
$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier: BCsb4GdJIpXyQgdnsxPAFG4JSgEYGJAAPFbBR/AHfgw=
Subject key identifier: 08:35:FC:1D:1E:3D:78:39:54:73:8B:FB:34:A1:31:4A:CC:98:50:86
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial: 0998
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number: 0976
Signing time: Sat 04 Apr 2026 19:54:10 +0000
Manifest this update: Sat 04 Apr 2026 19:54:09 +0000
Manifest next update: Sat 11 Apr 2026 19:54:09 +0000
Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: 0UJMbTh+nrq1zhI0z3KEbtUocRq9FN99pwQBLdILB3g=)
2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: bij0GPc4q/HmqyQVEL/k0toCpN5+LlxlDW2eG5CFpnk=)
3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: gVcn2SvZaK2nbxle9CZzKz71vAlE+GFSMyND+4DCZiA=)
4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 2QiWBnPaUCTJvdNP0zBmyWdyn7oHyts1Ul70IjP2j6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Validity
Not Before: Apr 4 19:54:09 2026 GMT
Not After : Apr 11 19:54:09 2026 GMT
Subject: CN=69d16c62-ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:21:d2:2c:ab:c0:ba:ea:b4:55:e6:70:74:
d0:0e:2b:1d:4c:f5:74:54:52:20:07:94:c1:33:bd:
17:07:35:0c:68:de:36:fb:c7:06:31:31:ce:8b:89:
da:cd:5b:f7:4e:73:82:e0:68:7e:3b:a6:d8:5c:40:
37:a5:88:02:e5:68:7c:62:a7:2e:c6:08:e0:be:fd:
b3:da:08:5a:30:24:22:ca:c8:8e:74:0e:58:3f:f8:
20:78:26:98:31:61:e1:55:c5:79:c9:bb:9a:01:85:
0b:5b:48:f7:45:68:e7:dd:b3:fc:1b:21:c6:b5:2d:
66:fb:c5:59:a6:0b:64:b9:14:ed:41:cf:5c:55:5d:
ce:db:3a:c4:66:b1:76:4d:2f:0a:6c:db:87:b8:11:
77:3f:54:5c:ac:8b:f5:6b:b8:f4:c5:84:e0:ff:1a:
89:58:cd:69:aa:a3:f5:03:96:e8:ca:78:94:fe:67:
a3:36:bb:ef:4f:94:f6:69:24:03:e9:44:5a:fc:03:
bd:f5:28:0d:aa:00:1b:0d:15:40:d7:6f:64:d8:66:
bf:2c:47:f6:b1:b5:1e:1b:08:d4:8b:90:f3:04:8b:
70:82:54:b3:43:25:15:d9:b7:f1:49:a6:86:98:a2:
83:d9:27:62:8d:75:f6:72:09:32:92:43:9b:88:dc:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:FC:1D:1E:3D:78:39:54:73:8B:FB:34:A1:31:4A:CC:98:50:86
X509v3 Authority Key Identifier:
keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:b8:03:9c:fb:cf:88:a4:cd:e2:51:ca:fa:3a:76:81:0a:54:
4b:bb:6e:39:8c:05:ef:09:91:77:16:c1:bb:29:9c:6e:c4:fa:
14:6a:4f:01:90:b5:00:20:ae:c7:46:33:c5:0b:aa:2d:fc:e9:
83:85:28:f2:00:2d:f0:b9:c9:23:80:73:ba:91:21:c2:c7:7f:
eb:d7:e9:48:1a:d7:25:25:b4:5e:d4:39:0f:ae:31:3d:4a:2f:
d7:40:c5:6a:3a:dd:0d:4d:37:4f:26:4e:64:04:6a:78:49:97:
fd:79:af:3f:d0:0b:46:9a:bc:08:56:58:6b:91:de:20:0a:3e:
93:1d:55:b0:81:cb:89:ab:5a:db:99:f6:12:ec:d6:50:69:9b:
e6:fc:59:2f:38:29:0e:2f:75:d4:88:2c:13:14:6f:3b:ce:e1:
56:c5:f5:2a:17:ed:e4:19:74:65:bf:c1:b1:c7:0a:17:85:4c:
2f:de:0c:b8:71:b4:aa:c3:b7:e5:12:0d:17:6e:15:0d:85:d5:
8f:f6:90:61:5b:c0:9c:f8:e8:26:89:5c:62:25:20:25:f3:ee:
83:0f:47:fc:b6:fa:90:b9:54:ab:27:c0:37:10:8d:81:57:24:
9c:0e:13:23:91:71:0c:cd:34:f7:1d:6e:1a:69:16:49:68:d8:
8c:8e:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:38 2026 by rpki-client