
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier: wKFrrZ3eLSjMm1+Da9X2kDfEg0RM8kajtjuqz0/X2Og=
Subject key identifier: 1B:FD:76:93:0C:59:4A:1B:1D:0A:6A:46:63:FE:C4:37:C0:0F:79:61
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number: BD
Signing time: Sun 01 Mar 2026 08:13:08 +0000
Manifest this update: Sun 01 Mar 2026 08:13:08 +0000
Manifest next update: Sun 08 Mar 2026 08:13:08 +0000
Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: a8DMjPFgqzQb7GWT3TcbZWHhumSgdJuCH92WOyEa+Ts=)
2: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: mh+UCJNFemXmx1rXPNcCjaRpL6VWoi5lGRmYTA/fEi0=)
3: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: Q7i85RevnZqkOBdKbp0/e+tjgTQzpkBCM+sWN4N+OW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Mar 1 08:13:08 2026 GMT
Not After : Mar 8 08:13:08 2026 GMT
Subject: CN=69a3f514-1e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:21:f0:7c:b1:85:bb:fc:3c:5e:d2:f4:41:
d5:cb:5a:93:c2:ac:ab:85:7d:a6:95:cf:d1:ef:37:
f1:5c:cd:af:96:99:42:7e:51:b6:7d:64:76:87:12:
94:82:b5:d8:e3:2d:fd:4f:e6:c6:c8:0a:e8:4a:e7:
c7:3c:4f:30:dc:24:0a:3e:c3:3e:76:ae:f3:9b:4a:
39:09:b1:3d:da:18:0e:f6:9a:d9:cf:3f:cf:e8:0d:
3c:39:06:f6:94:58:9c:2b:fd:d7:14:75:7f:ae:17:
10:ee:3b:e4:8c:57:d4:3c:b6:1a:5d:87:9f:cd:cf:
07:87:c9:7e:6f:d8:94:e2:1f:4e:40:94:b5:0e:a5:
2e:54:15:4e:cd:6f:71:b5:92:d9:37:97:10:af:97:
7e:27:56:f1:bb:14:b7:09:1f:d7:57:6b:1b:ff:6c:
47:20:af:aa:97:92:38:e9:cb:2b:3a:ba:54:4c:22:
f6:c8:f7:60:9d:29:aa:22:25:bc:76:67:a3:d4:b9:
f7:a3:44:34:f9:68:9b:2d:5d:34:5c:a3:ae:ef:70:
69:ca:e7:a6:80:4a:47:37:7b:8e:6b:2e:ce:93:ee:
09:86:f1:57:71:3f:1f:53:e9:c7:de:4b:04:10:9a:
92:69:20:72:2a:fb:ad:53:a1:b8:89:bf:76:3e:64:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:76:93:0C:59:4A:1B:1D:0A:6A:46:63:FE:C4:37:C0:0F:79:61
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:46:78:78:bc:e9:fe:14:23:ef:75:5a:de:26:0d:a5:e6:54:
ce:bb:7d:5c:81:8b:6e:c8:ac:38:58:e7:5d:9c:a5:a5:b2:68:
c3:d5:d9:cf:9b:76:9d:a9:1f:88:79:7b:76:c8:40:6f:fe:5c:
2e:72:7e:56:aa:08:b0:4f:e1:e8:31:97:5d:2c:ca:d9:68:6e:
a1:6f:7a:6f:ea:28:01:34:35:0c:f6:6d:6b:c1:f2:9d:c7:19:
e0:e1:e6:30:a6:ae:79:cc:b1:df:5f:f4:c2:6e:71:79:9d:ff:
e0:71:ce:39:9f:c8:f2:f2:a4:b0:20:48:38:a0:08:42:d7:d0:
c8:8d:1e:cc:bf:1c:63:d7:8d:a7:62:85:be:4f:14:b6:0d:03:
2b:66:95:6d:34:7e:a5:2c:21:ea:2a:7b:a3:99:44:50:1f:d6:
a1:d0:3b:ff:a3:6e:ce:a1:03:70:da:aa:a0:21:bb:2a:87:c3:
19:25:31:50:2d:ca:61:a9:d7:24:83:8b:b5:c0:20:5d:49:0b:
95:ae:49:1f:39:8d:8c:38:d3:1d:c2:5b:d4:29:6e:95:d0:03:
cf:26:34:6a:ac:6a:82:fc:91:dd:f6:0b:32:cd:e9:3a:42:eb:
22:21:54:f1:24:1b:83:ef:dd:7a:b8:83:af:57:2e:70:49:e4:
db:5e:74:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQzRjYxMTAvBgNVBAUTKDlGODlBNjA0RjQ1Q0VCNkY2ODA0RkI1MzRFQURDMjQx
NjZCRDBGMjkwHhcNMjYwMzAxMDgxMzA4WhcNMjYwMzA4MDgxMzA4WjAYMRYwFAYD
VQQDEw02OWEzZjUxNC0xZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5pYh8Hyxhbv8PF7S9EHVy1qTwqyrhX2mlc/R7zfxXM2vlplCflG2fWR2hxKU
grXY4y39T+bGyAroSufHPE8w3CQKPsM+dq7zm0o5CbE92hgO9prZzz/P6A08OQb2
lFicK/3XFHV/rhcQ7jvkjFfUPLYaXYefzc8Hh8l+b9iU4h9OQJS1DqUuVBVOzW9x
tZLZN5cQr5d+J1bxuxS3CR/XV2sb/2xHIK+ql5I46csrOrpUTCL2yPdgnSmqIiW8
dmej1Ln3o0Q0+WibLV00XKOu73BpyuemgEpHN3uOay7Ok+4JhvFXcT8fU+nH3ksE
EJqSaSByKvutU6G4ib92PmTqsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBv9dpMM
WUobHQpqRmP+xDfAD3lhMB8GA1UdIwQYMBaAFJ+JpgT0XOtvaAT7U06twkFmvQ8p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDNGNi8zNzE2ODFGQUY4
RDMxMUVGOTc1OEZCMEZDNEY5QUUwMi9uNG1tQlBSYzYyOW9CUHRUVHEzQ1FXYTlE
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDNGNi8zNzE2ODFGQUY4RDMxMUVGOTc1OEZCMEZDNEY5QUUwMi9uNG1tQlBSYzYy
OW9CUHRUVHEzQ1FXYTlEeWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs0Z4eLzp/hQj73Va3iYNpeZUzrt9XIGLbsisOFjnXZylpbJow9XZz5t2nakf
iHl7dshAb/5cLnJ+VqoIsE/h6DGXXSzK2WhuoW96b+ooATQ1DPZta8HynccZ4OHm
MKauecyx31/0wm5xeZ3/4HHOOZ/I8vKksCBIOKAIQtfQyI0ezL8cY9eNp2KFvk8U
tg0DK2aVbTR+pSwh6ip7o5lEUB/WodA7/6NuzqEDcNqqoCG7KofDGSUxUC3KYanX
JIOLtcAgXUkLla5JHzmNjDjTHcJb1CluldADzyY0aqxqgvyR3fYLMs3pOkLrIiFU
8SQbg+/deriDr1cucEnk2150zw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:45 2026 by rpki-client