
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
File: S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft (raw, json)
Hash identifier: NMc296H1gBjsBl6IEfznsbCdKzAmoZRCtxdhWmLYlLY=
Subject key identifier: 49:32:32:D0:A9:FB:ED:17:70:43:30:C1:AF:80:7A:12:46:A2:3E:07
Authority key identifier: 4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
Certificate issuer: /CN=A91A40AE/serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Certificate serial: 034E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
Manifest number: 0349
Signing time: Fri 17 Apr 2026 00:51:41 +0000
Manifest this update: Fri 17 Apr 2026 00:51:40 +0000
Manifest next update: Fri 24 Apr 2026 00:51:40 +0000
Files and hashes: 1: S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl (hash: 4Ve8Eb6o9U0mG8LVSM40hmmXUy854hVqMQJ3ImgTYWc=)
2: 0C2902B4FC3D11ECAD619C35C4F9AE02.roa (hash: 0G8y890AV8+X2YlEAcmnQRZ33GxT1e5vDg0b+sSexQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A40AE, serialNumber=4BDD5606CEE3838731B276EB5AE2740955E6E835
Validity
Not Before: Apr 17 00:51:40 2026 GMT
Not After : Apr 24 00:51:40 2026 GMT
Subject: CN=69e1841d-3640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:53:41:4b:9a:07:1e:60:a0:f5:ea:dc:6b:
fc:17:c3:2b:1e:aa:d9:bd:d8:8f:c4:b6:83:f4:6f:
55:56:04:c4:79:f7:82:b0:57:d4:67:1f:b9:24:29:
09:29:8a:b0:87:bb:15:a6:f0:19:75:3b:f6:9a:7d:
f9:fc:df:61:95:51:49:dc:0b:6c:71:19:8a:c7:03:
46:cd:a2:8b:9b:a7:f0:52:e3:42:a1:db:b8:5d:a0:
ea:e4:bd:b5:d2:a0:9d:95:0e:a7:3f:74:f6:72:af:
b4:76:17:c7:51:7b:33:c2:cd:18:29:61:27:c6:36:
e4:a6:31:c8:b2:37:f3:78:0d:b9:69:c7:fa:59:8d:
76:4e:65:c4:76:a1:95:5b:b4:f5:02:e0:ed:d5:4b:
f7:a7:7d:9c:5e:22:0e:9c:f7:f7:7b:8a:13:19:13:
84:14:4a:c3:12:3c:8c:d5:a2:c5:e1:be:f4:53:a1:
dd:d1:ce:ee:6f:30:1c:c0:69:57:02:dc:75:0f:4b:
e3:20:b5:0f:f5:08:14:c8:8c:c9:a6:91:64:46:8f:
4a:e0:68:7e:09:27:fb:2e:51:48:7d:c9:46:45:23:
98:51:a4:ab:5d:9a:05:2e:47:b8:dd:d6:3d:44:64:
89:19:1d:0d:43:67:09:7d:67:c6:e8:21:be:7c:95:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:32:D0:A9:FB:ED:17:70:43:30:C1:AF:80:7A:12:46:A2:3E:07
X509v3 Authority Key Identifier:
keyid:4B:DD:56:06:CE:E3:83:87:31:B2:76:EB:5A:E2:74:09:55:E6:E8:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S91WBs7jg4cxsnbrWuJ0CVXm6DU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A40AE/86215FD0FC3811EC9D1AA71EC4F9AE02/S91WBs7jg4cxsnbrWuJ0CVXm6DU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:af:69:1b:5e:80:ef:cc:8a:8e:c8:05:22:e8:63:c7:fa:b1:
6e:c8:71:e1:5d:80:08:ba:ac:fd:58:d0:e9:da:03:1f:8c:6f:
f8:3a:a4:a3:62:e2:96:0b:7d:ec:69:db:67:a1:1a:18:ca:0f:
d4:6e:62:1d:c2:2d:49:45:d8:ef:ec:3d:49:bc:29:b4:49:bb:
9b:b7:dc:81:73:87:20:ac:3d:2f:37:28:12:62:0b:33:13:25:
4d:33:6a:28:b7:bb:66:87:0f:1d:56:60:be:f5:ca:1f:3d:6b:
c8:b7:45:99:b6:f5:a4:22:90:73:28:b1:68:63:8e:8f:5c:54:
29:58:c9:f2:43:ec:0f:59:b0:05:6a:77:a0:c4:e4:1e:2b:38:
9c:41:43:2d:ff:a5:0e:93:a1:8e:1e:af:9a:de:04:9b:47:8e:
7b:ef:0b:85:51:c0:dd:bf:d5:59:ee:3f:69:2d:46:51:cd:e2:
0d:36:9a:34:f7:7d:78:41:f5:c1:fa:5c:87:98:77:f2:7a:a2:
1a:62:1b:dc:17:f3:50:fe:0e:13:fd:66:dd:4c:7c:9f:19:18:
ff:18:35:52:a3:78:ab:c8:e7:ba:1f:be:e1:8b:7a:ce:3f:69:
58:91:7f:9d:86:36:01:ae:97:b3:21:81:5a:27:cb:0e:69:b7:
bb:b2:b1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:52 2026 by rpki-client