
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json)
Hash identifier: O6qvC5+kh4HNa3NGo/qDJkoFfJxdyaxTudTA01TrzJg=
Subject key identifier: AB:23:C8:01:99:89:DC:AC:2A:9C:85:9F:A5:21:63:6D:FE:E3:59:8C
Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
Manifest number: 44
Signing time: Fri 17 Apr 2026 08:08:07 +0000
Manifest this update: Fri 17 Apr 2026 08:08:07 +0000
Manifest next update: Fri 24 Apr 2026 08:08:07 +0000
Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: 0WoAqtX26BBG1yCxzKdBFtcEF3Hyhvr0gqULWsgNK3I=)
2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: XqsHjVz2/3IOIuZJsTXT+P8IFg2LCZpsTf20ES1Rkms=)
3: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: YqhCEr3kKDJmGDX75Nq9SUE9drBA93p8LP3gb+77yio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Validity
Not Before: Apr 17 08:08:07 2026 GMT
Not After : Apr 24 08:08:07 2026 GMT
Subject: CN=69e1ea67-e7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:ac:44:41:1c:45:ff:71:ad:8f:01:3b:aa:
ae:96:f2:a7:ab:db:15:d7:35:dd:d0:ed:ee:1c:54:
8a:f1:1f:a6:1b:e5:b7:e5:59:7b:60:e1:84:28:af:
ee:cd:88:b6:80:68:41:83:4c:6c:71:9b:3e:eb:53:
b9:05:36:ea:97:1b:d9:60:23:ae:aa:58:4f:e6:28:
ad:3d:ca:54:8b:71:12:15:91:34:65:59:46:9c:4a:
5d:5d:0b:d4:b1:56:aa:ed:ff:99:b6:87:43:17:44:
87:95:87:99:63:41:e2:15:15:f5:f7:dd:d1:c5:5d:
7c:45:b5:e7:af:0e:c9:4d:26:fd:45:4f:48:0c:22:
c0:d2:ce:1d:8d:de:a5:b0:34:bc:0a:b9:df:4b:87:
07:a6:2e:f9:ac:ef:9b:b1:75:e5:91:a9:14:83:24:
62:7c:94:77:81:a7:9b:b4:89:51:fb:b1:1d:37:44:
30:6d:58:e5:cc:e5:64:43:09:24:19:e5:9f:3b:00:
53:84:5e:af:c7:cc:a9:3a:38:08:58:9f:c8:15:c3:
c2:78:85:6a:3c:6f:54:c5:c7:dd:bf:1a:1b:86:1d:
ad:c2:fd:54:88:9d:24:bf:b3:ed:f6:08:74:7d:90:
3b:5f:dd:82:88:d9:03:74:84:bd:7f:27:40:b2:0b:
1a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:23:C8:01:99:89:DC:AC:2A:9C:85:9F:A5:21:63:6D:FE:E3:59:8C
X509v3 Authority Key Identifier:
keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:31:62:e7:43:05:56:ee:58:44:b5:08:40:bd:77:8b:83:6f:
0a:da:48:18:7c:30:7c:6e:8b:49:7d:d3:57:02:68:22:7f:04:
05:75:4f:d0:28:06:9f:a1:9f:9f:e5:f7:77:f1:e5:0d:1f:bb:
de:7e:bd:ea:15:3b:76:f6:5d:5b:93:0e:84:9f:80:b6:e5:0e:
9c:6d:32:0f:d3:31:c3:74:d0:b7:2d:c1:35:09:10:50:3c:51:
fa:8e:9a:da:c2:51:b2:68:8a:73:ab:a7:37:0a:f5:da:82:d7:
d8:d9:6f:da:55:91:ca:ac:48:24:ec:01:21:84:b2:42:66:a9:
ae:f6:03:b8:50:75:dd:9b:0d:84:e1:8b:99:b2:25:79:80:28:
2e:92:fe:40:b8:39:20:a7:8c:1c:12:7e:cb:2a:a4:45:2f:32:
7e:d3:b5:a0:66:97:6b:97:14:0e:8c:55:bc:0f:4a:af:0f:ca:
41:8a:44:88:4e:22:d9:67:67:5f:35:7a:52:5b:de:d2:66:ef:
22:1d:f7:50:8d:6a:62:a2:f5:64:98:6d:1f:48:82:61:9e:dd:
13:79:9c:14:5e:8d:42:ed:62:c8:ab:9c:40:6b:d7:ba:4e:e6:
4d:f2:af:a7:c5:49:da:d9:d4:35:32:ba:2c:6b:91:21:ae:fb:
9c:5f:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:32 2026 by rpki-client