
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier: WXtqvMfPASR9bzlTcJhNRP2mrtCNjoh8jFiBjlBIHcY=
Subject key identifier: 8C:5E:EE:7D:CB:84:2A:19:C4:07:4F:42:07:7D:BF:97:94:01:53:15
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial: 08EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number: 0864
Signing time: Thu 30 Apr 2026 21:04:43 +0000
Manifest this update: Thu 30 Apr 2026 21:04:43 +0000
Manifest next update: Thu 07 May 2026 21:04:43 +0000
Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 1/N6kmZZP42pLSFi1rtMTXZIiqhz5+/g/9MwCIb8Xsk=)
2: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
3: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
4: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
5: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
6: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
7: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
8: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
9: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
10: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
11: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 21:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287 (0x8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Validity
Not Before: Apr 30 21:04:43 2026 GMT
Not After : May 7 21:04:43 2026 GMT
Subject: CN=69f3c3eb-3eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:0d:f1:9c:c2:62:2f:2e:71:da:67:07:06:
33:3a:02:10:6c:b7:aa:14:88:f1:32:8f:f7:39:e0:
38:36:2d:44:b9:2d:a6:1d:c8:c5:fa:20:ec:92:7f:
12:d5:08:94:5b:37:33:92:41:2a:d8:f7:4d:5e:e1:
c8:0a:cf:5c:4b:35:90:21:45:eb:8c:4b:5f:ac:1c:
0e:cb:71:0e:ba:87:40:e7:2a:33:ba:1b:7b:82:38:
ac:2f:3c:27:55:40:ce:cd:d3:7f:d6:58:de:3b:4b:
13:24:51:4b:3f:68:40:7e:fa:9d:ae:92:84:ee:11:
2a:d8:59:cb:f6:52:7c:49:9f:48:d6:7a:3f:eb:13:
cd:77:a2:84:6e:d2:1f:36:73:34:8e:1f:60:6e:8f:
98:a3:be:21:61:8c:6f:3f:14:db:35:8f:a6:14:ca:
6a:6c:d5:91:72:3a:6a:f3:c8:e6:03:fe:90:e1:46:
8c:f0:a8:8d:fd:7c:ac:eb:01:68:1c:a0:82:44:09:
d7:e8:5b:a2:01:08:2e:d3:9a:4b:dc:d5:bd:02:00:
e9:ed:70:c8:fe:73:c7:85:77:24:c3:db:21:f3:57:
31:5b:cb:ac:bd:bd:28:02:ff:a0:90:bf:e1:ad:d5:
d3:3a:99:45:cc:ff:e9:d7:1a:3a:d7:82:42:9d:f5:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:EE:7D:CB:84:2A:19:C4:07:4F:42:07:7D:BF:97:94:01:53:15
X509v3 Authority Key Identifier:
keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:2e:b7:5f:47:ef:cb:81:e0:cf:da:09:7c:7f:79:ae:1b:
f5:95:1d:87:30:65:6f:88:8c:f7:24:6f:f6:25:ca:2c:4f:a4:
ce:27:f8:27:9d:39:1a:7d:49:ba:2e:7c:7e:45:c4:30:ec:a5:
eb:c9:69:b8:68:37:bb:83:0a:6c:2d:c2:36:c8:2e:22:5f:a2:
73:ee:9b:84:9b:94:1b:05:94:e5:3e:22:6d:96:67:2a:f6:44:
97:fa:3b:46:8c:b1:2b:b9:9c:e8:e7:03:19:7e:3e:c8:54:73:
22:d1:c2:0d:bc:2a:46:99:8e:a2:a9:d8:8c:80:a9:61:37:0e:
de:66:cd:75:68:b4:ae:1f:ab:68:43:93:8b:1d:13:66:b3:93:
39:f5:0f:6b:b6:12:74:19:07:9a:72:89:df:9d:bc:ad:0b:27:
f0:5e:3e:2d:9e:cd:3e:ac:e2:dc:84:f0:f1:1f:54:4f:26:a5:
e5:fe:90:67:02:75:1f:f9:ae:22:29:9c:cf:5b:b4:e6:96:04:
54:4a:d9:90:46:10:4c:c9:4c:03:9b:77:ce:90:f0:30:69:6d:
17:83:7d:c3:35:37:72:5c:68:42:b4:1e:8e:aa:4b:ae:55:78:
7c:30:b9:3e:61:77:2c:26:1f:7a:4f:8f:3f:33:52:cd:0a:90:
9d:61:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 06:44:18 2026 by rpki-client