
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json)
Hash identifier: dY6095IcQNuP3D54+5DcoXAr1mzyPUgTXfpq7nB3QWM=
Subject key identifier: FE:DC:6E:58:4A:8F:5C:3C:E0:08:85:43:A3:3D:4F:E4:26:1B:1E:F4
Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62
Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
Manifest number: 0166
Signing time: Sun 05 Apr 2026 04:20:58 +0000
Manifest this update: Sun 05 Apr 2026 04:20:58 +0000
Manifest next update: Sun 12 Apr 2026 04:20:58 +0000
Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: +YLn9hOe0hPGRRbDJs3rH65HQbu/1Jje/57KnI/08TE=)
2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: i7+K6StkhEeeezuH07nFABJ4+D7tgTloR83xwjCdBu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl
rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762
Validity
Not Before: Apr 5 04:20:58 2026 GMT
Not After : Apr 12 04:20:58 2026 GMT
Subject: CN=69d1e32a-e79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:bc:a1:15:89:59:3a:e5:79:4b:d5:05:ab:
8d:27:35:19:a4:c6:88:ac:b7:d7:4d:92:aa:e8:0d:
11:b9:ec:b1:62:f2:de:7c:43:66:fd:28:a6:fb:4a:
32:96:39:2a:ef:f8:d3:c4:28:17:74:24:ad:df:d6:
2c:bc:27:4d:f0:4a:c1:df:04:48:24:8a:6d:bb:06:
2e:0f:97:14:27:20:fe:45:e8:bb:f6:c5:67:79:b4:
ec:80:f6:da:db:d7:6d:da:7e:58:5d:03:23:33:6d:
c9:b5:f5:01:09:5a:2e:88:00:70:7c:e3:20:dc:06:
c3:5f:e2:05:cf:97:d9:72:5c:21:53:bb:39:da:09:
cc:b7:7d:6e:ce:f5:37:1a:20:10:4f:5d:f4:61:ec:
30:f3:58:c3:fe:29:79:7b:bd:b0:fd:93:a5:24:12:
9f:fc:dc:64:a5:b2:c8:85:c9:6d:3f:f7:31:13:de:
d1:8d:77:f6:b9:81:3a:4b:75:11:e4:dd:27:fe:19:
57:01:a4:dc:3c:d1:49:70:77:04:8c:b6:ba:3d:61:
f1:2e:ae:b7:0b:a4:65:84:44:77:22:1e:60:12:74:
f3:52:11:f7:ba:04:db:98:52:15:ef:da:9d:87:4b:
5c:cd:57:7d:7d:d6:56:89:cd:08:d7:a0:8a:94:47:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:6E:58:4A:8F:5C:3C:E0:08:85:43:A3:3D:4F:E4:26:1B:1E:F4
X509v3 Authority Key Identifier:
keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:15:cd:45:84:a3:89:80:57:52:dd:ac:6a:6d:fb:30:64:dd:
71:bc:42:99:32:f1:2a:b7:99:1f:7d:eb:60:c8:50:62:5b:1a:
41:76:39:ad:4b:35:5c:21:1e:1b:ef:6f:a0:d0:d6:83:cf:4c:
5d:1a:e1:49:12:7a:6f:f2:b0:f1:fe:ba:38:36:7c:04:80:b6:
c5:ea:e0:72:5f:bd:91:6c:fd:2b:25:43:7b:2e:6b:d0:4a:76:
0c:e7:64:5e:cb:ec:73:ce:bb:d4:37:2d:25:9d:64:f5:55:5f:
6c:ad:3e:07:44:53:cc:bd:46:94:56:68:a9:f0:77:e7:96:5a:
ac:18:40:7e:bc:6b:4c:ee:bb:c2:67:5e:ff:92:94:64:f5:2f:
81:01:e1:51:32:2a:19:31:f3:a6:7b:33:b0:50:f1:12:d1:82:
67:8f:2d:53:d3:c1:7e:ad:ab:be:65:06:06:d9:da:19:50:23:
10:70:66:b7:d8:1b:64:4d:fa:d4:10:91:e0:ed:11:03:b3:6e:
54:a5:cb:cf:55:d0:b6:fb:6e:69:48:a0:fd:7b:f8:1c:1a:a0:
57:61:64:a5:9e:b2:ad:ed:3f:40:30:58:ef:47:65:f2:6e:bd:
fb:f8:58:b0:28:64:86:fd:6f:95:5e:bd:82:4c:f9:e7:87:5e:
51:37:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:27:03 2026 by rpki-client