
$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
File: 4mZe42LlzFj31n9Ka3YhqkYL044.mft (raw, json)
Hash identifier: nST3cocIL7tzDuFYIEFDO/J+7IKLbXshRm7CFLhKyyc=
Subject key identifier: 42:FE:B2:CA:63:94:02:4F:DA:30:70:19:00:61:B3:4B:E5:62:AC:5B
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
Manifest number: 080D
Signing time: Sat 04 Apr 2026 20:57:51 +0000
Manifest this update: Sat 04 Apr 2026 20:57:50 +0000
Manifest next update: Sat 11 Apr 2026 20:57:50 +0000
Files and hashes: 1: 4mZe42LlzFj31n9Ka3YhqkYL044.crl (hash: w1U2kLHXcdacaXlsTm0w6MuxGh5cAWZpRkndMd5ivD0=)
2: C4ADE9F6BC6C11F0A0E57E30C4F9AE02.roa (hash: QQD+HK4WN4jCMXTqepne7XvoWo6FYRtiqfAUfqJBvOo=)
3: C08B23401DA511EBAD78BB46C4F9AE02.roa (hash: VzHmzT9qEOc8jaNdnRrhA4Hy1ZCyxxdz/VTcSRfJzdM=)
4: D57EF608BC6C11F0894F2331C4F9AE02.roa (hash: GGxh8T4eQEnDyas21T9qVQNrdHjJmohVPNS9oMQLlS4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Validity
Not Before: Apr 4 20:57:50 2026 GMT
Not After : Apr 11 20:57:50 2026 GMT
Subject: CN=69d17b4f-3b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:36:5c:f3:ed:f5:94:c3:cd:46:f7:bf:e1:
4f:01:93:f0:a7:29:df:d1:cf:77:99:85:55:d2:99:
09:dd:08:10:24:52:a4:20:7c:f1:a0:0d:b4:70:d4:
5d:b3:e4:a1:e5:7a:a9:ca:4e:33:63:d4:3b:0a:6b:
f0:e7:a4:ff:02:c2:e3:34:48:fe:06:b4:a0:27:4a:
7f:e8:03:c6:7c:0f:84:98:ca:95:11:24:ac:7c:ef:
99:f6:17:72:3e:f0:4a:4d:c7:e0:11:e9:d6:22:85:
bc:db:84:8a:18:1f:f5:78:47:0a:f5:32:5a:47:e3:
f0:6b:49:d8:0d:f6:58:c2:27:a1:c3:30:2c:eb:b9:
0e:c9:be:2b:77:b4:e4:53:0f:80:db:fb:31:d4:25:
f4:54:c6:07:02:43:12:09:a9:9b:65:15:9e:19:6a:
eb:cf:9c:b9:2d:13:7b:25:1c:35:c0:04:18:a2:22:
94:bc:eb:57:e0:bb:33:a9:0b:b5:90:fd:b4:97:56:
d2:49:f2:96:df:67:ce:ff:91:bc:40:82:e8:2a:be:
66:65:69:bb:53:12:68:20:0d:57:a4:b5:33:90:93:
67:2f:70:87:c5:1d:31:67:d9:4f:18:c7:60:16:0c:
93:af:34:bc:09:58:a0:a1:d6:2c:98:ad:4c:16:b4:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:B2:CA:63:94:02:4F:DA:30:70:19:00:61:B3:4B:E5:62:AC:5B
X509v3 Authority Key Identifier:
keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:3d:61:8b:12:9a:28:8e:e3:71:45:b2:14:e0:5d:17:23:c5:
2c:8f:97:b1:f1:7f:cf:3e:93:4d:22:ba:55:59:b6:59:e9:6e:
d1:74:4b:46:1c:18:34:94:7d:bc:e4:b3:21:25:b6:43:b3:2a:
85:4f:7b:01:ac:ee:ad:c0:64:27:c1:5d:37:0d:51:c4:ad:da:
35:9e:42:05:73:b9:fb:f7:cf:f1:75:de:2f:d9:78:ed:66:91:
7a:64:4a:b1:8b:96:38:bd:10:ab:ee:f8:e7:0a:37:7d:24:a3:
35:26:e4:e9:9f:a1:e7:c1:ef:23:1e:ba:7b:29:d9:f9:65:99:
a8:65:c2:61:2d:68:4d:df:ab:0b:c1:0d:db:e1:49:49:e7:18:
cb:47:8f:b3:af:8d:19:b8:71:16:dc:01:d9:21:32:1e:c4:fb:
97:d9:39:55:85:c0:c8:55:2f:42:0d:81:75:55:db:70:a6:9f:
06:c4:22:1b:f9:84:c4:bb:82:9b:e8:db:fc:b1:ad:88:d9:bc:
9e:09:ef:05:44:66:61:dc:48:10:09:c6:01:3b:4a:dc:1b:13:
6e:2a:4b:27:35:18:e9:ae:bb:25:56:f2:cb:85:3d:3c:48:97:
76:91:e2:0d:d0:57:ce:fb:e5:89:75:71:ad:57:c0:a9:8c:7d:
8b:24:72:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY3NUIxMTAvBgNVBAUTKEUyNjY1RUUzNjJFNUNDNThGN0Q2N0Y0QTZCNzYyMUFB
NDYwQkQzOEUwHhcNMjYwNDA0MjA1NzUwWhcNMjYwNDExMjA1NzUwWjAYMRYwFAYD
VQQDEw02OWQxN2I0Zi0zYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxH42XPPt9ZTDzUb3v+FPAZPwpynf0c93mYVV0pkJ3QgQJFKkIHzxoA20cNRd
s+Sh5Xqpyk4zY9Q7Cmvw56T/AsLjNEj+BrSgJ0p/6APGfA+EmMqVESSsfO+Z9hdy
PvBKTcfgEenWIoW824SKGB/1eEcK9TJaR+Pwa0nYDfZYwiehwzAs67kOyb4rd7Tk
Uw+A2/sx1CX0VMYHAkMSCambZRWeGWrrz5y5LRN7JRw1wAQYoiKUvOtX4LszqQu1
kP20l1bSSfKW32fO/5G8QILoKr5mZWm7UxJoIA1XpLUzkJNnL3CHxR0xZ9lPGMdg
FgyTrzS8CVigodYsmK1MFrSPzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEL+sspj
lAJP2jBwGQBhs0vlYqxbMB8GA1UdIwQYMBaAFOJmXuNi5cxY99Z/Smt2IapGC9OO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc1Qi81Njc2OUEzMDFE
QTQxMUVCQjQxNjNBNDVDNEY5QUUwMi80bVplNDJMbHpGajMxbjlLYTNZaHFrWUww
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRtWmU0MkxsekZqMzFuOUthM1locWtZTDA0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Njc1Qi81Njc2OUEzMDFEQTQxMUVCQjQxNjNBNDVDNEY5QUUwMi80bVplNDJMbHpG
ajMxbjlLYTNZaHFrWUwwNDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiD1hixKaKI7jcUWyFOBdFyPFLI+XsfF/zz6TTSK6VVm2Welu0XRLRhwYNJR9
vOSzISW2Q7MqhU97AazurcBkJ8FdNw1RxK3aNZ5CBXO5+/fP8XXeL9l47WaRemRK
sYuWOL0Qq+745wo3fSSjNSbk6Z+h58HvIx66eynZ+WWZqGXCYS1oTd+rC8EN2+FJ
SecYy0ePs6+NGbhxFtwB2SEyHsT7l9k5VYXAyFUvQg2BdVXbcKafBsQiG/mExLuC
m+jb/LGtiNm8ngnvBURmYdxIEAnGATtK3BsTbipLJzUY6a67JVbyy4U9PEiXdpHi
DdBXzvvliXVxrVfAqYx9iyRyNQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 14:34:18 2026 by rpki-client