
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier: XuqEU7fUt4HRUgVr/Db6jwg6gs0RmfjaE41G3D464KE=
Subject key identifier: 62:29:AD:F7:ED:A6:68:61:39:DF:D5:E0:69:4B:21:9D:5A:E4:DD:73
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial: 24CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number: 4872
Signing time: Thu 16 Apr 2026 15:44:30 +0000
Manifest this update: Thu 16 Apr 2026 15:44:30 +0000
Manifest next update: Thu 23 Apr 2026 15:44:30 +0000
Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: XaKt3YFTFxEo4riqK/8ULzq65hGCq1QJ02+iRPSZOJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9420 (0x24cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Validity
Not Before: Apr 16 15:44:30 2026 GMT
Not After : Apr 23 15:44:30 2026 GMT
Subject: CN=69e103de-23e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:97:ab:fe:62:e8:de:b4:f2:d6:66:c2:5f:
2a:55:da:01:52:31:d3:d8:b6:9a:6e:19:7f:03:e5:
a9:7e:72:16:2d:12:9f:76:cf:46:e5:2c:dc:c7:67:
88:d9:1c:91:0b:8c:9e:09:d3:87:ed:68:1c:27:bc:
18:5d:33:53:24:61:28:72:46:9f:d4:b3:d6:74:37:
8c:8d:45:8e:11:e2:ef:a5:96:8e:c3:f5:35:dd:04:
94:e7:64:b1:1a:7f:bf:87:a1:39:4d:ab:ac:93:b4:
bc:2d:11:44:5f:ae:8a:0a:2d:d7:54:26:bc:33:10:
fa:19:ab:39:78:0e:09:6d:5d:90:b0:70:89:a8:24:
ef:3f:95:2c:21:f4:34:e9:be:a2:16:85:ca:6e:44:
ad:ff:fc:fa:b3:a5:90:f5:bb:89:4d:f5:3d:c9:d6:
db:60:b4:a4:b9:c1:c5:59:da:4d:a9:de:53:ef:87:
91:12:32:c6:0b:4b:49:ed:d6:25:eb:ee:7c:52:9b:
74:5b:45:b2:ee:b4:2e:2a:d2:2e:c7:d4:68:34:80:
75:4c:ca:43:4f:b2:50:b1:1a:56:6d:dc:0d:52:fa:
c1:24:41:f2:98:b8:7a:4c:f5:cc:66:d8:75:4b:db:
f5:3c:ca:0f:4a:89:a2:d5:a4:c6:54:c9:16:54:1e:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:AD:F7:ED:A6:68:61:39:DF:D5:E0:69:4B:21:9D:5A:E4:DD:73
X509v3 Authority Key Identifier:
keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5e:69:7b:a2:1f:2c:10:79:e9:2c:30:c7:74:bb:86:4c:15:
8d:52:17:3d:c0:8f:69:e6:d9:17:b7:14:91:44:f5:b1:d2:f9:
81:01:a6:8d:9b:9e:4b:de:87:35:31:a0:23:13:f3:fe:cf:d4:
c6:ed:4b:1a:17:53:b0:71:e9:c1:9c:72:19:30:0b:eb:5d:6f:
2f:e1:30:1b:6e:52:ba:ad:6b:ce:3b:10:14:9c:37:d5:bf:16:
be:dc:d2:e2:89:ce:2a:b3:54:02:fc:e1:61:6b:8f:72:ff:11:
5e:6d:fd:88:40:90:6e:3c:f9:8e:c1:8f:96:e0:5a:48:6b:70:
54:c8:7f:26:76:16:8e:55:7b:e4:da:c8:7b:4a:3b:a4:dc:c7:
2d:a6:26:2d:11:b6:e6:c7:45:50:fb:f3:00:96:47:e6:ae:45:
f1:cd:d2:66:61:c5:7a:fa:19:fa:e6:1f:ed:2a:bb:9a:0e:d4:
26:b5:a8:70:de:12:09:67:c4:da:5e:ba:9d:51:8f:1a:d1:c0:
df:f8:64:44:62:c9:7a:17:4c:28:e1:26:53:b7:f0:93:13:50:
e7:57:7b:27:f0:52:b9:c8:53:4d:4c:bc:8f:30:72:44:68:81:
77:ae:56:47:74:aa:e1:9d:c1:b9:e4:8a:ed:c7:de:87:b7:64:
fa:c6:36:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:07:54 2026 by rpki-client