
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier: HOcT7XEF4yVhER6TiKWGdGwsRB8f5u4V49T5c/kFvx4=
Subject key identifier: 97:00:78:DC:07:6D:1D:B5:6F:4F:F8:B4:6D:E1:17:FA:2E:10:EB:55
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number: D7
Signing time: Fri 17 Apr 2026 06:24:03 +0000
Manifest this update: Fri 17 Apr 2026 06:24:03 +0000
Manifest next update: Fri 24 Apr 2026 06:24:03 +0000
Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: /0M1Sz3hJcZ7kC/h0j37zYz6uUG+mRL0djs/2oSmTyc=)
2: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: bi6yZUP9Smkax+xVdkGT/x3hFrhWjvPzPQn2lGZjFLA=)
3: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: A9CzU8MDj6rLJSlF21HcobLlJ5jlCrKiSpiRirq4aHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Apr 17 06:24:03 2026 GMT
Not After : Apr 24 06:24:03 2026 GMT
Subject: CN=69e1d203-c162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:00:94:e8:98:3c:eb:78:b4:2f:f7:0a:33:
ba:01:2a:b4:21:71:1a:3b:0d:71:1e:84:ac:ca:0a:
bc:a8:f9:3c:47:fe:a8:ff:68:30:0d:24:75:c7:20:
78:e5:0d:11:ec:e9:c9:8f:d2:07:89:97:9b:49:a3:
5a:62:15:e2:ff:4f:04:a8:6f:6b:5b:e9:05:e0:c9:
ed:6c:d7:f1:e8:7c:4d:e1:64:d3:57:91:3e:ea:36:
13:0b:06:ad:c9:37:2b:2a:13:59:01:a2:a8:e3:b6:
22:24:48:a0:70:57:23:ce:eb:cf:d5:ad:dd:c9:fd:
00:6d:93:0f:27:0b:f5:c2:7d:02:86:2d:15:04:d5:
68:72:9f:2e:bf:57:70:fe:23:59:a2:f4:88:a6:da:
5a:18:47:d0:3e:2f:63:9f:3e:4c:4e:de:0f:8d:81:
28:ac:7c:9c:7d:54:94:61:2a:0c:5f:4f:da:41:5f:
8c:31:61:81:4f:ac:e6:6c:97:4a:44:fe:a5:94:d8:
f8:dc:3d:63:fc:68:3d:75:a6:4c:33:83:bc:99:7d:
7e:92:82:09:37:49:50:07:1b:80:e6:fb:37:84:5f:
2e:72:82:8b:c6:a9:0e:b3:bc:5b:67:56:98:64:32:
92:3a:73:69:1a:7a:5d:2c:65:f2:e0:86:1c:d9:1f:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:78:DC:07:6D:1D:B5:6F:4F:F8:B4:6D:E1:17:FA:2E:10:EB:55
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ae:59:5d:bd:5f:c8:38:6a:49:59:75:7f:3a:41:dd:e5:c9:
11:2f:50:72:6f:e2:cb:fa:81:22:91:4f:ff:00:11:f0:89:74:
5e:a6:c8:3a:84:0b:5c:42:47:7b:78:67:3e:b8:67:52:33:bb:
f1:c3:0f:f9:be:9a:56:50:5d:2b:ea:9b:3a:60:49:cf:25:70:
dc:32:3c:98:b0:6f:29:d6:c9:19:29:4c:4e:38:8c:fa:26:94:
8c:3e:d3:dc:cd:4f:db:1c:9d:ad:18:75:31:10:00:fc:45:98:
c3:a4:13:91:e1:84:a1:cc:d8:34:e0:95:80:21:d7:59:27:d9:
17:22:b9:8a:13:06:a2:2e:ee:f1:f8:fa:85:d0:b1:ae:9a:66:
94:06:98:55:67:50:97:67:16:e7:ce:d1:ae:22:2c:9b:67:97:
d5:f7:87:99:d2:b5:1b:10:38:cf:96:9e:8a:4f:6c:bc:be:88:
84:82:b7:c5:3b:7b:69:bf:99:ed:1b:20:d3:21:0e:6f:9e:90:
f2:a3:e1:3c:d3:af:58:cb:49:70:66:6b:4a:af:a6:3a:7d:6f:
20:3c:2a:77:f2:d8:41:ec:28:3f:28:49:64:2d:b8:ab:e3:4f:
18:5a:73:87:0a:68:77:d7:94:65:18:4f:60:77:41:30:47:36:
33:da:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:55 2026 by rpki-client