
$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File: 4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier: thEOZRj053HYEp3OgMNul0u6YMQSABJjM+WLe8IMOGA=
Subject key identifier: ED:3A:55:03:1E:77:68:DA:A9:F3:3B:FF:B8:8F:9F:08:C2:27:79:D4
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer: /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number: 27
Signing time: Thu 21 May 2026 08:55:41 +0000
Manifest this update: Thu 21 May 2026 08:55:41 +0000
Manifest next update: Thu 28 May 2026 08:55:41 +0000
Files and hashes: 1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: UnAJ/h6rU/UHHJYW8ET16g+FnuFHoDCTu0hyDzhbSTQ=)
2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Validity
Not Before: May 21 08:55:41 2026 GMT
Not After : May 28 08:55:41 2026 GMT
Subject: CN=6a0ec88d-f66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:15:2c:e9:4e:6e:9b:01:d4:c4:33:59:c3:
3f:84:6e:66:98:9e:ab:ac:0b:c9:f2:ab:5b:a0:de:
4d:55:a3:87:7f:e5:90:63:da:a3:d2:d5:a1:3f:d8:
20:3b:df:a0:71:92:a1:ee:13:0a:68:4a:6e:ba:47:
0d:d5:25:6e:51:11:c2:bd:4f:95:6b:5c:ac:b0:c6:
ae:b6:1c:3f:c6:49:61:fb:90:82:fa:dd:8a:a1:50:
d3:15:73:db:bf:23:89:e2:e4:5e:f3:04:ea:16:fe:
81:5a:5f:2a:5b:e2:a6:03:d5:c9:d3:09:b4:9f:71:
4d:33:03:68:b0:6c:f7:df:fb:de:4f:c0:2b:5e:0c:
ec:1e:6f:b6:c6:7f:eb:d8:e1:a1:0d:fd:b8:ab:85:
28:da:8d:a8:d4:f0:de:b7:4b:4a:40:40:d3:50:cd:
69:0a:f9:6f:36:4b:7b:63:7b:ee:6c:f5:e1:ba:3b:
53:49:2b:ef:7d:49:c0:ad:b2:94:fa:4e:55:42:68:
38:ed:98:1d:6a:3b:1b:39:3f:22:8d:67:eb:f4:04:
a1:a6:a8:74:81:06:87:6e:45:82:03:bd:a4:a7:09:
f6:37:91:55:d0:fb:e3:b0:8f:4a:a3:53:75:51:44:
a9:12:57:7e:a0:96:9a:f2:25:b5:9c:d3:d3:b6:fa:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:55:03:1E:77:68:DA:A9:F3:3B:FF:B8:8F:9F:08:C2:27:79:D4
X509v3 Authority Key Identifier:
keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:17:78:20:25:64:0b:e1:20:07:a9:3f:cc:e9:28:86:1e:67:
fb:af:2c:4d:23:00:56:2e:af:7b:fa:97:eb:a0:74:98:08:26:
da:db:f4:ff:4a:1b:e6:e8:da:79:dd:ed:9d:aa:68:d8:8f:41:
51:65:1c:70:9e:75:68:78:f4:5f:94:bf:e1:d4:65:21:a3:c1:
a2:9f:e5:df:a7:df:6b:01:85:01:b8:01:36:de:7d:38:1e:38:
c9:12:2d:02:83:77:a0:31:c5:27:cc:94:ba:27:cf:62:d7:04:
cf:79:9c:3f:34:cc:66:76:f1:87:fe:cb:05:32:3c:8e:e6:67:
75:48:ca:9d:b6:9c:fb:01:ec:93:24:7e:07:cb:93:c4:03:ea:
b5:31:79:90:c4:ac:9b:97:e4:5b:89:3d:fa:91:85:2b:0e:ec:
05:2f:b1:40:da:f0:26:4f:ca:ff:6d:a9:ca:94:d8:8b:38:92:
93:1c:a1:97:21:95:23:d8:d7:29:02:73:e0:d7:7e:f1:aa:33:
42:92:f6:cb:47:6c:43:b3:6c:ba:ca:ca:e1:26:27:2c:38:7d:
d9:f3:56:96:ef:31:c9:07:4e:55:6f:f6:9b:19:71:e8:23:22:
bf:e6:5e:fc:84:5f:13:09:97:b7:9b:39:b7:26:80:1f:0c:d6:
f6:8f:59:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:31:35 2026 by rpki-client