
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
File: 4B1987D5160068092602529871C93EA320045A75.mft (raw, json)
Hash identifier: OgmUbQ+G3Kc9T+Y2HY6D9AAkuLkhVrGYP7Z/xuRb6zI=
Subject key identifier: D6:6B:99:FA:92:18:88:7D:B6:A0:A4:38:02:55:8B:8B:C2:4A:F1:FA
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Certificate issuer: /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial: 3AB9667E5017C5F18F6B3ACBA3EACC6E1164DDE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
Manifest number: 041C
Signing time: Sun 19 Apr 2026 06:00:03 +0000
Manifest this update: Sun 19 Apr 2026 05:55:03 +0000
Manifest next update: Mon 20 Apr 2026 08:15:03 +0000
Files and hashes: 1: 323430303a363832303a3a2f33322d3438203d3e2039383838.roa (hash: bK1k2o1ghZ2L+tOaifu+DW56/hnvWTxAdQeZWWFBeD8=)
2: 4B1987D5160068092602529871C93EA320045A75.crl (hash: yogZaorm2LqGXyMjlmBqLXsSv3GpsiEcCejtuRJBQno=)
3: 3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (hash: T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=)
4: 3130332e3138342e3137342e302f32332d3234203d3e2039383838.roa (hash: s58DHhE9SjYhgkw2iMqyvGmhibi6oV792nJ7vjMQEcI=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 08:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b9:66:7e:50:17:c5:f1:8f:6b:3a:cb:a3:ea:cc:6e:11:64:dd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
Validity
Not Before: Apr 19 05:55:03 2026 GMT
Not After : Apr 20 08:15:03 2026 GMT
Subject: CN=D66B99FA9218887DB6A0A43802558B8BC24AF1FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:92:18:8a:d1:66:57:ba:04:92:90:c2:9d:
c7:d8:c2:77:a1:b0:2e:6b:7c:3b:2b:2b:3f:99:16:
0b:c4:6c:f0:91:61:ac:a4:30:20:87:29:39:44:3e:
e3:40:e2:5f:de:dd:3e:6e:2e:1e:4c:3f:2c:40:b4:
ac:2c:3b:c3:7b:a5:ae:40:08:b0:f7:60:69:55:d5:
31:bd:d0:fa:a8:8f:9c:37:e6:4f:36:99:60:a6:27:
f7:34:06:1e:4a:15:08:c1:06:d8:8e:0b:75:f2:d9:
47:8e:b6:db:68:af:a3:5a:a7:cd:42:fc:f9:07:ac:
89:97:0d:76:f2:cb:f1:da:30:63:7e:84:8d:01:db:
db:77:02:8b:09:b6:d0:48:72:b8:72:f1:9b:11:e4:
39:3b:78:64:33:58:32:80:ce:ee:c4:7a:3a:88:c2:
08:46:b9:32:45:40:ad:96:56:db:db:40:41:44:fe:
99:33:24:15:8d:a5:b2:c3:5e:d6:82:3e:e4:10:e6:
ed:e6:5c:47:c1:86:30:19:3c:1a:36:69:99:93:43:
89:e5:d3:b8:ef:8e:e5:c4:a3:96:6a:71:b5:84:96:
2b:7f:eb:eb:92:ca:dc:87:e8:e1:8e:d2:50:af:46:
8c:18:33:fd:c3:c1:a9:84:dd:1e:95:eb:6d:70:7a:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:99:FA:92:18:88:7D:B6:A0:A4:38:02:55:8B:8B:C2:4A:F1:FA
X509v3 Authority Key Identifier:
keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f6:b4:15:de:30:4c:22:a8:d8:33:8d:6d:3a:e6:5e:5e:40:
54:d8:f2:81:fa:72:a9:c2:5c:66:22:b7:a0:fb:ae:04:56:5e:
05:36:73:f3:9d:5b:6f:ff:dc:9c:7c:04:e6:d8:7b:ae:69:03:
1d:d3:09:ff:15:0d:8d:fb:e2:cd:e6:90:b2:e2:0c:5b:ce:9e:
aa:77:58:22:96:cd:eb:0d:37:ea:27:3a:a2:5d:e9:a5:fc:a1:
26:e6:cb:77:bc:de:16:b5:12:52:d6:ce:9d:4e:95:55:01:62:
ab:3f:39:47:14:30:7c:cc:0d:09:5d:78:39:6d:d3:7f:d8:3d:
81:2c:47:6a:ad:2c:22:f4:3a:f8:c5:38:88:a6:f0:9d:cf:9e:
6b:3a:cf:df:1a:7e:fd:d8:af:4f:cf:2b:e2:3c:c6:c3:39:5d:
9e:3a:76:6e:d0:25:6e:a5:a5:52:de:0b:8c:30:fc:ab:3c:f1:
ee:bc:69:ee:09:bb:86:37:af:2c:0c:f1:87:b7:0d:dc:63:3b:
1c:ea:47:a3:b3:91:11:01:8d:81:9e:36:f0:4e:e1:53:53:c2:
30:84:a9:c5:88:bd:b1:ae:b2:f5:e2:68:d0:dc:fa:f2:a7:f1:
a7:74:71:aa:b9:a0:d0:e5:7c:94:0a:54:63:2f:ea:c4:2f:ec:
c0:a3:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:07 2026 by rpki-client