
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
File: M4rb8cC2l609XDM4P-XhuFzxgck.mft (raw, json)
Hash identifier: rvn3iRw4O4g1rBJ38shUhP520Uq5hIaLEjbOtL/Iv7I=
Subject key identifier: DE:2E:8B:0B:3A:A7:D9:74:7B:6A:43:F4:C1:19:74:0A:BE:E0:22:FE
Authority key identifier: 33:8A:DB:F1:C0:B6:97:AD:3D:5C:33:38:3F:E5:E1:B8:5C:F1:81:C9
Certificate issuer: /CN=A919852D/serialNumber=338ADBF1C0B697AD3D5C33383FE5E1B85CF181C9
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M4rb8cC2l609XDM4P-XhuFzxgck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
Manifest number: 1C
Signing time: Thu 03 Sep 2026 09:09:56 +0000
Manifest this update: Thu 03 Sep 2026 09:09:56 +0000
Manifest next update: Thu 10 Sep 2026 09:09:56 +0000
Files and hashes: 1: M4rb8cC2l609XDM4P-XhuFzxgck.crl (hash: j63UfVjxcI1nt846sJWo9ujt+UweBXo6AFkHghnf1Es=)
2: 429F6EE8803F11F182A18FE76CA30FBC.roa (hash: dCeZB0WzfHTq5//o/GdMc2OXxNFfT9kxCEwvlspQPz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.crl
rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M4rb8cC2l609XDM4P-XhuFzxgck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919852D, serialNumber=338ADBF1C0B697AD3D5C33383FE5E1B85CF181C9
Validity
Not Before: Sep 3 09:09:56 2026 GMT
Not After : Sep 10 09:09:56 2026 GMT
Subject: CN=6a993964-f2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:64:e4:68:1d:94:dd:d5:08:c2:44:6e:fd:
44:7f:46:2c:d7:ff:09:de:66:64:e5:10:f6:86:aa:
ae:58:bc:08:d0:73:bf:a4:0f:45:1c:67:c4:e6:43:
53:c1:38:8f:0d:b2:01:9b:7a:14:7f:23:d5:46:47:
72:ed:63:14:9d:fb:a7:e3:6f:f6:5d:bf:d6:75:ec:
ea:ec:75:39:ef:aa:d0:c3:8e:c5:68:a1:aa:20:5a:
24:ac:e4:09:11:2c:dd:6e:29:d8:34:8d:51:04:e9:
b1:6c:21:5b:92:61:dc:58:24:d0:15:37:b6:29:6c:
c5:e6:fb:85:f6:31:16:58:48:3e:0a:a8:78:1e:8f:
16:90:a0:f1:59:af:cc:33:83:2e:2e:65:31:15:21:
16:0b:81:62:c5:eb:6a:3a:52:50:58:5d:f1:9a:29:
ba:39:7f:7d:1e:3d:96:69:e7:d6:45:92:c3:70:24:
7e:dc:71:9a:ac:97:db:a7:a6:92:44:d4:c5:f3:8e:
22:36:ba:e5:eb:7b:85:ea:2c:64:4a:f2:b5:cb:4d:
cb:a4:a1:76:85:e5:a8:11:e8:74:70:48:84:36:87:
d4:af:c4:40:e0:42:f5:36:4d:63:3a:03:1d:63:a0:
e6:60:4e:b1:ae:ca:ca:d8:69:6a:32:22:51:5a:11:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:8B:0B:3A:A7:D9:74:7B:6A:43:F4:C1:19:74:0A:BE:E0:22:FE
X509v3 Authority Key Identifier:
keyid:33:8A:DB:F1:C0:B6:97:AD:3D:5C:33:38:3F:E5:E1:B8:5C:F1:81:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M4rb8cC2l609XDM4P-XhuFzxgck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919852D/E1006B88803E11F1916EF3D76CA30FBC/M4rb8cC2l609XDM4P-XhuFzxgck.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:99:cc:a7:d0:f7:4f:71:fb:75:53:0a:27:b3:7d:94:2f:ba:
5f:9e:d4:30:a4:9f:50:92:f2:29:20:6c:96:bf:64:1b:a4:11:
ce:9c:9c:ac:68:f2:7c:b3:92:5e:1d:d0:7b:c2:f6:f2:2f:a4:
b8:1d:e7:87:9b:73:fc:19:97:c2:10:27:b0:31:37:34:be:8b:
2f:21:5e:c3:16:47:c6:37:d6:31:d6:6e:41:1d:37:70:d5:a2:
d6:65:b2:45:8a:6d:ed:09:24:6e:0a:c0:ea:b5:cc:bf:b4:39:
b2:f3:d2:7f:cf:98:89:b0:62:94:48:56:50:a1:4a:ce:fb:c2:
69:e1:62:35:87:c4:e6:6a:ad:b5:56:55:a0:6a:56:86:21:4f:
b1:60:03:0a:fa:94:e6:b2:69:26:52:0a:67:06:14:03:2c:2a:
29:29:04:0f:c1:8a:2e:47:37:de:00:92:90:ce:88:26:b4:c0:
7c:d4:38:dc:04:ce:d2:88:9e:99:2d:0a:20:33:dc:b7:bb:62:
4d:25:fa:d7:b7:e2:08:5b:3e:c1:1c:af:a1:54:6c:3d:19:39:
cf:a5:97:e6:67:27:92:09:a8:0d:65:7f:92:98:34:30:72:a1:
39:bf:5e:e7:55:d0:7a:f4:01:fd:62:2a:a4:1b:0d:90:f4:8f:
d4:9d:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:42:15 2026 by rpki-client