
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
File: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft (raw, json)
Hash identifier: Ik+Ob9BxklnrCDvesfie3RH0Dtru6LLnuIf8W8DPWSo=
Subject key identifier: 4D:02:B3:BF:37:93:BD:1E:4E:66:49:36:FB:E9:61:A9:82:20:DE:38
Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
Certificate issuer: /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
Manifest number: 4A
Signing time: Thu 16 Apr 2026 04:31:41 +0000
Manifest this update: Thu 16 Apr 2026 04:31:41 +0000
Manifest next update: Thu 23 Apr 2026 04:31:41 +0000
Files and hashes: 1: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl (hash: Zm2JtUsxIJ8Je6VG2t6GUCTyEHGJDPB8QuZYOwMPmCA=)
2: C50D496ED01711F09F944781C4F9AE02.roa (hash: uFv39uSSaT436HVJNG6HonRgD8h69dX/W5dSzZ3uUCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 04:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Validity
Not Before: Apr 16 04:31:41 2026 GMT
Not After : Apr 23 04:31:41 2026 GMT
Subject: CN=69e0662d-d615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a7:0b:72:4d:57:c6:2c:0a:cd:88:ae:24:49:
04:65:88:ef:31:96:bb:22:46:82:c9:b9:ec:11:05:
a6:7e:91:32:7c:6f:59:2d:f1:58:18:68:40:80:3f:
c7:e4:28:1e:cd:b4:8c:76:33:05:4f:6c:5d:2b:58:
ab:b0:27:b5:d9:7d:2a:75:1b:ea:72:21:1d:73:1e:
70:7a:19:20:c1:84:6d:93:97:ec:15:8c:0a:82:42:
5c:3b:45:a4:fd:08:16:49:4e:06:cd:f7:9a:51:e6:
79:7b:b1:7c:77:21:df:e4:ac:dc:88:be:52:2b:fe:
73:15:0d:03:27:18:8c:02:5d:e2:74:1f:d7:44:91:
87:13:03:30:6e:6a:7b:e8:e8:20:b5:6e:2b:35:e0:
c9:d1:82:28:2e:58:19:8b:4e:02:7e:b7:ba:f4:5d:
98:43:a2:88:48:4a:a5:0d:d8:88:1c:1c:58:8f:52:
a8:c0:72:3b:97:78:f5:fc:2e:9c:d9:df:73:f0:eb:
b7:77:ad:77:de:69:ce:ac:40:11:e6:4f:29:63:8a:
eb:e0:9d:ff:9e:d3:01:ca:c8:2e:4e:c3:62:2e:b8:
e5:59:2c:44:c4:7d:50:c1:f2:23:79:b3:b8:19:f6:
99:62:37:15:d1:54:29:e7:4d:02:00:80:3f:52:04:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:02:B3:BF:37:93:BD:1E:4E:66:49:36:FB:E9:61:A9:82:20:DE:38
X509v3 Authority Key Identifier:
keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8e:16:db:39:ed:64:e7:8c:89:c8:32:98:44:63:94:82:1c:
cc:26:44:1b:ec:5f:96:3e:42:e1:ce:1e:95:74:ca:38:f8:e4:
a0:12:36:bc:7b:02:10:b7:f3:dd:37:14:da:39:9c:b3:bd:e4:
83:d6:ac:11:9b:36:78:43:e6:f7:6e:05:3d:a5:17:0a:95:5a:
fa:62:93:91:5a:7a:c6:6d:5d:d2:9a:d9:8a:ca:b0:15:bc:a0:
9c:5f:0a:f3:82:ca:97:86:6c:04:c6:ea:ca:14:2e:10:e6:9a:
e2:8b:13:81:a2:62:73:e5:cd:4f:5d:c9:a2:95:3f:70:b5:ca:
ba:4a:e7:70:31:ca:6d:2e:bd:84:b2:db:b3:87:f0:db:67:3e:
6a:1f:4a:b5:0b:b6:c5:a1:0e:6a:dd:2d:52:22:fa:94:36:47:
13:55:a9:d1:50:ad:d4:a2:a2:7f:91:89:bf:8d:8c:47:f2:3e:
7d:ed:45:2d:25:61:ee:c9:b2:83:5a:02:fb:7e:01:74:40:be:
50:a0:f2:9b:27:1a:c3:32:f4:3c:96:1f:ce:6b:08:72:0c:7c:
b5:94:b6:a8:69:bf:61:72:95:7b:45:49:34:ab:79:1a:fa:38:
ce:f1:0f:e8:18:d9:15:00:b7:4e:f1:c0:2d:6c:67:69:32:ef:
39:df:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:17 2026 by rpki-client