
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
File: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json)
Hash identifier: Ojiyjy+8bZy7oVxPN+rdD4K4AgxH6gbwuHEbAFvRRuA=
Subject key identifier: DD:2D:B9:63:8A:9F:08:EE:69:7F:47:91:10:47:B9:91:2E:54:3E:A6
Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
Certificate issuer: /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
Manifest number: 0149
Signing time: Sun 05 Apr 2026 04:37:43 +0000
Manifest this update: Sun 05 Apr 2026 04:37:42 +0000
Manifest next update: Sun 12 Apr 2026 04:37:42 +0000
Files and hashes: 1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: m7TQHeJBrhumNZk7Yfnf3FoJMPd2fRFeKjtodqW4YH0=)
2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: GLn2NuIf/rdBlKE3RuKG6Jbz+UwBmcRgc2vk3s4p7rY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Validity
Not Before: Apr 5 04:37:42 2026 GMT
Not After : Apr 12 04:37:42 2026 GMT
Subject: CN=69d1e717-4cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:a3:7a:53:1b:07:a0:49:da:cc:37:ed:0a:
b0:5f:6b:18:10:14:3d:21:2b:93:2e:83:84:bc:ac:
66:be:d4:f4:41:9a:7a:dc:a2:6b:e1:2f:ed:ec:0e:
c0:82:1a:61:0b:bf:69:41:bf:1c:34:8a:96:39:c8:
c7:0f:68:3f:22:5d:37:06:ca:2a:e9:7b:bd:e1:e7:
48:46:b3:ef:7a:b0:7e:99:49:70:56:23:4c:1d:94:
9a:53:c1:6c:be:bb:44:17:6c:70:e2:e0:57:34:59:
3a:d4:3c:61:85:1e:71:1f:68:49:24:67:4b:56:02:
cf:00:41:45:eb:2e:21:c5:b5:28:e3:cf:82:8b:7c:
62:17:c5:f6:f9:ed:6d:1f:89:ba:50:ec:09:38:fa:
f2:79:18:6f:85:98:48:e1:00:b2:32:06:1b:1c:d6:
cd:e6:c3:a9:27:95:01:93:8c:0d:9c:c0:3d:16:c5:
7e:f5:cf:70:19:d6:c7:86:59:dc:3e:a9:cb:8a:53:
ca:22:06:36:4c:d7:b0:e3:ff:6f:98:e2:f5:11:be:
d6:28:75:26:f7:09:76:29:68:e2:ae:b9:fc:ec:01:
1c:14:43:b5:bf:05:65:41:36:9a:00:81:9f:99:e3:
f2:04:bc:26:98:8c:a5:cb:8d:83:c9:ca:e2:b2:28:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:B9:63:8A:9F:08:EE:69:7F:47:91:10:47:B9:91:2E:54:3E:A6
X509v3 Authority Key Identifier:
keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:e2:67:a8:3e:6b:58:26:43:4a:3d:15:7c:c0:8a:c0:61:3a:
8b:3d:34:2f:05:ae:31:b7:08:08:ff:30:55:47:bf:0b:04:99:
62:93:2f:8f:f9:dc:fe:7d:21:0a:dc:88:7e:0b:09:0a:11:95:
aa:2f:00:6b:77:15:df:ac:e8:0f:87:57:a0:a7:c1:85:32:88:
e6:7e:bf:49:ff:73:94:db:7c:56:11:94:76:d9:33:1a:63:15:
c8:8b:b6:6e:00:f2:ce:ae:80:63:5c:48:6c:f7:4f:15:54:e3:
90:13:13:ce:28:86:32:1d:f3:9e:93:43:d4:bb:8f:20:97:53:
0a:e4:a7:5b:43:93:73:5b:da:3e:49:56:53:b1:5d:e9:91:a9:
f7:4e:40:d9:78:17:88:e7:71:bb:be:4c:d0:14:06:54:17:c1:
63:4c:85:5f:8b:24:5f:b3:06:d1:c3:65:12:e2:87:b6:f2:a4:
52:1e:a1:41:e4:2e:65:54:31:4b:78:ae:a6:21:6d:34:6c:61:
3d:64:bd:a8:90:c0:17:62:ee:d0:58:38:59:ff:ac:c2:c6:c2:
2e:18:4a:e4:43:1e:ac:36:6b:6c:69:e5:95:bc:51:dd:45:e7:
e6:8c:01:f9:b8:39:ad:41:9d:49:73:01:0f:6c:cb:55:b0:2a:
7e:b4:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:36 2026 by rpki-client