
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
File: 4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json)
Hash identifier: BvroSZJZVbQ89ej7ksPm1BZctOBw0LX93/vTZEQpJOc=
Subject key identifier: 6F:EC:B2:76:94:79:69:D0:98:75:F7:16:B3:83:57:8C:A3:58:E3:42
Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Certificate issuer: /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
Manifest number: 0200
Signing time: Sun 19 Apr 2026 02:49:26 +0000
Manifest this update: Sun 19 Apr 2026 02:49:26 +0000
Manifest next update: Sun 26 Apr 2026 02:49:26 +0000
Files and hashes: 1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: mniyTrjBYjMXz7RkTTE4l+cSRiAKhY3Eu7R9RGRff9U=)
2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: ReWfHLKEKoAywYXZiDMOK9dI287S9BEAejTHxvhLN0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8AF5, serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Validity
Not Before: Apr 19 02:49:26 2026 GMT
Not After : Apr 26 02:49:26 2026 GMT
Subject: CN=69e442b6-5585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:35:34:ef:b1:90:fc:16:1e:c3:bc:2c:3a:
22:90:b4:24:e3:82:fa:f0:99:0b:dc:3b:c6:ef:97:
60:f7:7b:f4:f4:85:b4:5b:e3:49:88:73:6f:ba:15:
14:5f:e4:74:56:fb:69:33:b3:f4:77:6d:44:00:04:
dd:ac:7d:48:9e:91:60:9b:08:3c:81:55:ff:84:5c:
82:30:73:6a:49:86:f8:08:fe:83:4e:32:eb:87:72:
2f:97:83:1b:01:05:40:e3:a8:83:da:85:b2:5f:b4:
01:49:1d:ab:f7:94:41:4c:9c:04:10:79:09:21:a8:
b7:2f:07:57:d2:4d:13:e0:1b:c4:d1:d0:c2:6d:09:
a2:3e:84:10:f3:79:d2:af:8a:b6:6d:fc:e6:14:78:
9c:2c:8d:da:76:7c:8b:3a:ba:8d:b6:d4:1d:48:58:
5b:d1:aa:8a:e5:b1:dc:b4:5d:f3:81:24:c9:e6:0b:
53:6a:b1:72:86:ed:17:4f:09:3a:e7:26:a0:0d:e5:
d7:a9:3a:e5:97:03:43:c7:4a:57:8e:bc:75:84:f0:
b8:8c:7a:63:30:ff:90:8d:43:45:be:3c:28:8a:e2:
b3:23:ff:b8:b4:8b:77:23:26:e8:c0:d3:81:1d:c1:
af:18:93:a4:54:71:ff:80:ed:88:70:b8:44:91:77:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:B2:76:94:79:69:D0:98:75:F7:16:B3:83:57:8C:A3:58:E3:42
X509v3 Authority Key Identifier:
keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:82:a1:6e:3f:de:42:48:66:a4:a6:33:a2:e1:b9:8b:d3:97:
a4:20:2a:fa:a5:d9:20:f4:c2:9b:8c:aa:32:6c:a8:17:b4:c3:
d4:83:19:d4:c1:0e:3d:41:f4:11:91:a8:51:90:3f:e2:9d:e4:
c8:27:8f:0d:a9:ee:95:77:39:8c:ab:b9:f2:df:50:a7:61:25:
93:b1:a9:b6:f8:44:dc:74:83:84:f1:33:2c:ea:3f:bb:fd:7a:
7b:50:c9:5f:6d:69:8c:73:88:2f:7e:61:fe:b5:2f:59:77:10:
d5:81:59:ed:11:1f:02:8a:f5:c6:b7:ee:c2:6a:65:79:44:61:
f6:b3:f1:8b:79:88:30:10:5c:d4:68:9c:97:9d:25:33:6f:90:
0a:14:1b:fe:5d:47:24:63:67:2d:b1:be:85:4a:bf:ad:60:0e:
2f:19:1c:2a:8a:3b:ef:0d:69:d4:14:e5:fe:f5:e4:07:c7:ff:
63:7e:1e:30:60:89:dc:85:ae:41:a9:e2:4e:bb:2e:c5:41:f1:
fd:b8:58:97:c4:85:45:e0:4c:0e:02:7f:7f:a4:52:c3:cd:db:
18:7c:6e:17:49:68:f2:70:f9:f1:2a:1e:cd:76:2f:88:0e:5e:
bf:8c:fa:ab:a7:24:66:6e:a5:16:77:54:91:70:18:bf:c2:e3:
f6:33:96:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThBRjUxMTAvBgNVBAUTKEUzNUY3NDE5RDU3MkE4NkY3NkQyRUJGNzgyOUFCNkQ5
RDAzNDA5MDUwHhcNMjYwNDE5MDI0OTI2WhcNMjYwNDI2MDI0OTI2WjAYMRYwFAYD
VQQDEw02OWU0NDJiNi01NTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/M1NO+xkPwWHsO8LDoikLQk44L68JkL3DvG75dg93v09IW0W+NJiHNvuhUU
X+R0VvtpM7P0d21EAATdrH1InpFgmwg8gVX/hFyCMHNqSYb4CP6DTjLrh3Ivl4Mb
AQVA46iD2oWyX7QBSR2r95RBTJwEEHkJIai3LwdX0k0T4BvE0dDCbQmiPoQQ83nS
r4q2bfzmFHicLI3adnyLOrqNttQdSFhb0aqK5bHctF3zgSTJ5gtTarFyhu0XTwk6
5yagDeXXqTrllwNDx0pXjrx1hPC4jHpjMP+QjUNFvjwoiuKzI/+4tIt3IybowNOB
HcGvGJOkVHH/gO2IcLhEkXf5GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/ssnaU
eWnQmHX3FrODV4yjWONCMB8GA1UdIwQYMBaAFONfdBnVcqhvdtLr94KattnQNAkF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGNS8zM0Y3MjU4NjJE
MTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFHOTIwdXYzZ3BxMjJkQTBD
UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQxOTBHZFZ5cUc5MjB1djNncHEyMmRBMENRVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEFGNS8zM0Y3MjU4NjJEMTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFH
OTIwdXYzZ3BxMjJkQTBDUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASIKhbj/eQkhmpKYzouG5i9OXpCAq+qXZIPTCm4yqMmyoF7TD1IMZ1MEOPUH0
EZGoUZA/4p3kyCePDanulXc5jKu58t9Qp2Elk7GptvhE3HSDhPEzLOo/u/16e1DJ
X21pjHOIL35h/rUvWXcQ1YFZ7REfAor1xrfuwmpleURh9rPxi3mIMBBc1Gicl50l
M2+QChQb/l1HJGNnLbG+hUq/rWAOLxkcKoo77w1p1BTl/vXkB8f/Y34eMGCJ3IWu
QaniTrsuxUHx/bhYl8SFReBMDgJ/f6RSw83bGHxuF0lo8nD58SoezXYviA5ev4z6
q6ckZm6lFndUkXAYv8Lj9jOW5w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:20 2026 by rpki-client