
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json)
Hash identifier: oh29XltrmfE2MF9GJKPk0fDYuYUoFe79dgyP6NvGf3c=
Subject key identifier: A8:36:6D:F4:C8:5D:6A:63:D3:B0:6D:38:D7:33:7D:C9:30:E0:9E:5E
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
Manifest number: 8C
Signing time: Sun 05 Apr 2026 06:57:59 +0000
Manifest this update: Sun 05 Apr 2026 06:57:58 +0000
Manifest next update: Sun 12 Apr 2026 06:57:58 +0000
Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: LjDVqmhvqlMtQwD6cO/X6J+qILHGQfKTzKymmsqyRW0=)
2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: DfP6HXkk7ZkiBK57u8/8M6u5qiXHtYdjtBByCV+JXf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Validity
Not Before: Apr 5 06:57:58 2026 GMT
Not After : Apr 12 06:57:58 2026 GMT
Subject: CN=69d207f6-242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:64:b5:11:88:01:42:25:c6:4a:e1:78:51:
34:87:76:98:36:c7:8f:37:4d:1a:74:87:53:1f:dd:
ec:0a:a4:81:15:ac:d0:09:aa:c7:7e:d0:cd:c2:6d:
ea:52:e3:93:57:d2:b5:06:f4:97:14:96:96:62:65:
cd:d1:f9:14:4d:9b:b3:ad:4c:89:65:41:4b:53:83:
61:de:0d:32:dd:95:a4:53:49:8d:0e:3b:4e:3b:e6:
af:66:1a:a7:f7:0a:fe:c7:b9:cf:cd:38:52:ad:1c:
da:5f:cd:ac:d0:38:28:a4:28:80:f8:de:f1:a4:e8:
07:4d:3f:8a:1f:65:17:8a:26:37:86:7e:12:ae:fe:
51:5d:61:46:c3:b3:b3:67:a9:09:26:e1:0d:21:9c:
d3:7b:c1:68:1d:ce:e8:c5:18:b0:4a:b5:82:ed:5d:
3f:eb:9f:08:65:9f:11:97:b1:ea:aa:f8:60:70:0e:
fa:af:c0:3c:d8:69:31:b6:9f:2f:9a:83:72:98:4b:
02:06:5b:86:9b:96:01:a0:07:42:a1:ac:a9:63:e4:
c4:52:f8:ce:c6:03:dd:2d:7c:60:d2:f6:f9:65:14:
f4:53:54:1a:10:9a:f6:de:0d:97:6e:9b:1e:fd:2d:
c4:99:9c:a4:50:98:8a:ac:42:fc:c8:ef:22:7c:df:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:36:6D:F4:C8:5D:6A:63:D3:B0:6D:38:D7:33:7D:C9:30:E0:9E:5E
X509v3 Authority Key Identifier:
keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:aa:8b:39:82:08:8d:c0:39:75:e6:ac:aa:31:26:89:07:23:
30:41:81:5f:9e:da:be:8b:61:af:36:04:3a:1a:b8:4e:14:1d:
57:67:1e:e3:34:53:14:e6:f7:53:8b:dd:11:d3:85:50:7d:3b:
41:f9:9b:cb:2f:0c:c4:0c:8b:b2:30:f4:a0:43:55:03:7b:b2:
c1:8c:d6:85:96:50:5d:b2:b1:aa:a1:53:75:c6:c6:01:86:46:
f6:27:17:38:93:9b:9a:c9:bb:32:17:ca:14:d1:df:c1:76:1f:
b0:72:80:a8:0d:93:d6:e2:b2:3a:22:f5:2b:05:42:d4:16:20:
74:d0:22:eb:29:0e:70:1d:a1:d6:47:8a:67:e5:79:26:de:42:
0b:be:21:a5:ab:90:f1:e4:bc:65:92:93:0f:59:a0:c4:59:10:
6a:cb:8f:3f:21:a2:c0:43:d2:1b:eb:61:a6:5d:7b:81:2d:ac:
1c:08:73:a9:a8:24:ac:4a:17:c4:c2:3c:fd:78:3a:77:b5:a7:
82:f1:58:5d:73:98:ac:28:fb:9a:b6:3b:a4:b7:0d:78:65:f9:
e5:44:42:b3:35:36:a8:72:32:5a:6b:01:68:1f:80:59:9c:8a:
92:8f:fd:a8:bc:a7:f5:dd:db:e6:dc:fd:41:e7:f4:44:0c:8b:
f3:d4:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:05 2026 by rpki-client