
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json)
Hash identifier: dth9rwfyfIJiU5H7RbhKBSpJ7qt5uIIAdkuu6i8nPUQ=
Subject key identifier: 3F:4B:41:96:58:CE:0E:44:43:9F:C2:F6:42:1E:7A:EC:F4:96:09:6C
Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
Manifest number: 57
Signing time: Wed 15 Apr 2026 07:42:03 +0000
Manifest this update: Wed 15 Apr 2026 07:42:02 +0000
Manifest next update: Wed 22 Apr 2026 07:42:02 +0000
Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: xkkXzSf3I9jd2btSlet1bHzYAMidAqeugdMULiitbD4=)
2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 58sEBeu/Lw41bnGWkn+BoX7gGqJ3oc1042/9t7Bx+7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Validity
Not Before: Apr 15 07:42:02 2026 GMT
Not After : Apr 22 07:42:02 2026 GMT
Subject: CN=69df414b-4bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:b6:9c:53:00:fc:45:c3:4a:fc:46:6c:4b:
65:cc:92:aa:71:82:6f:43:1b:71:d5:e3:31:30:75:
25:71:78:ab:59:ea:bc:84:aa:75:20:ae:f4:db:0d:
55:3c:34:91:6a:99:2d:73:6b:c9:34:90:d9:6e:c4:
49:66:34:ad:24:ec:02:79:29:f0:10:b0:ab:67:54:
1f:da:3e:93:ad:e8:ad:b7:7e:d4:9c:e5:e6:c0:13:
cb:8d:0e:06:a3:ce:f6:f3:15:92:77:1d:67:0c:d6:
d0:c1:a0:a0:ba:ea:ae:ba:80:5a:e1:d3:1b:27:d0:
6a:0e:84:24:3d:f3:1e:64:43:d6:49:7e:3b:82:bb:
02:a4:00:f2:92:3b:ae:59:6a:2f:83:49:52:1c:98:
7d:35:33:4d:83:82:a0:95:75:e7:0e:d7:69:05:eb:
5a:cd:ce:2c:9c:bc:44:8d:f0:1a:78:46:52:25:22:
63:7c:a0:9b:67:f7:d1:79:ca:de:59:34:72:c5:7b:
30:75:09:e0:2b:aa:6f:24:58:da:2d:2a:3e:cf:80:
27:91:6c:59:d3:82:d0:c6:c5:f1:ea:aa:ea:ba:9c:
ad:f0:46:c8:57:67:bb:63:30:f6:2f:b4:18:39:42:
92:50:8d:dc:84:f6:30:3f:a3:ef:ad:ec:4d:10:3e:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:41:96:58:CE:0E:44:43:9F:C2:F6:42:1E:7A:EC:F4:96:09:6C
X509v3 Authority Key Identifier:
keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:63:02:da:a8:1a:03:3b:e3:53:bd:c7:1a:84:14:83:43:03:
fb:b6:66:54:6b:25:19:1e:44:20:f2:01:41:7c:50:4b:b6:de:
38:31:ea:48:de:fd:65:33:40:e6:43:1f:61:78:34:34:2e:28:
82:e5:41:32:8f:76:7f:9a:36:f4:13:1c:e4:d8:42:54:c0:ca:
10:ad:e7:77:eb:d2:82:46:bd:e4:78:8c:01:86:04:4a:3d:b3:
4d:eb:50:9e:88:25:d2:51:92:0e:6e:6c:24:9a:9e:64:ed:04:
96:8e:0c:0e:f3:c0:6b:e9:16:16:22:ad:f8:86:27:49:eb:35:
e4:03:c8:9e:6f:67:14:d1:7e:f2:26:2a:66:a7:4e:1a:2c:ba:
1c:c9:2c:0a:3a:5e:c2:00:67:96:de:60:f2:e6:a1:d5:18:3d:
9d:4d:c5:5d:7d:3e:39:fb:80:2e:c4:62:76:e3:ed:3e:89:a1:
c9:34:9f:2f:4e:4e:48:49:30:99:6b:77:19:0a:dc:97:e1:12:
fa:94:a3:27:38:6e:27:c3:9c:1a:81:12:ee:9c:98:38:e4:66:
8d:94:39:7b:fc:83:15:0a:cd:e3:3e:7b:bd:57:0e:03:b8:ec:
78:c2:30:13:70:e2:78:99:c5:82:95:be:43:9f:e6:5c:6b:40:
3f:b2:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:08 2026 by rpki-client