
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier: f5oZQddcQgVIe2QovGasQqWBBbfifXxZX5fxk65CIpw=
Subject key identifier: 0D:40:8B:7C:BD:FF:A7:52:05:33:5B:43:00:A3:87:BD:19:35:E7:A7
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number: 0252
Signing time: Sun 05 Apr 2026 01:51:19 +0000
Manifest this update: Sun 05 Apr 2026 01:51:19 +0000
Manifest next update: Sun 12 Apr 2026 01:51:19 +0000
Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: 8ORit1663T6DxQUbLjGoOTg4fAAin7d9BoyxSydqAUc=)
2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: 1d10xZbJawZOgiRoLspusD2wd9i5IKQYkPksSCGbosM=)
3: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 5KyYdKKzKKNZJ5o3lIKnEvZm4/+01rm3shU8ePI1af8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Validity
Not Before: Apr 5 01:51:19 2026 GMT
Not After : Apr 12 01:51:19 2026 GMT
Subject: CN=69d1c017-4aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:5b:fd:6a:a2:c4:f2:43:ef:6e:0a:5b:6d:
10:9f:a6:62:d0:f6:63:19:e5:da:6c:e6:0f:8a:26:
af:79:b2:18:e0:dc:fb:66:da:a5:3d:22:e8:03:62:
94:4f:8f:11:86:c5:d4:2f:5e:68:c4:b6:48:96:27:
de:8d:f6:e7:8c:22:06:0d:e4:dc:b1:4a:75:71:0b:
2e:86:f0:aa:60:7e:51:48:64:87:78:f4:e4:c5:23:
01:9c:e7:85:8d:36:9a:0b:3b:6e:41:66:1d:2c:02:
99:ce:91:86:7c:a2:f1:c0:c2:25:63:82:16:1f:38:
94:84:71:39:c7:d0:d1:91:5c:12:27:0c:3f:57:79:
6a:e7:dd:97:a0:16:64:e1:a8:b6:9a:df:d0:b9:b7:
27:94:a4:0b:dc:6b:f3:8f:95:35:fe:ac:18:b6:b2:
3e:ba:31:14:b8:91:b8:0d:78:e0:cf:22:f1:32:e6:
eb:23:6c:75:bd:4d:8f:ea:b8:44:9e:07:21:e1:d6:
70:bf:e1:ba:be:b8:bd:c6:e3:ae:21:bd:7c:9d:21:
65:a8:82:13:24:1b:42:a1:ac:80:28:57:54:d1:8c:
14:3d:d4:b2:3e:07:98:1d:24:db:1e:94:fe:32:1d:
4f:fb:d0:15:ad:8f:93:d3:90:96:e7:51:57:f4:ad:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:40:8B:7C:BD:FF:A7:52:05:33:5B:43:00:A3:87:BD:19:35:E7:A7
X509v3 Authority Key Identifier:
keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:c2:12:0a:99:ae:5a:46:36:c3:29:1f:e1:7d:33:7b:cc:ab:
1e:8f:fc:df:16:71:42:a4:9d:d3:4c:2e:72:9e:ed:4e:6a:62:
03:89:56:e3:cd:32:55:91:88:e2:15:a2:6c:62:95:9c:67:68:
54:63:aa:60:0e:c3:38:91:8e:7e:f8:c3:18:b5:ed:c7:ee:a4:
09:9f:35:1c:70:77:9b:75:c8:4f:4a:ae:21:44:6d:51:34:c6:
ab:2f:2e:60:d6:22:11:da:f1:f9:bd:9d:da:3f:5f:58:83:bd:
7c:dc:81:53:93:ad:dd:fd:5f:89:10:8d:1c:ff:64:1d:4a:21:
c2:2a:18:54:f2:da:91:68:02:cc:01:c0:fc:f5:70:41:20:9b:
19:b3:9b:75:dd:52:3a:1c:84:cf:c9:89:a9:4d:7a:93:45:fd:
89:95:ed:b5:a3:1c:07:f0:73:22:2a:a3:05:c3:d9:91:ef:95:
2a:63:7d:39:5d:8e:cd:27:0c:1d:4f:4f:47:2d:bf:35:ca:b4:
f9:a6:d0:08:c5:f3:44:99:72:a7:06:10:d2:72:be:57:b5:bc:
f8:36:7b:75:8d:21:d5:44:4f:02:8d:68:7e:f8:c3:ab:f0:8a:
db:71:04:c2:d2:7b:bb:e1:08:56:c2:c1:63:50:34:8a:78:e5:
a5:95:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:25 2026 by rpki-client