
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json)
Hash identifier: hOg4hH3al41f7avWtcJ5taW/H5Cllzm70sKGv8eyp/U=
Subject key identifier: 52:CA:C5:2E:B0:40:47:B3:31:22:B6:F9:9B:BC:BD:E2:26:0C:04:22
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
Manifest number: 0212
Signing time: Thu 21 May 2026 03:13:48 +0000
Manifest this update: Thu 21 May 2026 03:13:47 +0000
Manifest next update: Thu 28 May 2026 03:13:47 +0000
Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: r9AwUC0fFEHWheQYidUhjQqEmowuB5NO4Ivsx4Rqt6s=)
2: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: M5QyWCb/5GM72fMpLUozBYOSJsZfEv4i/WvJccFY5tw=)
3: 9442231871C311EEB4110C83C4F9AE02.roa (hash: CtXBhxoisr4SYK/f9f/omh5fKwAOo6P6cylFnj5/1Yo=)
4: 7A8F4240393811F1A6F67D5ABF833773.roa (hash: /u24Mf/LgFYg4eR3AP4svNvCuvsa7zKvkdwusWLNwWw=)
5: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: 0kI9xgTVy0Q8AQiYnQllAIH+FuKivWg9E5qZ+kjunPA=)
6: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: /aPiYkMEN8C6qUO8Pny2rmzkP4V9An/tcZvBVxLgCJk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Validity
Not Before: May 21 03:13:47 2026 GMT
Not After : May 28 03:13:47 2026 GMT
Subject: CN=6a0e786c-5a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:f0:a1:2b:5f:f9:12:18:94:73:a5:13:27:
4e:e4:c5:38:27:9f:5d:a6:5f:16:54:3a:d9:38:c0:
bb:c0:d7:8a:04:df:16:57:ea:9a:4d:06:92:e3:13:
6b:b2:3e:7e:16:cb:9e:74:91:5d:cb:a5:36:41:c8:
05:f8:cd:c7:47:1e:b0:ba:53:f5:1c:1d:25:f9:1f:
e2:7c:bc:ad:24:a1:72:ca:51:aa:af:00:b1:7f:26:
9f:ba:3b:8d:34:af:bb:bd:89:99:a1:dd:50:37:3c:
3e:ee:0c:a1:f9:1c:90:c7:6b:be:b1:ae:66:b3:e1:
0d:b5:da:1c:f3:e9:a2:c8:c1:93:20:8a:bc:51:be:
07:d2:2f:5c:46:7f:43:3b:b1:20:0b:d8:67:72:72:
fa:0a:bb:0d:68:de:50:16:38:42:ce:42:e4:69:31:
cb:04:14:5b:f6:32:56:3f:2b:1a:dd:04:3c:cd:35:
2a:66:40:7c:58:98:0d:f6:5b:7c:0f:24:5d:d2:ac:
37:e7:c1:72:41:d0:f6:0b:d8:48:74:f0:4b:d7:dc:
76:6f:a3:7a:04:4e:3c:bb:03:ee:2e:55:f0:0c:ea:
7f:d7:b0:da:ff:3d:5b:ce:34:fd:36:96:ec:05:14:
a9:10:ac:59:07:91:87:65:4c:d0:a7:24:d3:b7:6f:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CA:C5:2E:B0:40:47:B3:31:22:B6:F9:9B:BC:BD:E2:26:0C:04:22
X509v3 Authority Key Identifier:
keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:04:3e:f0:28:54:ce:7c:25:98:1a:db:96:f1:63:c9:25:ab:
87:d4:7f:5a:00:a1:a2:46:41:8d:fe:fb:53:9a:d4:c2:c1:1a:
20:cf:73:df:bc:8d:d9:cc:34:48:e2:2c:10:f0:7a:18:58:54:
d1:8e:17:f7:53:5e:e0:78:32:00:8f:eb:e1:55:ab:2f:f1:02:
a7:7b:9e:e1:73:83:55:e8:40:ee:0d:6d:7e:c6:4f:b6:48:67:
1a:c2:48:b9:fe:13:0c:cf:79:52:41:b3:8d:cc:41:84:13:ed:
cc:7b:0a:72:bd:bd:ec:51:84:5d:0a:40:0f:29:f4:b9:dc:c4:
00:d9:a6:4c:7a:8e:27:00:3e:80:c7:54:d6:0c:3f:4e:05:13:
60:c6:a0:98:0a:1e:07:df:b8:3c:4a:b7:e3:ce:8d:6b:9a:91:
da:e9:ce:2e:17:24:9e:ad:46:13:45:f4:91:42:b6:2c:93:5f:
0e:d4:98:79:f3:60:5d:e1:0b:3d:d2:6a:8e:c0:0b:cb:8c:e3:
80:d4:cf:6b:bc:9d:09:ba:89:ba:cd:50:5c:b3:a7:80:c6:9d:
cd:88:7a:2e:c3:8f:e8:fa:66:95:53:b9:f6:25:a1:ad:30:56:
cc:d2:b7:d8:e4:ad:f4:aa:20:49:1d:ad:37:2a:bc:6b:1f:82:
b4:23:fd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:39 2026 by rpki-client