
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json)
Hash identifier: E/MoCSQm20PaCzcw56wUw3hNdX3km8VxZb84YEZjay8=
Subject key identifier: 28:45:4B:0B:1B:66:DB:27:D1:12:22:D3:4C:9E:2B:39:4E:AC:DF:53
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0E49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
Manifest number: 0E26
Signing time: Thu 16 Apr 2026 17:45:44 +0000
Manifest this update: Thu 16 Apr 2026 17:45:44 +0000
Manifest next update: Thu 23 Apr 2026 17:45:44 +0000
Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: cGXGPXSosruXhMHe7KQG6cZQQX+BQSMqg+p8SCyOQoA=)
2: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: GBvJaOYF1545b8b+gOGrGQUjqqr8+5hiMjlmvxSFrPM=)
3: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: nJEq5dcjdbygkdzbWZ20NZb/kFcLm8+8wcWhp21gyU8=)
4: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: qBZYKamMj/oDU4E6eK9pTMccppq/DCgF8vxu2spcuiw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3657 (0xe49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Apr 16 17:45:44 2026 GMT
Not After : Apr 23 17:45:44 2026 GMT
Subject: CN=69e12048-a544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:28:7a:fe:c6:e3:10:70:a2:93:2a:6c:0c:
e3:23:3c:22:0e:05:03:02:aa:c8:bb:57:57:6b:cd:
f2:96:b4:e8:19:fa:55:95:8f:f6:d5:eb:1e:eb:b8:
d6:9c:94:2b:4c:ed:f0:9d:bb:31:71:91:82:43:13:
5f:80:36:13:36:e8:a7:65:2e:14:08:9c:4d:47:88:
0e:5b:0a:3a:19:a9:52:1f:f0:18:2d:05:66:fd:c0:
e8:8f:ea:b9:8a:94:07:65:30:40:c9:c8:7f:4f:c3:
00:eb:37:2e:73:ae:d8:d0:3f:26:2d:4e:2d:86:95:
2f:fd:8b:7f:04:a5:4b:dc:68:2e:c6:dc:33:48:68:
08:f3:f6:b9:5f:cd:69:f5:0e:cb:30:ff:20:3e:96:
f9:08:aa:ae:f4:7d:90:51:40:d2:e2:d3:31:3a:e9:
da:18:4d:cf:ff:c2:46:1e:e3:10:23:d1:0a:ee:1d:
ec:82:b8:be:12:1c:a6:a9:c1:1d:b7:39:e4:75:4a:
83:67:01:f0:b4:8a:fe:b3:f1:22:c5:42:b9:73:b8:
fb:c5:ec:5b:60:b5:ef:5d:28:da:35:4d:dd:c6:a1:
5b:48:d4:96:d7:ee:c3:b2:3a:7f:11:c9:a4:a9:c6:
e4:a6:a5:76:bf:e6:f9:6e:c5:51:e5:6c:7d:6f:7a:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:45:4B:0B:1B:66:DB:27:D1:12:22:D3:4C:9E:2B:39:4E:AC:DF:53
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f2:9e:1d:4f:8c:3b:5d:ab:77:e6:ab:86:d8:42:bb:00:3b:
eb:27:c6:ad:21:7c:3a:66:a7:fa:46:ea:82:07:20:26:b4:c9:
53:1e:78:78:cd:ff:cc:f9:fb:0e:df:ed:8c:40:11:3d:8f:14:
c8:82:3a:9e:8e:c7:74:32:ee:aa:12:cf:63:81:e3:17:a2:ac:
31:22:be:ac:05:a3:6b:4d:d6:ac:60:80:c0:78:07:ad:5b:12:
f0:fd:77:7f:61:2a:c1:f5:03:66:2c:62:ff:b2:56:e7:3d:25:
10:9b:32:4d:fb:e0:7a:ad:c7:06:59:ef:d5:90:01:14:00:a4:
d3:cb:59:08:48:d6:b8:2b:b3:44:ad:63:36:02:19:64:fa:a6:
b4:8e:8d:0b:8e:14:06:75:c0:bb:c8:62:f7:0d:4e:26:15:b9:
79:9b:01:83:ce:be:7d:3c:b1:d2:5d:d5:fd:65:90:da:de:eb:
0d:1e:77:04:82:f9:dd:f8:19:79:97:4b:1d:99:ac:bf:26:2a:
b0:46:48:7f:8b:85:ce:d9:df:da:f9:09:34:dd:11:b7:54:ab:
b5:5a:4d:93:e4:5a:91:46:97:38:dd:47:f6:96:87:a8:42:b5:
fc:2b:52:d9:c3:89:57:05:7d:78:77:8d:7f:ec:6f:30:e1:3d:
f6:54:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:06 2026 by rpki-client