
$ rpki-client -vvf rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
File: N-A1JLWEfb6tAP43jEar0MpwRfg.mft (raw, json)
Hash identifier: mNyhTv5VVPXuyan+pLUM460Sz9eOFvPvLDF9FzsexdQ=
Subject key identifier: 04:6C:30:A2:CA:54:98:BA:A8:5E:A9:B7:5F:3F:09:75:CC:CB:99:FC
Authority key identifier: 37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
Certificate issuer: /CN=A91799A0/serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Certificate serial: 045B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
Manifest number: 0443
Signing time: Sun 05 Apr 2026 00:02:34 +0000
Manifest this update: Sun 05 Apr 2026 00:02:33 +0000
Manifest next update: Sun 12 Apr 2026 00:02:33 +0000
Files and hashes: 1: N-A1JLWEfb6tAP43jEar0MpwRfg.crl (hash: qKnrBzkUbdPY27u0wky7c553RcJP57wx/PXSoB9nUUE=)
2: F39CE41C7C3811EFBF44AF4FC4F9AE02.roa (hash: 0Y70q3QNAADaTsernQ0CfBdMKWaPS3MwutMbI9WslNo=)
3: 46A569387DA911EFAC4E642AC4F9AE02.roa (hash: CkdUgYZswSEwulpU9fUQu3yRkOodyaKWPbvJSiJrKm8=)
4: 99C173847DA711EFBC48DB25C4F9AE02.roa (hash: Ouh9CREf3Hlbnen95cyuHl6hFWK3B34qd2O+gqkbTkY=)
5: B0A47CAE7DA711EFB7190E26C4F9AE02.roa (hash: 2RDAppFJUdg/Iy2Cf9QB/kesdW68o49m1fLor35OKAk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91799A0, serialNumber=37E03524B5847DBEAD00FE378C46ABD0CA7045F8
Validity
Not Before: Apr 5 00:02:33 2026 GMT
Not After : Apr 12 00:02:33 2026 GMT
Subject: CN=69d1a69a-b35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:fe:6b:4d:fe:3b:9b:d2:5f:9d:96:e1:5d:
ae:11:d0:46:7f:34:1b:3e:18:3d:9d:4a:58:e3:23:
14:c7:18:a2:fc:76:b3:a4:93:8f:5d:af:79:39:41:
9f:89:06:ff:a1:67:98:57:ec:44:a5:d3:12:e1:9c:
fe:f1:c2:27:94:fb:4b:fb:9b:86:f0:d2:dc:31:67:
16:a7:2a:bc:a5:fa:eb:cb:a9:fe:1a:eb:41:23:de:
65:7f:79:81:11:04:72:4f:1a:2e:03:3b:1e:24:a4:
7f:3b:9f:90:ba:93:68:e1:69:82:19:37:35:b6:9b:
1d:88:2c:01:4e:63:e9:df:68:f4:3d:c1:8b:eb:87:
c5:bb:a5:89:d1:f1:d9:b8:65:9b:28:7b:b5:f9:4d:
af:fc:7d:99:1d:65:ad:ed:30:e9:f9:24:08:82:21:
89:cb:93:2d:bc:50:72:18:e2:a6:31:dc:b0:0d:7a:
c2:55:15:60:87:d7:0c:90:d3:78:d9:f9:4b:2d:ed:
6f:e6:02:ec:37:3e:67:84:45:04:4d:91:12:d1:f9:
01:9f:1c:02:8d:d4:a8:32:74:5f:06:49:03:63:1b:
55:87:49:50:d6:6f:2c:3e:0e:95:d6:e4:c1:d0:2b:
4c:a0:d7:35:08:9d:29:81:c7:c2:eb:de:3c:80:c9:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:30:A2:CA:54:98:BA:A8:5E:A9:B7:5F:3F:09:75:CC:CB:99:FC
X509v3 Authority Key Identifier:
keyid:37:E0:35:24:B5:84:7D:BE:AD:00:FE:37:8C:46:AB:D0:CA:70:45:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-A1JLWEfb6tAP43jEar0MpwRfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799A0/40EDA11E9AE811EC974B491CC4F9AE02/N-A1JLWEfb6tAP43jEar0MpwRfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:98:43:e8:c3:69:05:0b:24:91:0e:ac:a6:8d:eb:b6:2b:b4:
4c:e5:74:64:7c:90:e3:83:d0:19:b2:f4:f3:10:78:39:82:a1:
e0:45:42:dc:e0:17:04:3b:aa:70:bc:66:d5:29:0c:68:2f:04:
47:70:a1:4d:27:fb:af:12:39:a5:4a:0e:79:74:8e:83:ec:a5:
d7:6f:a9:07:be:40:bd:a7:2d:0f:b3:f0:dd:55:94:08:9f:73:
be:ed:8c:f1:9c:cb:1e:fb:41:63:f9:a3:96:7b:de:46:46:45:
8e:81:6b:ee:e4:e9:db:c4:e8:90:bc:ae:87:58:50:77:69:10:
69:54:00:da:45:6d:ce:ca:e7:8d:ac:0a:24:ef:4b:17:f7:91:
9c:96:a9:fe:a4:c6:7a:42:a1:db:89:d5:a4:64:7c:d5:ad:0f:
44:21:f3:a6:9b:ab:6e:2c:49:67:08:30:03:c6:b6:63:3a:9c:
a8:d7:a1:fc:7a:80:6a:e7:86:2d:fc:e9:ca:4f:01:2c:aa:45:
02:dc:79:39:70:f3:2b:c0:a9:f4:b6:b7:88:21:b3:96:69:5b:
f4:a5:9b:ea:4a:f7:4f:fb:f1:bc:92:52:eb:d5:b1:a5:8d:92:
24:d2:7f:c4:5e:bb:97:2a:5e:99:9d:77:41:31:8e:28:02:9e:
a6:73:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:58 2026 by rpki-client