
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json)
Hash identifier: 3395vYrdONUFZu2wFUgsHBIEhu7v8A99qvvwVYr0wGs=
Subject key identifier: 82:44:B8:1F:E8:0E:4E:0F:FC:73:1F:4A:2C:EA:BC:BC:0E:AA:0F:B8
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 0140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
Manifest number: 0104
Signing time: Tue 07 Apr 2026 06:20:05 +0000
Manifest this update: Tue 07 Apr 2026 06:20:05 +0000
Manifest next update: Tue 14 Apr 2026 06:20:05 +0000
Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: ZcYWKXAXDqrmrn/Oj1yoWIxEs5Zo8WUMPu/rE8Q8/48=)
2: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: 1ANuhs6jNpCXfaJ6odiDHTbqhPQhhIhyQT9nqM1i4cg=)
3: 71A92448186E11F083760527C4F9AE02.roa (hash: b7QaG+Nx/PTzoPZCl0t+vIuGgyWjiuhcViAVTwKgxf4=)
4: 13B46272139511F0BAC02735C4F9AE02.roa (hash: 9BLP4fuFM870a7urAU2qoqDlhTnPcRo3RUzBO9Wc+7c=)
5: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: 4vHzok/E524QlRcfSwftnk85HN/jHQnXadbkicvtcjY=)
6: 95E16734187411F099AC2133C4F9AE02.roa (hash: Rb86kkLgxPAlqIwO4QvbpP4uIJywx0xREjWfrACGqjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Apr 7 06:20:05 2026 GMT
Not After : Apr 14 06:20:05 2026 GMT
Subject: CN=69d4a215-9679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:d2:a7:f5:d4:0a:08:34:dc:19:4b:44:41:
6b:c3:9e:57:53:2d:6c:aa:49:c8:f8:dd:22:8f:11:
21:3c:84:5d:3a:b4:a5:67:10:ea:11:ac:94:a0:52:
eb:a1:d3:68:3c:fa:0f:c1:90:1b:e8:28:46:a4:98:
87:51:db:91:4f:b6:93:92:50:b7:37:52:fa:56:01:
59:56:c7:1e:52:30:da:85:36:83:e3:07:4d:a7:b2:
16:32:22:7e:85:3b:2f:02:71:0d:b5:a5:1f:6f:35:
d0:c4:a7:90:53:97:d3:49:a0:c0:5a:25:32:44:0c:
64:02:56:87:b8:eb:d1:ce:68:24:57:80:c9:1d:08:
a1:76:ab:a6:30:de:af:2a:e7:ee:58:48:f7:d4:39:
fb:12:9f:12:db:7b:b4:53:1b:25:db:d1:d2:18:2f:
38:9b:5a:32:0b:8d:9f:ee:9e:5c:50:de:75:15:bc:
e0:b6:7c:29:f3:7a:05:18:86:ac:95:66:7e:88:94:
4d:9b:c9:60:54:04:d0:d1:58:73:0c:27:e2:d7:b5:
1f:fb:a7:15:cf:ab:5d:34:e3:3a:e9:82:e2:b9:aa:
09:60:ee:ed:1c:13:b0:04:1e:fb:70:25:15:2f:c3:
9b:a3:e1:c7:55:c2:aa:04:31:09:b9:17:22:e0:c0:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:44:B8:1F:E8:0E:4E:0F:FC:73:1F:4A:2C:EA:BC:BC:0E:AA:0F:B8
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:5d:a6:d0:a9:b9:6d:66:94:1f:92:ee:25:5d:c8:ac:28:79:
a4:07:5d:d4:fb:f1:a3:97:19:89:19:a7:11:f4:bc:6c:06:89:
3f:74:c8:ec:d9:23:23:f3:8d:41:c9:c4:79:64:7a:4e:cd:15:
31:84:e0:68:39:d9:2f:9d:59:ba:5c:4a:8c:4b:aa:b6:4c:0e:
5e:88:39:d1:81:13:45:54:d0:8c:f9:93:7d:65:2c:9f:3a:85:
da:27:20:5b:ef:c1:b7:67:47:77:56:f5:0b:47:f6:d0:47:ef:
a9:6b:c1:7b:72:63:04:fc:de:1b:0c:b7:d8:52:86:4c:f1:1d:
b9:e4:d4:0b:44:fb:c8:99:ea:0f:8b:8a:41:45:04:36:35:1f:
46:6d:f3:e2:5e:a6:e1:71:34:60:7d:a4:b7:c2:72:74:7a:83:
93:92:6c:6a:99:28:cf:04:ed:c1:94:0b:c9:8c:f3:72:c8:e1:
4d:12:b7:67:1a:75:11:49:a2:dd:74:d2:aa:61:fe:e8:65:c6:
d7:ea:dc:f1:42:bb:ff:e6:50:16:17:26:52:23:f1:57:85:b5:
fe:f1:5f:cc:64:e9:1b:28:bd:ce:bb:09:51:37:de:cd:1e:a0:
18:fa:11:26:6f:7a:10:d8:51:49:32:3c:29:d2:fe:ee:5d:80:
ee:84:44:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:33:30 2026 by rpki-client