
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json)
Hash identifier: WSk1wq+Itm0GGhZJs8AgTFNN+7P+y2oBMRWCGoFjgzQ=
Subject key identifier: C9:4F:97:14:01:98:E6:F5:53:E3:81:E1:FD:12:1D:D4:22:B0:06:E1
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial: D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
Manifest number: D0
Signing time: Wed 19 Aug 2026 07:27:54 +0000
Manifest this update: Wed 19 Aug 2026 07:27:53 +0000
Manifest next update: Wed 26 Aug 2026 07:27:53 +0000
Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: d/00IGLeXMZx/dj9NLTXZWl9nO5TIziSyjsVJKA2XmE=)
2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: DfP6HXkk7ZkiBK57u8/8M6u5qiXHtYdjtBByCV+JXf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Validity
Not Before: Aug 19 07:27:53 2026 GMT
Not After : Aug 26 07:27:53 2026 GMT
Subject: CN=6a855afa-cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:c1:e7:6b:00:8b:2f:e5:2a:cc:a9:c8:af:
7e:14:f5:40:14:da:7f:57:40:6c:c0:9e:4e:11:0a:
80:1e:dd:ae:36:68:8e:69:96:d4:98:6d:94:2d:27:
55:dc:42:5b:24:9d:cf:d9:5a:b7:94:86:ec:b9:b6:
63:aa:34:7f:a2:f7:a1:13:73:f4:79:25:03:f4:1a:
84:2b:47:ed:28:96:fd:7d:86:b0:5b:2f:b8:ca:d5:
26:48:07:0f:33:cc:ab:27:91:c4:f5:b9:3e:07:3b:
94:18:54:aa:e7:67:75:df:47:f0:35:07:2f:ab:2c:
da:55:ed:7e:9b:b5:68:9b:ba:56:c1:9a:cc:48:14:
f3:97:b9:1e:a3:c4:da:4b:91:c2:ef:0b:96:e6:0c:
5b:08:cd:e3:fc:47:0c:8f:10:fa:10:d3:b0:9f:b0:
f4:0e:e2:90:43:35:ad:a8:15:54:ba:fb:a0:9e:e7:
6d:04:53:2e:d8:78:b6:60:a7:67:bb:f0:2c:20:8c:
5d:90:74:e6:46:a7:0c:cc:a9:a2:94:99:94:ee:43:
fb:bf:87:c4:fa:39:2b:86:9e:71:53:a2:60:17:e9:
d2:fd:8e:9f:05:8e:bd:de:ff:93:77:c8:f3:35:e5:
31:1b:d3:c5:82:f2:ac:d2:28:87:91:95:41:b8:62:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4F:97:14:01:98:E6:F5:53:E3:81:E1:FD:12:1D:D4:22:B0:06:E1
X509v3 Authority Key Identifier:
keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:3f:49:bc:5c:da:9a:c6:10:82:f5:b5:5d:87:6e:04:e1:f6:
90:d3:eb:71:b7:f7:59:56:16:02:06:23:d0:f2:a7:ce:d0:66:
4d:44:53:d5:09:ae:d1:c8:e1:9b:44:84:4b:7f:fa:f5:a8:f4:
7f:18:03:2c:06:5d:57:85:de:d5:fd:de:d4:5c:c6:f2:72:9d:
cd:25:87:bb:a6:31:e1:14:4c:22:ea:07:41:dd:de:62:ff:c5:
26:56:d9:e0:ad:d5:08:7e:64:2c:d2:90:09:70:a9:8d:68:42:
e8:fe:a5:9b:7b:6a:58:a8:9c:57:61:f4:ec:97:69:5d:79:7d:
d9:2b:4e:40:f9:ac:b3:ff:d1:91:e5:65:75:4d:78:11:75:68:
53:e0:5c:ce:56:07:55:b6:35:3f:ab:72:ab:1d:35:71:18:03:
c4:94:09:26:1c:be:16:8b:6f:e5:b8:b5:d7:f8:99:bd:e0:c3:
ec:b7:f2:7f:7b:78:92:ba:15:8f:8d:3c:99:64:fd:94:7b:b3:
c7:10:2d:f7:d0:1d:a1:06:2b:0f:c7:23:9e:da:1a:4f:f7:ea:
37:e1:99:8f:3a:bf:5b:be:fb:26:dc:dd:08:64:b8:47:8b:c0:
2f:03:6b:f2:cd:73:5e:9b:ef:fd:1c:20:c9:12:57:3c:f6:d7:
04:f6:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:58 2026 by rpki-client