
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json)
Hash identifier: RsVbyuUx5nRZRor044NMQgAP2tf31hfFY7PE/FGICYM=
Subject key identifier: 41:2D:79:5B:31:0F:4F:A3:90:44:22:D1:C8:48:14:3A:CE:C1:4B:4F
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0E90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
Manifest number: 0E68
Signing time: Tue 18 Aug 2026 18:35:19 +0000
Manifest this update: Tue 18 Aug 2026 18:35:19 +0000
Manifest next update: Tue 25 Aug 2026 18:35:19 +0000
Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: WufvjrbuZNZvKqlTzG0agrHo+rThMUuqJqnKSLZN7aE=)
2: 8B41351885EB11F0B665685EC4F9AE02.roa (hash: ABCE8poXuonnB72raAXSvHKphMYWzEPA5Z8Cf+KDtcM=)
3: 3E174B92CF8311F0BE74A724C4F9AE02.roa (hash: BUqh8UiCsmWvNVOBiz1FTRn86yooou0qMt59DmQ1990=)
4: 4F599628760C11F18FF6B7DA7BA30FBC.roa (hash: YaucXwzrY9zO3mN7fean4Hc2G9B8pNz4CzmpFpn3l8M=)
5: A791AF14CF8211F0AAF9A481C4F9AE02.roa (hash: ppNi38lhiBNB7Q6UOSSs1t7UtUP+WB5DnPLXstDa+Z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3728 (0xe90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Aug 18 18:35:19 2026 GMT
Not After : Aug 25 18:35:19 2026 GMT
Subject: CN=6a84a5e7-0ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:cc:1c:ad:b8:0d:b3:5f:da:7e:57:5a:81:
1f:d6:c0:cf:16:5d:86:15:16:61:ac:85:d5:2f:54:
ff:18:78:ed:51:f7:91:65:9f:c4:97:a5:6a:82:a3:
f4:ed:19:6a:96:8f:47:53:23:67:3e:67:8d:84:84:
1f:05:d5:69:3e:27:04:a7:80:f2:ad:bc:27:76:b0:
94:af:74:bb:52:22:5b:9f:e0:e0:29:89:22:d6:6d:
6a:df:46:8d:4f:78:d5:b2:af:8a:8c:0f:d8:8b:54:
77:a9:76:a7:1e:a3:51:54:a4:75:7b:f6:96:74:5a:
d0:8b:e2:ef:fc:80:b9:4a:77:76:d8:86:2f:cc:a1:
24:9b:32:bf:47:70:ad:86:98:83:6d:a2:e8:76:50:
d0:c2:47:34:35:7e:ca:22:f1:8e:21:12:22:37:b1:
0d:75:64:11:ae:70:b7:ea:75:0f:b6:47:1c:d1:2b:
e9:f2:78:b1:0a:73:de:5a:f4:12:77:a0:df:ac:0c:
6d:7d:48:15:38:c6:b1:55:d8:61:55:81:b3:d2:75:
16:d1:dd:25:f5:72:ef:4e:eb:eb:41:d6:be:f6:69:
3a:a3:31:b2:00:e6:c2:37:df:c4:a2:c3:4d:46:11:
f8:d1:d6:eb:f1:f6:ac:8a:1c:18:e2:28:37:a0:53:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:79:5B:31:0F:4F:A3:90:44:22:D1:C8:48:14:3A:CE:C1:4B:4F
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:e7:fe:4a:2a:2c:fa:25:9c:5d:fb:92:7f:78:e7:92:a8:46:
d5:a2:95:2f:d0:eb:69:9a:7f:cd:62:10:d1:14:e2:70:32:42:
8a:e3:7e:35:80:23:f2:69:7d:45:70:76:66:bd:a1:6b:f3:a0:
f7:fe:e9:08:07:67:13:18:59:ab:e2:de:9b:1b:60:91:ba:fe:
27:28:00:9a:ec:fd:9b:44:23:d9:ad:74:73:e2:5f:ed:6f:e7:
f8:63:d7:3c:5f:a6:92:74:ef:eb:1d:51:a1:67:10:53:07:42:
5e:49:3a:e9:b3:11:67:32:1d:a0:60:1d:13:fc:ef:9c:fd:81:
53:e6:5b:f7:0d:ae:09:0e:15:a8:cf:8e:aa:70:cf:05:a6:34:
15:64:48:5d:02:33:6f:87:98:a1:2d:01:3b:73:93:56:97:71:
56:4a:46:10:b0:28:3c:92:7c:69:fa:02:5e:4b:fe:07:a6:a9:
4f:b3:f6:18:75:dc:bd:32:ef:e8:d7:0d:ab:df:39:29:81:90:
df:4a:a7:ab:c8:96:3e:68:64:ea:1b:dd:7e:90:95:4f:4b:82:
d3:8c:69:68:12:b3:1e:3f:6f:7a:46:a3:58:c2:b0:cf:aa:19:
fa:ab:d7:4e:0f:e4:96:22:5e:ef:0b:e5:69:35:5f:66:cb:00:
fa:28:6c:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4
OTg2NDAxRjQwHhcNMjYwODE4MTgzNTE5WhcNMjYwODI1MTgzNTE5WjAYMRYwFAYD
VQQDEw02YTg0YTVlNy0wYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscXMHK24DbNf2n5XWoEf1sDPFl2GFRZhrIXVL1T/GHjtUfeRZZ/El6VqgqP0
7Rlqlo9HUyNnPmeNhIQfBdVpPicEp4DyrbwndrCUr3S7UiJbn+DgKYki1m1q30aN
T3jVsq+KjA/Yi1R3qXanHqNRVKR1e/aWdFrQi+Lv/IC5Snd22IYvzKEkmzK/R3Ct
hpiDbaLodlDQwkc0NX7KIvGOIRIiN7ENdWQRrnC36nUPtkcc0Svp8nixCnPeWvQS
d6DfrAxtfUgVOMaxVdhhVYGz0nUW0d0l9XLvTuvrQda+9mk6ozGyAObCN9/EosNN
RhH40dbr8fasihwY4ig3oFNNtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEteVsx
D0+jkEQi0chIFDrOwUtPMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF
NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh
eTZPY3BZcXBXUzJKaGtBZlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOOf+Sios+iWcXfuSf3jnkqhG1aKVL9DraZp/zWIQ0RTicDJCiuN+NYAj8ml9
RXB2Zr2ha/Og9/7pCAdnExhZq+Lemxtgkbr+JygAmuz9m0Qj2a10c+Jf7W/n+GPX
PF+mknTv6x1RoWcQUwdCXkk66bMRZzIdoGAdE/zvnP2BU+Zb9w2uCQ4VqM+OqnDP
BaY0FWRIXQIzb4eYoS0BO3OTVpdxVkpGELAoPJJ8afoCXkv+B6apT7P2GHXcvTLv
6NcNq985KYGQ30qnq8iWPmhk6hvdfpCVT0uC04xpaBKzHj9vekajWMKwz6oZ+qvX
Tg/kliJe7wvlaTVfZssA+ihspQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:27 2026 by rpki-client