
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: 9/phrAEG27kEf9jg2hm2mHa4MO/g8m9ybxrPl+RZQGc=
Subject key identifier: 3F:E2:3B:48:88:16:D8:D0:B9:B7:6C:73:D5:7C:60:38:85:9A:7F:16
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 0200
Signing time: Thu 11 Jun 2026 05:24:13 +0000
Manifest this update: Thu 11 Jun 2026 05:24:12 +0000
Manifest next update: Thu 18 Jun 2026 05:24:12 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: p3wq45aWUhxx4GK8a0lcz74QwVkcsHfiXEBEIS6TwvM=)
2: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=)
3: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=)
4: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 05:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Jun 11 05:24:12 2026 GMT
Not After : Jun 18 05:24:12 2026 GMT
Subject: CN=6a2a467d-226f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:fd:4e:04:db:26:1b:ed:de:e3:7d:7b:19:
95:4d:59:25:60:2f:68:1a:bc:79:08:dc:fa:5c:12:
05:11:1e:64:b0:b4:3b:34:3f:7a:1b:63:c4:c7:a0:
eb:04:87:21:dc:45:03:8d:3e:ac:9e:b4:51:7c:d8:
3c:1b:c9:55:af:cf:e0:6a:5d:8c:e7:87:e6:be:89:
86:86:0f:aa:b6:5c:eb:70:79:8a:f2:0a:3f:c1:d5:
69:5e:45:41:1c:ad:d2:03:46:bd:58:e9:62:8c:b1:
ed:ac:5e:a3:42:7a:eb:cd:c2:e8:c7:03:42:d6:ec:
72:68:c6:b9:96:0d:05:5e:3f:5d:74:95:fa:4b:61:
56:73:9b:ff:49:b2:20:d8:6f:a3:82:8e:bb:8d:0b:
7e:48:86:90:dd:37:dc:f6:ad:0e:bc:bd:23:3f:1d:
8a:09:8e:08:2a:07:de:de:4b:12:0d:ff:5d:49:5b:
53:6b:04:c2:7c:c0:dc:29:ae:ec:f3:46:c7:f4:8c:
29:3d:5a:7d:e7:f5:8a:85:a5:59:41:fd:85:2c:c8:
35:93:68:75:0f:b8:de:e1:68:97:45:5d:c8:11:28:
0d:f4:3f:04:b5:90:1f:f5:11:23:2a:0f:65:e7:80:
6f:60:24:ba:28:82:64:c8:50:6e:09:53:b8:44:e1:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E2:3B:48:88:16:D8:D0:B9:B7:6C:73:D5:7C:60:38:85:9A:7F:16
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:e1:31:b0:95:c4:37:14:9e:44:8c:ec:06:db:52:34:50:
11:86:9a:87:b6:12:30:6d:f6:57:f2:3f:79:98:65:60:6e:92:
6c:0f:e5:f9:3b:b2:dc:23:0f:19:b2:9d:2c:12:1f:82:74:0c:
12:ac:af:9d:d6:43:4b:4b:70:34:c7:e2:43:0a:e9:53:0d:51:
e6:cf:c3:5c:85:9a:67:10:0f:c9:0f:db:3d:f8:cf:66:c6:f0:
58:56:8a:e3:1a:c1:23:7f:13:ac:2a:80:ea:6b:7b:a8:0e:72:
a5:c3:9a:84:e2:b9:6a:97:a1:c3:56:4b:c0:d8:7c:e5:05:66:
8b:26:17:b6:4c:75:80:2a:08:ad:68:a5:1c:f9:25:b9:67:01:
fd:12:8e:99:ab:52:ec:45:65:23:90:a2:f0:68:d1:b4:db:e1:
a6:d7:6e:fa:e0:df:6e:b8:1d:49:0b:53:31:e3:51:75:67:51:
3f:9a:f6:30:07:a3:83:84:5a:c0:f3:f3:ce:df:a1:5f:ef:90:
12:cb:b1:f3:be:fe:2b:fd:31:e8:3e:56:53:3a:cf:2d:73:3d:
ac:9c:6e:a3:f8:98:f5:d6:b4:f7:79:e2:32:ec:6b:db:19:f4:
bd:37:71:ea:9e:1a:c0:d6:4c:fa:1d:81:b2:04:b0:bf:c9:3f:
90:92:27:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 19:12:33 2026 by rpki-client