
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json)
Hash identifier: wbD6HJgU3LYq1RHQHWhX/EgQIEGHOchw/D5f4Ns3OiM=
Subject key identifier: A3:4F:0F:89:84:B5:6A:56:35:BA:F2:49:8B:82:34:36:D7:6A:4F:AE
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0E57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
Manifest number: 0E34
Signing time: Thu 14 May 2026 17:49:38 +0000
Manifest this update: Thu 14 May 2026 17:49:38 +0000
Manifest next update: Thu 21 May 2026 17:49:38 +0000
Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: YynqcY47+brhqMEnV6pICckfz/qXiXyVTHAO1SV2mP8=)
2: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: GBvJaOYF1545b8b+gOGrGQUjqqr8+5hiMjlmvxSFrPM=)
3: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: nJEq5dcjdbygkdzbWZ20NZb/kFcLm8+8wcWhp21gyU8=)
4: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: qBZYKamMj/oDU4E6eK9pTMccppq/DCgF8vxu2spcuiw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 17:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: May 14 17:49:38 2026 GMT
Not After : May 21 17:49:38 2026 GMT
Subject: CN=6a060b32-a72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:ea:46:82:8f:ba:17:cd:29:74:c3:85:b6:
02:ed:67:ac:1e:e1:a7:d3:3b:4e:11:d5:fa:23:3d:
8f:fb:6e:72:ee:c8:c9:00:10:32:86:6a:6e:60:d2:
c0:cd:b3:76:61:b7:5c:9f:c0:00:12:02:98:09:ac:
cf:79:d8:28:34:9c:fb:16:43:2c:95:34:61:9d:6c:
02:6c:43:14:f6:de:24:25:20:6d:66:5c:74:5b:aa:
b4:b2:72:44:75:e1:11:26:34:1f:55:40:20:21:3f:
33:71:21:f2:9b:d5:62:7b:b3:92:44:4f:9a:75:06:
6e:59:03:64:13:c0:3d:c5:a1:01:8c:e2:41:d5:7e:
97:3b:93:42:b1:c2:cc:3a:86:ad:e3:2f:8b:20:52:
a0:d2:94:f3:7e:42:a6:03:e9:3c:b7:12:5d:71:36:
35:5b:53:c0:30:d8:e0:bb:8c:30:3b:3b:96:c6:20:
6e:55:5b:c5:08:fe:70:d4:63:bb:62:1a:1b:05:73:
6e:34:75:a6:44:07:9a:7b:d7:a6:07:76:77:2f:32:
a2:5b:92:4c:7d:84:e1:47:1c:d1:19:10:d8:be:3c:
c8:e4:1e:03:af:63:4c:64:78:bd:21:f0:03:31:14:
c4:71:3c:24:22:28:83:4b:e2:46:90:f0:7a:b4:9c:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:0F:89:84:B5:6A:56:35:BA:F2:49:8B:82:34:36:D7:6A:4F:AE
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:77:58:c9:0c:50:69:56:32:c6:5d:22:1f:e7:5d:ae:f7:62:
d6:a6:97:31:10:b8:5d:1a:2e:fd:6e:27:ab:04:89:75:68:e8:
4d:95:06:25:19:77:ea:55:24:f8:89:4a:2d:b6:b5:1c:86:5d:
f6:16:4f:48:55:97:8b:f9:4e:a8:47:ec:bf:a8:58:51:82:01:
33:45:34:4b:82:35:3a:97:0a:89:37:75:c3:87:bf:2f:b2:39:
95:2e:99:42:80:05:8d:dd:e4:78:ba:85:66:20:91:26:bb:c4:
be:31:c6:de:67:cf:53:18:b1:3b:b5:2a:4a:6f:44:ce:ba:7b:
71:c3:2f:24:9b:90:1e:dc:1b:e9:b3:f4:c0:ab:b5:3c:2b:b4:
e1:ef:b2:24:a7:a1:ce:eb:e9:f3:8a:50:84:b8:b0:4b:b4:3a:
b2:91:4f:d8:6f:05:fb:4a:78:c2:b7:2c:bc:e1:7e:c5:9b:2a:
31:27:5c:b6:1e:60:4f:10:50:e5:cb:f8:0c:aa:1e:41:ea:dc:
6f:ea:b5:b2:c6:0f:7c:5b:ba:79:a5:27:35:b1:74:69:08:22:
32:a0:bc:00:9d:84:3c:f2:a4:35:65:51:97:5c:32:8e:42:fc:
fb:e5:1b:e5:7e:bd:9f:c4:e9:64:38:85:e6:5c:8e:ac:f5:53:
3e:d0:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:44:49 2026 by rpki-client