
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json)
Hash identifier: vXXTkS0/Cm2+VycMjpC+XfFLJ2Gi9bbqTzlJWfetJQw=
Subject key identifier: 99:E1:3C:7D:EF:56:5A:15:7F:28:B5:A1:95:44:23:14:C8:0E:9F:FF
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0EA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
Manifest number: 0E81
Signing time: Tue 06 Oct 2026 17:50:57 +0000
Manifest this update: Tue 06 Oct 2026 17:50:57 +0000
Manifest next update: Tue 13 Oct 2026 17:50:57 +0000
Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: bQeYe+pnu7NUrNiUJzvC3P+wFmnRQtkEaYtqSUmYJ2M=)
2: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: BUqh8UiCsmWvNVOBiz1FTRn86yooou0qMt59DmQ1990=)
3: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: ABCE8poXuonnB72raAXSvHKphMYWzEPA5Z8Cf+KDtcM=)
4: 4F599628760C11F18FF6B7DA7BA30FBC.roa (hash: YaucXwzrY9zO3mN7fean4Hc2G9B8pNz4CzmpFpn3l8M=)
5: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: ppNi38lhiBNB7Q6UOSSs1t7UtUP+WB5DnPLXstDa+Z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3753 (0xea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Oct 6 17:50:57 2026 GMT
Not After : Oct 13 17:50:57 2026 GMT
Subject: CN=6ac53501-db23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:36:24:d2:31:44:ae:b4:16:4d:22:37:75:
1c:d7:95:19:46:8e:09:81:1f:bb:f4:23:46:22:98:
72:4e:c1:2e:1c:b8:d4:51:af:34:a5:d8:40:82:3c:
0d:97:d8:71:fe:97:1b:49:47:96:07:27:89:fd:e1:
4f:a0:d4:b1:69:2d:e4:16:96:3e:2e:de:fb:4e:47:
c0:e5:f2:6b:02:75:df:a5:be:2b:20:dc:b1:fb:76:
47:ec:9f:8d:e6:58:e8:fe:d9:20:66:ea:e6:3d:44:
6e:c1:10:fa:c1:0d:b9:a9:d4:16:27:e8:a5:e9:55:
e7:d3:b4:0a:b3:3d:78:37:3f:56:db:3e:b8:14:cc:
1f:a7:15:7d:b8:94:ad:b2:a2:38:9e:0c:d2:aa:e9:
15:48:44:ca:7c:e4:8f:ae:1b:e1:64:1d:0e:8e:69:
69:c9:7c:fa:30:e9:09:cb:66:5a:d0:9d:46:a4:66:
65:a1:d2:f2:f1:ff:4b:c2:14:0e:63:58:1a:22:40:
d9:78:d6:2d:a2:05:2b:a1:66:d2:b3:2c:a9:86:19:
ed:c9:10:83:be:a5:d9:3f:a6:92:72:db:6f:4b:60:
80:88:b9:b0:4a:69:5e:c4:24:e7:d9:90:c1:f9:0c:
91:0e:70:a7:bc:0f:e6:52:85:ce:66:07:dc:e4:9c:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E1:3C:7D:EF:56:5A:15:7F:28:B5:A1:95:44:23:14:C8:0E:9F:FF
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:45:d5:2c:6b:5f:93:8e:d1:56:99:f0:e2:fa:91:a5:fb:c7:
50:f6:36:f0:90:88:88:74:e1:ee:ac:d4:53:b3:e0:7b:b6:89:
2f:13:f5:ed:d8:81:5f:17:17:7b:98:58:0a:8a:ec:39:83:03:
07:21:e6:96:2d:0e:47:43:34:24:4d:4a:f2:15:48:7b:8b:0e:
9e:fd:63:2b:df:cb:b4:24:56:bd:ca:92:73:ac:bd:63:34:52:
7a:c6:45:53:d6:49:96:22:4a:ff:0b:71:1b:57:b8:ad:09:96:
64:fd:83:c8:c1:5b:73:39:54:cf:12:15:5b:ca:49:42:44:e6:
e7:46:65:c3:bd:5c:9a:5f:cb:53:75:82:60:60:45:87:1f:c2:
c9:26:f5:05:92:af:aa:a8:c5:dd:e6:6c:19:86:7e:84:a8:a5:
97:72:2f:f0:64:f5:e5:87:89:94:93:5c:4a:a6:c8:2a:9c:3f:
bc:09:71:f2:34:67:0c:c9:36:da:35:31:ec:32:ed:34:46:e0:
69:15:14:2e:c1:12:05:ad:2a:9d:ab:98:62:91:65:29:e5:3e:
04:d7:27:57:60:2b:a0:09:a1:b0:32:88:ee:6b:0c:af:80:84:
62:67:ad:fc:76:58:48:1a:10:40:d1:d3:9c:8c:db:71:ca:f3:
3a:d2:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:58:40 2026 by rpki-client