
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: kJCS6lSn0cP2x7QHOIE7Xoz4PmVN6PQCk9iAqz50nic=
Subject key identifier: 40:E7:62:FF:F6:D3:62:FC:61:79:52:36:3B:5E:E0:C2:22:D0:FD:7D
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 01F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 01E5
Signing time: Fri 17 Apr 2026 03:15:14 +0000
Manifest this update: Fri 17 Apr 2026 03:15:13 +0000
Manifest next update: Fri 24 Apr 2026 03:15:13 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: AKXGNXXuVBXsGjsgo/rjtLDcbA/VaTPZre5uM2nx3BA=)
2: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=)
3: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=)
4: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Apr 17 03:15:13 2026 GMT
Not After : Apr 24 03:15:13 2026 GMT
Subject: CN=69e1a5c2-7b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:63:75:c7:cb:78:50:e9:77:eb:08:2b:a8:
e2:f1:7d:36:10:1b:fc:83:10:dd:cc:d6:8c:98:2d:
87:fd:06:b6:13:69:0b:10:e1:c0:24:76:4c:ca:40:
a3:b8:3d:03:83:c7:a1:90:a7:3a:bc:d8:3e:a1:f9:
96:ed:18:e0:7c:5b:4c:ad:42:cc:70:ba:b6:c3:ca:
31:9f:50:bb:e8:f1:de:f3:64:73:d1:29:97:6a:f0:
02:98:b1:05:f7:50:b6:f5:bc:fa:fb:28:d6:e9:e7:
64:1c:da:53:a6:90:78:c4:3c:fc:48:b0:c5:e6:65:
8f:a8:44:6e:cf:2e:44:48:0e:27:e8:5b:e8:6a:44:
40:73:10:6e:6a:5b:cb:91:ac:6c:4a:d2:88:d5:c0:
0e:d3:3e:fe:89:6f:04:75:72:5f:12:62:f2:1d:30:
ba:3c:23:56:95:c2:20:36:cd:4b:81:6f:1e:02:33:
da:64:f5:d6:b1:60:26:19:28:8a:70:5f:87:98:ea:
59:43:22:02:80:ba:e8:d8:03:42:c4:dd:39:a8:78:
2b:be:89:29:a4:00:42:ae:22:07:13:54:93:7e:9b:
d8:2e:7c:1a:60:eb:a3:de:ce:85:53:8b:51:c6:dc:
99:91:61:bb:ca:41:5c:eb:ab:c7:86:3f:48:03:38:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:62:FF:F6:D3:62:FC:61:79:52:36:3B:5E:E0:C2:22:D0:FD:7D
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:da:5a:1b:31:ff:47:8d:92:df:16:ad:8e:77:7e:18:8d:6c:
09:49:37:bc:81:53:18:e7:33:5f:ad:b9:33:51:6c:35:2e:d8:
c1:a6:80:08:35:08:3f:28:69:ad:eb:f4:e5:c4:f1:79:6b:4d:
2f:c3:06:67:e2:df:f1:bd:97:22:90:f5:c0:36:84:5a:22:0b:
4b:d5:05:c5:26:ea:8e:1a:3c:5c:9d:13:9e:66:7a:68:39:9e:
24:6c:b8:ac:2f:eb:0b:12:18:0a:5d:09:fb:0d:f3:38:dc:2f:
95:77:a3:91:f6:ca:54:06:c8:11:ac:8d:90:18:65:21:3a:7a:
8f:f1:95:96:e0:0f:ed:13:8a:0f:52:a4:ed:77:46:6c:7a:6f:
f5:5c:0d:46:08:93:02:9f:c0:7c:6c:d6:76:51:5e:25:4d:3c:
50:dd:50:84:f2:c4:fb:82:56:fe:1f:66:61:db:19:39:74:38:
ae:55:b2:e4:62:7b:62:4d:02:34:1e:6c:33:ca:e7:aa:aa:77:
c9:64:1f:48:f9:65:12:04:46:ff:39:a9:95:66:51:9b:59:9b:
7b:6d:65:fa:cb:1b:f9:d4:64:f2:9f:d5:93:85:c2:40:b9:63:
90:44:55:b6:67:76:53:ff:31:b2:4c:5a:53:3d:e9:25:e5:78:
fb:b5:99:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:20 2026 by rpki-client