
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: LsoPYfoUtfwpynLiQBKA6aTPO0eyQA1bsPgabsuFPDg=
Subject key identifier: A1:AE:FD:C5:20:02:B7:A1:18:0A:78:AF:F0:88:16:01:A8:54:7D:2E
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 01CB
Signing time: Sun 01 Mar 2026 04:33:23 +0000
Manifest this update: Sun 01 Mar 2026 04:33:23 +0000
Manifest next update: Sun 08 Mar 2026 04:33:23 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: ha9ErTUkarNkeVuZfGN4A8Tr7ea9ykAH/zDbC7vlzBY=)
2: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: coTbLMChMtsb+9hU9/oYsNe+RoCOnIHIavvRJNUhB3k=)
3: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: SQBva7AHaoJKrZ6vg+VCRRVDYT6lI9oaiIx6/QC8zvU=)
4: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: SLEJBl6iI7A9mQ/gCP8wQV/FveWhHBwcWU7BMm4+pLE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Mar 1 04:33:23 2026 GMT
Not After : Mar 8 04:33:23 2026 GMT
Subject: CN=69a3c193-bfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:20:5b:e7:5a:a7:6e:e0:eb:a2:15:99:69:
90:89:4f:4d:75:6a:80:20:f3:66:cd:7f:53:05:13:
93:5a:1d:d6:b6:96:37:5e:bf:0d:d3:84:20:4b:81:
77:62:22:a4:19:1d:23:8d:29:12:f3:87:6a:40:58:
dd:6b:97:3d:41:8b:2a:6b:b0:32:29:3e:5d:d2:a3:
7a:01:28:a8:b9:64:4d:0b:20:86:d7:58:53:6a:bc:
6a:31:0a:14:a5:8f:02:b3:4e:8b:a4:c4:f9:cc:e1:
3c:2d:42:c3:bf:ff:bc:a5:db:32:bb:2a:a2:09:6b:
a8:72:12:6b:94:25:f1:21:1e:f6:0b:31:1f:ee:a9:
a1:1e:16:98:10:fb:12:3d:da:93:19:7e:c8:3f:b1:
51:05:8c:dd:53:54:25:92:13:08:04:e8:0f:6e:2c:
18:07:09:aa:87:84:d9:9b:2a:4b:03:35:12:24:17:
71:b3:88:2b:ae:f6:ea:ee:b7:f9:a4:5b:81:1b:5e:
ec:ae:28:0d:bb:aa:7c:db:b5:73:e1:1b:5b:32:78:
1a:f1:93:7c:fc:65:ae:bb:3e:37:3d:dd:c0:db:70:
b6:1b:7d:87:89:82:4e:40:78:1a:27:e6:76:cb:40:
a3:46:e7:00:60:77:2e:8b:2f:fc:f6:92:a3:1a:75:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AE:FD:C5:20:02:B7:A1:18:0A:78:AF:F0:88:16:01:A8:54:7D:2E
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:08:16:fb:5f:2a:35:36:b4:6f:17:b5:49:ff:8f:3a:12:46:
de:15:06:f5:a4:a7:cd:6d:81:c9:5b:33:0e:cc:e5:c6:e7:40:
0f:92:26:22:ab:39:89:92:d0:1d:e1:72:17:de:9c:4a:7f:93:
ec:bf:f9:d0:25:bf:5c:6c:71:2e:81:da:49:58:5e:cc:da:04:
5b:a1:1a:80:99:93:7c:44:b2:d7:ef:ee:eb:87:02:16:b6:45:
d3:25:25:c5:8f:70:c9:ad:76:c7:c1:fc:ac:74:9b:07:f9:cc:
86:60:ac:69:c4:59:13:bf:f3:60:88:f2:4e:7b:dd:f8:e1:55:
a3:37:0d:f0:e3:9a:de:94:85:ae:cc:a7:8e:f4:b7:19:b8:04:
06:b2:78:15:c5:8c:2c:ba:c6:18:f3:b7:86:39:d8:cf:e4:15:
a1:7e:a9:b7:de:a2:a9:3c:6d:ee:8d:96:e5:f2:20:89:27:55:
30:0f:ae:1b:95:c9:51:13:b7:66:b0:6a:44:aa:2e:ff:16:e1:
27:f9:66:f9:3f:c0:26:0a:fd:d6:be:9e:03:98:1e:0f:9a:b6:
59:e0:94:47:12:e7:63:f6:54:d2:df:3a:5c:f8:74:c1:88:03:
6e:22:40:c2:70:7e:ea:e8:96:df:05:a8:c2:4f:bd:3c:36:9d:
52:a4:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:04 2026 by rpki-client