
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json)
Hash identifier: PtBjM4QcfdPhqCGPTIZOonMs+49EwtafV0ci8YLrJeQ=
Subject key identifier: 30:5F:B2:08:D1:B6:49:27:84:25:09:FF:26:3F:B5:B7:C4:B4:59:16
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial: 0291
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
Manifest number: 027F
Signing time: Sun 05 Apr 2026 01:34:56 +0000
Manifest this update: Sun 05 Apr 2026 01:34:55 +0000
Manifest next update: Sun 12 Apr 2026 01:34:55 +0000
Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: BOjAi1NSRwJIE7i0oNpQVVAHV3abTAzBfOoIH4aP03I=)
2: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=)
3: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Validity
Not Before: Apr 5 01:34:55 2026 GMT
Not After : Apr 12 01:34:55 2026 GMT
Subject: CN=69d1bc40-b22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:ab:e1:f7:c5:6e:08:00:d0:64:54:a6:1a:
26:f2:8c:1c:84:86:14:e2:34:d3:93:19:db:89:76:
7e:ab:12:c2:31:68:d8:2d:6e:e6:29:49:2e:a7:73:
76:91:c7:a8:c8:dc:da:05:19:d9:9c:c2:af:24:29:
c6:7d:5c:ea:c7:21:bb:f5:dc:2f:f8:3f:46:bf:0f:
2f:ae:03:05:c2:a3:cf:09:86:a8:c0:3d:bc:1e:e4:
f3:67:56:57:b7:05:1b:78:91:dc:e5:c0:3b:21:e0:
20:bd:14:ef:a8:28:e0:44:4e:89:63:bc:f0:68:90:
fe:6a:6c:b4:de:b0:7b:2a:a2:2b:f1:cd:5c:99:3f:
5c:76:ff:60:ef:4b:a3:41:1a:09:f1:a1:07:15:c4:
55:fc:5f:9b:11:c2:ae:e7:2b:fa:c9:74:cc:5e:39:
d4:c3:63:f2:bc:a9:d2:ea:b1:b0:45:3a:a3:bc:90:
50:4c:94:2c:23:a3:ec:18:11:bb:7e:f4:37:dd:0b:
22:85:ea:6c:a9:96:bd:eb:4c:5f:8f:63:6f:a6:a0:
39:93:d8:59:34:31:28:ff:4e:08:0a:61:3b:80:f2:
6c:af:2d:5a:73:d8:f4:33:30:d7:d7:bc:d7:4a:fa:
15:7f:93:03:eb:20:7b:b4:2e:f8:ce:b3:d1:8e:63:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:B2:08:D1:B6:49:27:84:25:09:FF:26:3F:B5:B7:C4:B4:59:16
X509v3 Authority Key Identifier:
keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7a:78:74:e2:83:3b:b1:85:7f:6b:6b:34:76:07:e5:9d:3f:
61:94:db:29:35:bc:4c:43:57:4f:f9:e2:88:e1:ac:c3:ac:35:
bb:fa:4c:fa:10:01:df:61:0c:1f:b7:22:ea:55:25:8b:bd:8b:
25:3b:94:af:6b:c3:8d:6b:d1:bf:ec:7d:66:40:b6:1c:28:0b:
0c:5d:f6:23:c6:1c:19:b3:8c:95:94:ee:4d:5a:bf:00:70:5d:
33:04:b4:a2:79:63:56:34:8c:fb:c7:97:0a:f3:75:6a:5a:39:
57:cd:3c:14:90:47:2b:05:89:cd:e0:ae:cc:9e:bd:7d:82:93:
07:d9:8e:99:43:2c:71:16:d7:ff:0a:2e:b8:df:ff:a3:55:fe:
f0:68:64:80:1b:25:b0:d5:0e:01:c8:46:ff:d5:12:6c:be:d4:
1d:8f:44:d9:6d:cc:24:9c:a7:97:ab:d8:31:cf:b9:e1:0b:eb:
1e:45:4a:da:e7:1d:05:1a:04:cf:0e:32:dd:c8:68:2a:05:2c:
be:3b:bb:01:2c:4a:10:66:09:b5:63:d8:45:a7:76:4f:68:bc:
5f:fe:69:64:89:d6:ef:45:a4:65:b3:a5:c5:ef:1e:54:23:a0:
41:4f:ba:f3:24:cc:eb:b2:56:a6:33:42:b9:2f:ca:8a:39:96:
ae:41:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:43 2026 by rpki-client