
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
File: P484Yw9NPXDt2eXJHjbsSO-5_WI.mft (raw, json)
Hash identifier: oMjFGAH0oZBC/rvkphxNERdClw3/1WH52pYfjJ8KN/Q=
Subject key identifier: 10:B2:A0:8A:72:5D:4D:04:27:8C:BD:AD:18:D6:3E:D5:66:88:1A:5C
Authority key identifier: 3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
Certificate issuer: /CN=A91E9CD4/serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Certificate serial: 42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
Manifest number: 40
Signing time: Sun 01 Mar 2026 09:51:26 +0000
Manifest this update: Sun 01 Mar 2026 09:51:26 +0000
Manifest next update: Sun 08 Mar 2026 09:51:26 +0000
Files and hashes: 1: P484Yw9NPXDt2eXJHjbsSO-5_WI.crl (hash: Isrh4S3vQPrChE4cAsuWQSH9Gf7en+GLfOElC7xMfi0=)
2: 6E08B7E2B96111F0B44EA641C4F9AE02.roa (hash: 58sEBeu/Lw41bnGWkn+BoX7gGqJ3oc1042/9t7Bx+7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9CD4, serialNumber=3F8F38630F4D3D70EDD9E5C91E36EC48EFB9FD62
Validity
Not Before: Mar 1 09:51:26 2026 GMT
Not After : Mar 8 09:51:26 2026 GMT
Subject: CN=69a40c1e-9633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:4b:97:5d:53:09:36:48:6c:68:e8:cc:fd:
19:da:e2:3b:84:75:0a:16:dc:f4:ab:13:85:56:6e:
ad:8f:c2:d3:87:db:99:b6:a9:13:ae:e6:69:e4:14:
5f:7f:54:d6:0e:87:16:be:e6:53:ed:31:72:96:7c:
c0:ba:6e:f1:b4:30:4e:ea:75:e5:89:8a:0e:29:53:
93:77:95:1c:67:00:1e:43:08:27:77:03:ea:65:e8:
97:de:35:8c:c0:7c:66:be:a2:1f:8e:35:15:a6:bc:
6e:f6:de:40:e1:c2:b8:1a:25:e7:ae:f9:77:f1:1c:
11:a0:f2:7f:4d:34:33:87:e1:40:6f:e1:f3:3e:98:
b3:b7:98:52:a8:ed:13:7b:cf:b4:cf:6c:a2:37:aa:
fd:04:af:98:57:45:55:fc:38:f3:65:e8:d2:43:a9:
86:c8:91:45:9e:04:27:58:b7:62:28:bd:f1:33:aa:
7c:83:23:3c:6e:85:c6:c8:0e:70:38:89:bd:0c:4e:
30:35:e6:1c:89:46:4d:5d:71:2b:26:1c:6b:62:35:
47:5a:94:3c:3b:dc:84:a3:1a:ae:43:3e:4f:27:ff:
69:fb:70:aa:99:2c:fb:ff:be:79:66:eb:5c:8f:1b:
c2:65:34:0f:b2:d8:c2:5d:d8:22:1e:08:42:ea:a6:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B2:A0:8A:72:5D:4D:04:27:8C:BD:AD:18:D6:3E:D5:66:88:1A:5C
X509v3 Authority Key Identifier:
keyid:3F:8F:38:63:0F:4D:3D:70:ED:D9:E5:C9:1E:36:EC:48:EF:B9:FD:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P484Yw9NPXDt2eXJHjbsSO-5_WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/DE531080B95511F09A7F6D71C4F9AE02/P484Yw9NPXDt2eXJHjbsSO-5_WI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8c:bf:f8:26:e7:fd:c1:46:f1:55:cd:5d:40:d2:0c:a7:ae:
ed:80:6f:51:f5:ce:e4:bb:d2:3d:9c:73:f2:1c:27:22:ba:fe:
35:08:00:21:0c:4d:25:5a:55:c0:9f:fe:36:69:94:84:a8:a8:
00:7e:c7:87:57:5d:22:5c:df:c8:21:03:9a:4b:8d:c6:93:17:
83:4d:b0:2c:ce:53:88:42:38:81:74:d0:72:2e:bb:c3:d2:cf:
a1:90:72:73:1c:75:53:68:92:a6:a9:82:ff:75:0f:38:38:a7:
3c:15:a3:2f:0e:83:8b:6a:87:7d:70:4d:2f:1a:ec:dc:f9:66:
20:85:e8:8d:d2:de:95:8b:e2:ea:5a:55:52:88:de:6d:e2:00:
eb:90:f6:c7:82:8e:85:77:8e:6b:9a:95:4d:c8:93:28:e3:cf:
c4:d4:05:12:5a:1d:b1:e4:ce:fc:32:81:60:28:c9:56:9e:b1:
13:f0:18:cc:9a:cb:db:24:36:21:2f:5a:0f:fb:83:9b:e3:cf:
1c:f9:04:56:07:3c:4d:1d:91:66:85:91:a3:37:e8:18:a7:23:
da:62:9b:c3:be:4f:9d:ea:e8:41:57:5a:43:5a:cb:ac:3c:58:
bb:00:74:24:94:8f:a1:84:f3:e4:33:a1:38:dd:2b:c3:b2:97:
64:35:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:00 2026 by rpki-client