
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: MsJdkOVKM7xKjzxeYm9wXcAlrUwp6FveXz4zmVr5P3Q=
Subject key identifier: B8:78:16:56:0C:CE:21:38:15:0F:11:8C:3A:8F:5E:A7:0B:EB:BB:16
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 01E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 01D3
Signing time: Fri 13 Mar 2026 02:49:49 +0000
Manifest this update: Fri 13 Mar 2026 02:49:48 +0000
Manifest next update: Fri 20 Mar 2026 02:49:48 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: 4lnZqj6d1UDqdN+8a2o1STYHWn6FUk7RfEHkuWcwgYg=)
2: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=)
3: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=)
4: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 485 (0x1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Mar 13 02:49:48 2026 GMT
Not After : Mar 20 02:49:48 2026 GMT
Subject: CN=69b37b4d-e75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:b6:0c:f0:4a:39:12:20:9a:46:82:fa:78:
02:e2:f9:59:c8:b0:af:2e:f7:2b:67:27:31:3a:3e:
fa:31:24:c6:04:67:65:c6:43:66:1d:1a:e1:f8:59:
e2:15:0f:94:ea:52:15:6e:06:3a:9a:a9:19:6b:b0:
91:98:3e:b6:f5:7a:13:98:c0:6f:a6:48:2a:5e:b8:
82:73:30:24:36:a1:b9:62:79:41:8d:4f:e5:59:c9:
a7:dc:37:fb:78:f0:01:11:39:59:cb:89:db:ba:bd:
4e:62:20:64:4b:b5:ba:43:ba:b4:68:8b:b5:19:5c:
53:99:24:08:1f:4c:03:b4:50:f4:79:05:7f:47:27:
ed:33:f0:69:2c:c0:d0:c0:f3:ea:d6:60:ff:7b:96:
fe:6b:94:7b:b0:be:97:e7:80:ac:04:1a:ab:f0:88:
02:1d:38:d1:4d:be:02:70:31:28:54:98:cd:5e:92:
d1:86:66:18:e1:0c:b2:17:0d:0e:b3:02:7a:70:0d:
9e:c1:dd:ed:50:6f:c6:81:d6:1a:f6:62:fb:b5:d6:
59:a6:20:d7:a1:6e:ab:01:e3:dd:5b:86:56:e2:37:
0d:16:e9:a2:04:ac:fa:c6:b9:0d:10:42:f4:e2:f7:
83:f8:b5:37:22:e6:b3:ee:e4:88:a5:be:3f:c7:42:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:16:56:0C:CE:21:38:15:0F:11:8C:3A:8F:5E:A7:0B:EB:BB:16
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:21:2e:03:cc:ef:22:c6:af:93:ce:ef:81:9f:36:a1:e1:ee:
41:51:ab:61:96:ca:8b:d6:65:35:1a:bd:b1:1a:f9:f6:9f:ef:
2b:de:e5:66:bc:28:cf:bf:27:0c:0c:bb:fc:e3:b2:cb:77:e2:
ab:49:b6:19:e0:f6:43:f9:de:49:b4:cb:57:8c:25:7e:54:5e:
c7:c2:41:e9:1c:8e:de:32:7d:a1:2a:da:35:27:26:44:b6:7a:
e3:58:8c:44:0d:43:d1:78:41:1a:77:22:df:d9:fb:93:48:de:
13:60:b3:79:aa:5f:12:9b:13:17:21:fa:b5:82:22:a0:f3:ef:
b5:d6:a9:87:6d:80:da:0c:4b:fd:de:ec:c2:43:e4:61:6d:14:
42:3c:57:dc:27:ed:e6:15:b0:22:68:f9:98:6c:e6:4e:88:69:
bf:db:1b:7e:eb:49:19:4e:4d:c7:9a:64:e4:c9:68:b8:fa:c6:
5a:d0:b3:c9:57:7d:18:d8:71:8c:0d:a0:01:e5:3d:d0:c7:68:
f4:1e:54:82:56:21:8f:57:57:e9:5c:81:fb:cc:27:f4:b3:27:
34:6b:26:49:54:09:e5:06:c1:2d:34:1a:4d:80:b9:5c:1e:e7:
f8:9e:7a:bb:f3:4c:ab:d8:69:4f:30:5d:ea:3e:ec:f3:21:b3:
2c:a2:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:58:57 2026 by rpki-client