
$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
File: 4mZe42LlzFj31n9Ka3YhqkYL044.mft (raw, json)
Hash identifier: HDMBwWtoEun4wLG7dcgazMz2Vdkx30IerMLliFK/c9k=
Subject key identifier: 67:7C:8F:22:03:C6:9A:D2:6D:74:63:D6:4F:8F:11:74:3A:63:B8:4E
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial: 086B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
Manifest number: 0856
Signing time: Tue 18 Aug 2026 21:21:01 +0000
Manifest this update: Tue 18 Aug 2026 21:21:01 +0000
Manifest next update: Tue 25 Aug 2026 21:21:01 +0000
Files and hashes: 1: 4mZe42LlzFj31n9Ka3YhqkYL044.crl (hash: Ysgc4Xb7ZpSHO9ooqSEr2IIbAwTa4jeTxLKxZvgdIxE=)
2: D57EF608BC6C11F0894F2331C4F9AE02.roa (hash: bxmtoo9Mi52T+qWLWPtmIQ+3oo8uoIe54/5a6/+rAEo=)
3: C08B23401DA511EBAD78BB46C4F9AE02.roa (hash: 6dxQbscKD9BpisiGIvmhEruYks1OCWVGKkbkjxYZYu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Validity
Not Before: Aug 18 21:21:01 2026 GMT
Not After : Aug 25 21:21:01 2026 GMT
Subject: CN=6a84ccbd-cb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:e2:6b:f7:8a:89:c8:d1:a0:eb:7a:2d:c8:
2b:bf:a4:bc:68:4f:42:73:d5:b5:54:46:fe:3b:7e:
fa:97:7c:a1:f0:30:4c:03:8d:27:42:8c:13:9f:e2:
dd:e2:cc:78:90:5f:3c:65:09:08:91:4e:62:a6:f5:
4d:b6:cf:80:dc:95:d9:cd:4c:74:67:38:51:6f:1a:
c7:3c:73:3a:42:63:e8:09:57:83:fd:19:e5:c5:90:
fa:65:71:3c:8d:87:2f:47:64:b6:46:de:ba:f3:6f:
6f:aa:1b:9d:14:7f:69:30:57:75:9c:9b:f8:bb:9d:
c2:c4:f2:48:2b:29:db:7c:1e:ef:d4:80:79:11:6e:
03:8f:4a:90:fa:46:65:90:2e:3c:95:dc:9a:9c:07:
02:7b:8c:a3:89:b7:c7:60:f5:98:dc:5f:e2:d2:15:
0a:cb:6e:ba:cc:0c:f0:53:0b:05:66:6c:70:80:d5:
4a:b2:52:6e:97:82:de:d5:d4:d2:29:89:b7:16:96:
5f:a3:f8:e8:4e:1e:9b:18:cd:a9:74:10:9d:51:98:
15:53:b9:26:57:f2:f2:45:d8:4b:05:80:6d:ab:53:
82:0e:21:a3:73:ab:45:74:81:7d:0f:7d:0c:8a:47:
12:69:49:c6:55:da:56:d3:05:09:fe:72:d4:3f:08:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7C:8F:22:03:C6:9A:D2:6D:74:63:D6:4F:8F:11:74:3A:63:B8:4E
X509v3 Authority Key Identifier:
keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:61:89:e8:5f:8f:98:78:91:69:dd:cf:74:85:f0:b0:c8:53:
3a:84:f8:b3:72:2d:f0:17:2e:ad:1b:aa:e9:aa:e5:19:7b:7c:
96:9b:11:08:48:5b:a7:d8:59:3a:20:c9:6b:c4:cd:6b:7e:bf:
9f:dd:fd:36:04:3c:d7:cb:56:c7:1e:bf:fc:37:78:a3:b6:4b:
da:c9:96:27:22:0a:69:19:9c:1f:9e:f1:a6:75:97:6e:cd:33:
b1:c2:f9:9c:82:e9:18:56:d5:78:96:25:85:2a:c8:c7:43:ae:
f4:d7:d0:da:70:60:ee:11:a0:51:16:80:39:63:cd:d9:98:71:
84:82:f8:49:24:4a:8f:a3:88:d4:c9:fd:cc:05:1c:03:69:de:
e9:5b:08:5d:8b:a4:3f:c0:79:4b:f3:4e:d2:96:ad:15:90:63:
1a:11:20:d8:a9:93:3c:b4:bd:e2:34:1e:70:d0:3d:a5:47:62:
80:e0:d1:92:80:b3:23:5d:27:c5:9f:6c:bc:e2:8d:59:7c:67:
19:b3:58:f4:99:08:e2:61:d3:f5:6a:1f:9d:aa:09:7d:56:d2:
de:df:dc:26:a4:7f:a3:10:7f:13:19:c9:c2:a0:80:bc:06:80:
99:14:32:c4:e4:a6:16:b9:8f:ed:5a:8b:05:e0:98:24:55:10:
f8:c6:d2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:14 2026 by rpki-client