
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
File: pOjrw6c5dZmQTabHaUiVu8npE-4.mft (raw, json)
Hash identifier: mt+h4JJlhaZZOlWZh9ziPu2qjFMT5R+D7A0AglPiSfQ=
Subject key identifier: 81:75:63:94:96:94:E6:5E:61:3E:96:CF:F3:C6:BB:AD:EF:58:23:F8
Authority key identifier: A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
Certificate issuer: /CN=A91DABAA/serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
Manifest number: 47
Signing time: Fri 17 Apr 2026 08:04:42 +0000
Manifest this update: Fri 17 Apr 2026 08:04:41 +0000
Manifest next update: Fri 24 Apr 2026 08:04:41 +0000
Files and hashes: 1: pOjrw6c5dZmQTabHaUiVu8npE-4.crl (hash: lTlOTnU9+7XklHA2LKK/iUtLn7YntvK3Rg3p3Db5+sI=)
2: EF7ACD02D19D11F0B7EBD972C4F9AE02.roa (hash: n7mxRLHf+OoO7/6cNs++NJsQTzj4AvvR2XuxwLHJ8V4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DABAA, serialNumber=A4E8EBC3A7397599904DA6C7694895BBC9E913EE
Validity
Not Before: Apr 17 08:04:41 2026 GMT
Not After : Apr 24 08:04:41 2026 GMT
Subject: CN=69e1e99a-1ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:1a:60:9a:f1:dc:06:b1:6c:f3:46:1a:c6:
1f:66:ad:d5:25:f8:0e:57:5a:15:61:7f:ca:7f:8a:
27:c7:09:76:58:f9:ef:4e:bd:b1:9d:ed:11:92:17:
3d:30:21:b6:8e:4e:d1:82:28:0d:b7:7f:8d:0f:ab:
76:42:b0:25:fa:bc:34:12:fd:65:bf:7b:57:f2:d2:
8b:c8:48:a9:02:f2:da:66:3c:91:15:7c:72:2a:a5:
59:bb:16:41:22:ad:3c:72:5a:2f:d9:20:4c:e8:83:
4b:3b:36:2c:67:c1:3e:ed:0c:eb:a5:d0:c7:ad:6a:
36:6b:f0:71:82:32:ea:a0:7c:8f:22:04:dd:a4:bf:
53:69:31:51:db:92:4d:a2:47:83:7b:00:30:aa:d9:
c5:71:0e:ae:68:78:64:9c:fd:01:a4:e6:ac:e3:1b:
3b:58:ab:0b:9f:5f:53:54:45:15:a7:32:dd:e1:25:
2f:bd:b6:f1:80:3a:46:75:18:22:e4:4f:3f:35:7d:
eb:c9:b6:66:fd:0e:a6:57:db:22:3e:89:11:4a:3f:
34:94:a4:4e:35:cd:3d:a9:1d:47:98:2f:11:6e:26:
31:49:8e:f2:4b:7c:89:33:fc:f3:38:ea:ff:de:a1:
d5:e8:f3:0a:18:b2:1d:54:fc:7e:97:2f:64:3f:60:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:75:63:94:96:94:E6:5E:61:3E:96:CF:F3:C6:BB:AD:EF:58:23:F8
X509v3 Authority Key Identifier:
keyid:A4:E8:EB:C3:A7:39:75:99:90:4D:A6:C7:69:48:95:BB:C9:E9:13:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOjrw6c5dZmQTabHaUiVu8npE-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DABAA/4C4CADA8D19D11F0BDC54170C4F9AE02/pOjrw6c5dZmQTabHaUiVu8npE-4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:48:1b:f7:ef:11:7c:4d:ee:d6:15:2b:ec:4c:c5:e3:40:22:
56:9b:37:24:2a:c8:69:14:98:a0:92:1e:b6:56:35:25:fd:ef:
10:e1:43:06:34:12:5c:5e:bb:5c:8f:84:e6:21:59:4c:6c:8f:
74:43:a2:42:31:ef:91:75:af:77:90:34:df:dc:26:b6:82:4b:
0f:8f:93:b9:17:e3:fe:40:0c:ce:c9:1f:f9:8f:47:74:98:a5:
1a:5e:10:fd:80:15:fc:2d:08:91:4d:6f:b9:e2:eb:ae:5b:36:
11:93:09:6e:d9:80:c1:8a:dd:59:0f:64:eb:9c:64:9c:1a:da:
49:9f:13:f7:cb:ae:7a:8a:df:1a:c7:75:ed:3f:12:cc:1d:9e:
f8:2c:c4:57:ce:2f:f6:bb:70:ad:76:58:c1:79:e8:78:16:bc:
fe:25:f3:b9:c9:77:b4:94:37:bb:37:83:9e:f0:25:70:9e:92:
87:c4:ea:66:9a:6b:c3:13:5f:4a:26:2c:e5:79:e6:e4:d0:e7:
12:f1:ac:20:1b:89:b4:19:46:5f:48:3c:b5:5d:39:60:01:9e:
19:d4:5c:53:dc:bb:e0:63:3a:ff:7a:ea:03:b0:1a:77:db:09:
9c:88:b9:31:c4:bb:67:ac:80:fa:9d:2a:2d:c7:01:7d:95:20:
c0:9e:bf:19
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QUJBQTExMC8GA1UEBRMoQTRFOEVCQzNBNzM5NzU5OTkwNERBNkM3Njk0ODk1QkJD
OUU5MTNFRTAeFw0yNjA0MTcwODA0NDFaFw0yNjA0MjQwODA0NDFaMBgxFjAUBgNV
BAMTDTY5ZTFlOTlhLTFjYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOQxpgmvHcBrFs80Yaxh9mrdUl+A5XWhVhf8p/iifHCXZY+e9OvbGd7RGSFz0w
IbaOTtGCKA23f40Pq3ZCsCX6vDQS/WW/e1fy0ovISKkC8tpmPJEVfHIqpVm7FkEi
rTxyWi/ZIEzog0s7NixnwT7tDOul0MetajZr8HGCMuqgfI8iBN2kv1NpMVHbkk2i
R4N7ADCq2cVxDq5oeGSc/QGk5qzjGztYqwufX1NURRWnMt3hJS+9tvGAOkZ1GCLk
Tz81fevJtmb9DqZX2yI+iRFKPzSUpE41zT2pHUeYLxFuJjFJjvJLfIkz/PM46v/e
odXo8woYsh1U/H6XL2Q/YCXxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgXVjlJaU
5l5hPpbP88a7re9YI/gwHwYDVR0jBBgwFoAUpOjrw6c5dZmQTabHaUiVu8npE+4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQkFBLzRDNENBREE4RDE5
RDExRjBCREM1NDE3MEM0RjlBRTAyL3BPanJ3NmM1ZFptUVRhYkhhVWlWdThucEUt
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcE9qcnc2YzVkWm1RVGFiSGFVaVZ1OG5wRS00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB
QkFBLzRDNENBREE4RDE5RDExRjBCREM1NDE3MEM0RjlBRTAyL3BPanJ3NmM1ZFpt
UVRhYkhhVWlWdThucEUtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBVSBv37xF8Te7WFSvsTMXjQCJWmzckKshpFJigkh62VjUl/e8Q4UMGNBJcXrtc
j4TmIVlMbI90Q6JCMe+Rda93kDTf3Ca2gksPj5O5F+P+QAzOyR/5j0d0mKUaXhD9
gBX8LQiRTW+54uuuWzYRkwlu2YDBit1ZD2TrnGScGtpJnxP3y656it8ax3XtPxLM
HZ74LMRXzi/2u3CtdljBeeh4Frz+JfO5yXe0lDe7N4Oe8CVwnpKHxOpmmmvDE19K
Jizleebk0OcS8awgG4m0GUZfSDy1XTlgAZ4Z1FxT3LvgYzr/euoDsBp32wmciLkx
xLtnrID6nSotxwF9lSDAnr8Z
-----END CERTIFICATE-----
Generated at Sun Apr 19 03:33:20 2026 by rpki-client