
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json)
Hash identifier: sU7RYIx7UZ0auhGLpyfeC8PEly2D/ezRJ+3tkB1cb5I=
Subject key identifier: A2:2E:45:3D:AA:A4:F2:CB:34:60:27:D0:64:AC:91:93:16:71:69:B9
Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
Manifest number: F2
Signing time: Fri 17 Apr 2026 06:02:26 +0000
Manifest this update: Fri 17 Apr 2026 06:02:26 +0000
Manifest next update: Fri 24 Apr 2026 06:02:26 +0000
Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: c4p9lGAY0DwsGZSYqThb/JItj9BZRXj5z+aphYsN2Gw=)
2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: 7luqkxdAYhFDQ1cLdVYDxi4/1gyDCpg9yV33Rku64hI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl
rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490
Validity
Not Before: Apr 17 06:02:26 2026 GMT
Not After : Apr 24 06:02:26 2026 GMT
Subject: CN=69e1ccf2-b0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:39:e7:66:42:9c:fc:57:f0:60:e2:51:15:
02:74:36:db:7e:16:87:c2:70:c9:83:e5:d5:27:e8:
ad:f1:fe:44:25:ca:de:d4:da:8f:6b:77:98:88:22:
41:13:15:de:e1:f6:24:2a:35:69:65:fc:44:c2:7c:
95:83:75:9b:b5:05:e3:f3:91:f6:22:d1:38:14:22:
5f:3b:87:e0:48:68:0b:79:59:4f:11:ed:12:91:1b:
13:23:5d:35:fd:d3:34:26:7d:a7:4d:b0:6a:58:25:
6a:00:1e:46:e8:2d:a0:e2:38:5c:7b:de:4f:d5:0f:
ba:04:0a:a2:36:94:6d:01:cc:db:c5:4a:b3:45:52:
a8:81:ec:80:08:bc:95:c6:71:b9:60:7e:3f:90:1b:
ac:2e:01:d3:fb:15:6a:57:3e:17:70:7c:74:2e:0c:
e8:49:34:63:2f:a3:b0:8c:ab:de:f2:4e:28:7c:b7:
a0:71:a7:b3:bd:49:27:46:02:a8:e9:41:e7:a5:05:
21:12:06:aa:c4:3d:b5:f1:d6:f0:7d:07:f2:22:02:
55:7c:d8:ac:55:22:8a:09:54:39:70:b1:57:33:b0:
f5:67:16:5f:6f:9f:dc:1c:70:b9:cf:8e:a9:02:45:
cd:4a:61:a4:47:43:16:c7:e7:1e:de:57:e6:cf:1e:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:45:3D:AA:A4:F2:CB:34:60:27:D0:64:AC:91:93:16:71:69:B9
X509v3 Authority Key Identifier:
keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ea:6e:22:11:c6:46:b9:25:e5:18:47:ea:10:1c:df:9a:f8:
93:ed:e6:72:50:b0:5f:0f:4a:2d:21:0d:68:b3:1e:13:47:16:
69:c6:99:78:dc:50:6a:2f:47:dc:76:59:3b:26:d3:b9:65:7c:
f0:5a:d8:f1:6e:dd:3c:24:76:a4:c5:18:ce:84:51:71:59:24:
e7:cf:d0:18:64:06:b6:79:15:8c:90:48:64:1c:5c:46:18:ae:
9c:ae:ff:96:1d:af:e2:48:f3:b2:de:3d:df:1a:0d:5b:70:1d:
6b:c1:de:01:87:ac:43:2b:18:2e:c7:4d:38:69:1c:cc:c7:fe:
60:e7:80:98:98:ea:fd:d7:60:25:29:e6:3a:f3:0c:ee:4e:c2:
f6:3f:68:37:ea:3f:f9:a6:67:46:5f:e3:d8:f6:c4:aa:60:36:
11:6a:a0:51:91:31:b4:51:c1:de:00:59:90:fc:e4:8f:cb:f2:
a3:6e:31:ce:d4:c2:9a:78:ce:dc:ee:fb:14:29:e0:7a:4d:21:
aa:b0:af:41:ef:01:ec:ba:b3:47:53:53:3d:44:83:6a:7a:0b:
2b:d0:9b:ef:f1:2a:76:19:52:79:dc:da:53:91:a2:3b:38:12:
4e:47:3d:d1:42:b8:d9:ae:3b:68:c0:67:e3:33:cb:94:47:f7:
4d:02:b9:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFDNEIxMTAvBgNVBAUTKEUzOEE1RURFMTk2OEM5Mzc1RTUxNTUxRkFFOTg4ODhB
MEJCNTQ0OTAwHhcNMjYwNDE3MDYwMjI2WhcNMjYwNDI0MDYwMjI2WjAYMRYwFAYD
VQQDEw02OWUxY2NmMi1iMGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnFI552ZCnPxX8GDiURUCdDbbfhaHwnDJg+XVJ+it8f5EJcre1NqPa3eYiCJB
ExXe4fYkKjVpZfxEwnyVg3WbtQXj85H2ItE4FCJfO4fgSGgLeVlPEe0SkRsTI101
/dM0Jn2nTbBqWCVqAB5G6C2g4jhce95P1Q+6BAqiNpRtAczbxUqzRVKogeyACLyV
xnG5YH4/kBusLgHT+xVqVz4XcHx0LgzoSTRjL6OwjKve8k4ofLegcaezvUknRgKo
6UHnpQUhEgaqxD218dbwfQfyIgJVfNisVSKKCVQ5cLFXM7D1ZxZfb5/cHHC5z46p
AkXNSmGkR0MWx+ce3lfmzx5cOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIuRT2q
pPLLNGAn0GSskZMWcWm5MB8GA1UdIwQYMBaAFOOKXt4ZaMk3XlFVH66YiIoLtUSQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9ERTNGODg5QUNE
N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lUZGVVVlVmcnBpSWlndTFS
SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJKQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUM0Qi9ERTNGODg5QUNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lU
ZGVVVlVmcnBpSWlndTFSSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx+puIhHGRrkl5RhH6hAc35r4k+3mclCwXw9KLSENaLMeE0cWacaZeNxQai9H
3HZZOybTuWV88FrY8W7dPCR2pMUYzoRRcVkk58/QGGQGtnkVjJBIZBxcRhiunK7/
lh2v4kjzst493xoNW3Ada8HeAYesQysYLsdNOGkczMf+YOeAmJjq/ddgJSnmOvMM
7k7C9j9oN+o/+aZnRl/j2PbEqmA2EWqgUZExtFHB3gBZkPzkj8vyo24xztTCmnjO
3O77FCngek0hqrCvQe8B7LqzR1NTPUSDanoLK9Cb7/EqdhlSedzaU5GiOzgSTkc9
0UK42a47aMBn4zPLlEf3TQK51A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:39 2026 by rpki-client