KRfcRX7s+lS/mH4=)
2: 305312F67CA011F098F1673CC4F9AE02.roa (hash: oSLf+ALvc0axyKMKORxabRkQ2yd+wi5i1pJe4n2LdQk=)
3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: 5dWM1aBFZBre348MozCE9BHGCcZ6AZ6XEKKZComnpY4=)
4: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: vIQ6ijY/P5ugAhg4/kXnIXxgsJTlmnXdecL34fGC5qg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686 (0xa7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Validity
Not Before: Apr 16 19:31:30 2026 GMT
Not After : Apr 23 19:31:30 2026 GMT
Subject: CN=69e13912-7435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:54:da:81:65:94:da:a0:79:67:a7:f6:25:
f6:bb:97:4e:4b:7e:e2:ba:dc:75:b1:58:9e:bd:2a:
72:ac:c9:be:d0:40:6b:6d:d6:76:2a:d3:e8:0b:03:
11:20:fe:eb:d0:f1:02:e4:6d:06:b9:08:84:5e:5f:
16:dd:af:c2:a9:3d:90:a0:35:4d:96:6f:85:08:dd:
c3:30:66:62:57:bc:7d:0d:1a:70:4d:7b:b5:03:7b:
69:68:b2:71:7f:88:73:79:37:91:19:c4:3b:77:03:
e6:b2:8e:d3:cc:90:58:59:30:57:d2:48:51:35:e1:
ea:54:f1:26:9e:d6:bb:09:12:db:97:a9:5c:11:ce:
9f:9e:e2:db:c1:78:e4:e5:f9:8d:72:56:64:c0:df:
61:c7:a6:fc:3a:df:58:0e:6e:5b:2d:55:ba:64:e0:
44:81:ac:af:f2:31:f1:85:a7:cf:17:4e:7e:b2:d5:
34:23:87:10:08:6e:27:91:de:ca:d8:21:ba:dd:11:
fc:cb:04:d1:c1:76:cc:0f:41:d8:51:c2:c6:61:24:
a4:37:c0:7c:3e:63:08:1a:d6:2c:28:a2:ae:74:88:
72:4f:03:62:8f:22:8d:19:ab:12:f1:70:94:e9:dc:
a7:af:02:44:99:da:11:c7:d3:05:9b:ed:b2:8d:f2:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:56:E7:F0:36:1C:1A:8A:C2:E4:DD:51:B5:F6:84:FE:4E:ED:13:02
X509v3 Authority Key Identifier:
keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:ec:c7:db:57:21:7d:16:c9:b3:e7:f5:06:dc:81:f2:46:56:
be:b0:c4:6b:c5:1a:a2:e9:05:e4:3f:e9:1c:83:07:05:1c:a1:
23:a8:c8:7d:b7:19:59:cf:27:0c:82:df:e1:dc:75:25:d0:b4:
b5:9d:cb:43:eb:e7:d1:73:27:76:15:81:7d:cd:77:28:aa:f8:
59:ff:eb:8e:aa:e5:e9:0a:9a:9c:40:f4:8c:29:2c:3f:f2:cc:
0a:dc:82:94:f8:c3:af:67:7c:23:73:ae:95:b6:ac:99:ed:1c:
87:f1:48:39:fe:52:c5:05:b4:12:f5:2f:19:4c:b4:e7:3d:af:
f9:73:da:ca:ff:77:bd:56:f7:17:a3:08:42:c3:43:be:67:9b:
5e:3c:c5:e5:ec:21:95:08:93:ef:b0:9b:33:46:f5:95:23:ca:
17:81:86:2d:92:13:db:24:85:dc:35:27:31:42:60:93:34:00:
39:95:46:9d:6a:a5:ed:1a:46:1a:fb:20:f1:17:24:70:18:de:
94:63:1b:ed:71:ca:2b:4f:a7:5a:69:cd:13:ac:be:92:e3:90:
41:bb:04:92:ca:45:d9:f1:19:ea:e8:ee:08:dc:1f:63:3a:0c:
28:46:db:f9:9c:f4:fd:c0:ce:32:f7:60:3d:62:5e:d8:6d:e3:
ef:06:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:20 2026 by rpki-client