
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
File: 4XM7lw_d92f_GVQoQ34SQqN2knc.mft (raw, json)
Hash identifier: L8zM0AopE4VY/5mFR0BgFUpXEZbQUh7zWtwnu2yxVl4=
Subject key identifier: 88:A4:2A:0D:81:33:14:21:AC:7C:F8:02:C1:A0:5F:2A:F7:28:8A:F4
Authority key identifier: E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
Certificate issuer: /CN=A912E5CB/serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Certificate serial: 02CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
Manifest number: 02C4
Signing time: Fri 11 Sep 2026 01:19:19 +0000
Manifest this update: Fri 11 Sep 2026 01:19:19 +0000
Manifest next update: Fri 18 Sep 2026 01:19:19 +0000
Files and hashes: 1: 4XM7lw_d92f_GVQoQ34SQqN2knc.crl (hash: jzEzBn8nyHRbfVpIZztGiTJQavai0t+ld9fIdrP5Qkk=)
2: 5FF4FD52704C11ED97935E7DC4F9AE02.roa (hash: LdRxke1Bck5JxIBRCGjM9TpaCqk+l96r/JCtzyDPs+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 714 (0x2ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E5CB, serialNumber=E1733B970FDDF767FF195428437E1242A3769277
Validity
Not Before: Sep 11 01:19:19 2026 GMT
Not After : Sep 18 01:19:19 2026 GMT
Subject: CN=6aa35717-f8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:e6:43:27:46:03:7e:21:21:de:19:0a:32:
53:58:7c:0a:bd:f2:91:25:a5:57:78:a7:5a:e4:16:
a8:b1:40:3e:32:8f:ea:71:b0:21:c6:52:f7:ee:fb:
95:d3:8f:a6:ef:b9:27:46:12:d7:64:69:3c:24:0e:
08:11:4c:9e:81:31:64:36:ce:20:3d:c2:c0:20:47:
ad:46:88:07:e4:d1:fd:44:de:75:e0:b5:94:1c:40:
cf:42:4b:d9:44:14:ab:7c:d0:84:01:49:6b:25:bb:
b8:e8:1e:f6:ed:41:84:bb:d5:c9:cd:87:c3:3e:25:
17:44:34:f5:14:ae:fb:cc:21:05:9b:b1:ee:ec:1b:
8f:8d:f0:90:95:cf:01:3a:ef:96:2a:f1:64:87:b6:
aa:1e:55:9c:bb:87:c6:33:44:8c:cf:74:15:6a:d4:
dc:1c:f4:7b:63:f3:dd:4f:c0:82:55:e1:26:da:ac:
c8:1f:bc:18:72:c1:07:7e:1f:36:6b:4d:40:13:50:
99:41:d7:35:05:40:5e:7c:ba:82:dc:c8:6e:73:86:
ef:5a:13:8c:59:47:92:d9:32:f2:35:07:e2:7d:5d:
2d:c2:1c:35:33:52:5b:ff:61:6b:97:98:b8:7a:bf:
11:1f:cc:06:2e:a9:18:02:e5:c1:e7:6e:55:fe:5e:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A4:2A:0D:81:33:14:21:AC:7C:F8:02:C1:A0:5F:2A:F7:28:8A:F4
X509v3 Authority Key Identifier:
keyid:E1:73:3B:97:0F:DD:F7:67:FF:19:54:28:43:7E:12:42:A3:76:92:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XM7lw_d92f_GVQoQ34SQqN2knc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5CB/5288DCE0704911EDB6E1FB78C4F9AE02/4XM7lw_d92f_GVQoQ34SQqN2knc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6c:1c:f6:22:8a:ec:80:9f:b1:5d:05:ca:59:60:de:eb:77:
94:d6:07:82:16:a7:bf:21:0a:c3:e9:45:86:08:da:b4:50:32:
16:13:fc:5c:ae:5f:4a:2d:87:29:1f:94:31:a4:b4:cd:55:97:
fc:0a:0d:f1:13:59:49:5a:1a:25:bc:8c:17:fe:f4:13:8f:b1:
d2:72:fa:7a:6b:76:28:1e:d8:21:d9:e1:d5:62:21:f8:77:38:
9f:f8:64:d6:14:3a:95:e3:85:97:3a:95:83:2c:aa:5a:8e:db:
10:cb:0f:62:ab:71:76:85:3c:1a:12:24:b6:d7:09:35:e6:9d:
ca:3e:3b:21:20:c1:18:80:a8:a1:94:44:07:58:8b:2f:3d:f1:
bc:27:29:da:fb:e9:68:a3:b8:82:a2:56:79:ae:46:ef:ff:e2:
75:b3:f7:ef:52:e5:7d:cc:97:bd:34:c3:34:7d:68:05:e5:ef:
42:df:ec:8c:3c:ce:1b:dd:22:e3:e5:fe:eb:61:d4:78:97:b1:
ed:dd:ac:a7:2c:e5:d3:df:69:5f:eb:9a:44:5b:77:6c:ad:a8:
3c:31:fc:6f:18:6d:f6:d6:c7:03:57:ab:ae:d7:ec:7f:20:7c:
3c:a9:d2:70:03:b3:8d:82:2e:67:b0:fa:d8:39:40:55:8d:7b:
77:aa:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:15 2026 by rpki-client