
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: PgHP3ufwed6aWQ77ZZ1MA8LbARms9A/1wkjfJiEfPz0=
Subject key identifier: 28:0C:72:F1:4B:09:84:CB:81:B0:DF:B7:07:6A:4B:F5:B9:B9:27:CE
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 01C7
Signing time: Mon 01 Jun 2026 04:32:37 +0000
Manifest this update: Mon 01 Jun 2026 04:32:36 +0000
Manifest next update: Mon 08 Jun 2026 04:32:36 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: KHLL+uVqeI3pJGCGv8S4j6VLSl4pknRg2oVKfAPvuVs=)
2: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
3: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 04:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Jun 1 04:32:36 2026 GMT
Not After : Jun 8 04:32:36 2026 GMT
Subject: CN=6a1d0b64-c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:ae:eb:d6:89:e1:1e:c0:46:bc:f3:50:8e:
d9:99:e9:22:ac:a6:e9:a9:37:f4:f0:43:f0:c3:04:
b5:0f:d1:3f:e5:ee:c7:81:ab:c6:76:fb:b1:89:2c:
db:29:7f:91:92:8a:c7:c1:dd:f2:e5:39:1c:fa:d6:
69:40:07:44:b8:e9:65:62:6b:cb:a3:f4:9a:46:e4:
69:5f:3c:f6:67:a9:15:85:06:28:9b:32:f0:69:1d:
ff:30:07:55:7c:2a:95:71:22:31:ca:a5:a2:31:85:
2d:61:71:4a:b0:98:02:a1:1b:26:b3:9f:6f:fc:3d:
06:20:8f:2a:41:c4:97:75:07:a2:26:13:30:b3:23:
0f:a7:ad:62:63:86:7c:10:ba:8b:d9:a3:c5:8c:a6:
1e:db:eb:34:93:57:31:56:7c:6d:a2:98:05:f8:29:
ae:65:da:2a:60:de:55:36:55:c5:23:66:56:de:fb:
63:35:00:49:16:cd:fe:30:d2:f5:d5:49:b9:1b:d8:
cb:d1:ee:e2:2e:5b:67:fd:90:6a:04:44:68:12:29:
a8:d9:60:84:55:c6:56:15:2a:07:16:b1:cb:71:00:
60:22:d5:3a:dc:d0:fe:30:10:a1:5f:5a:2f:bf:09:
bd:3b:e7:01:f9:97:7b:6e:39:d3:2e:cd:98:fd:b8:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:72:F1:4B:09:84:CB:81:B0:DF:B7:07:6A:4B:F5:B9:B9:27:CE
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:89:ab:34:f4:9c:30:18:90:c9:48:fd:8e:dc:30:77:d1:7b:
02:7f:0b:da:6f:54:6a:1d:60:da:f1:b2:93:a6:ac:d0:15:27:
c8:73:29:11:38:39:d7:61:10:a9:45:57:96:e8:33:07:9b:5d:
b5:40:8e:29:f2:22:24:eb:db:57:28:24:bd:87:f4:aa:47:50:
60:61:63:b2:46:f9:09:aa:d4:5d:e9:89:20:13:2c:e5:63:9b:
ed:9a:48:aa:be:aa:b0:1f:53:95:d4:b8:df:f2:8f:fe:73:33:
dd:61:39:e1:83:ff:29:75:d1:07:a8:4b:8b:4f:af:f6:68:42:
d1:bc:84:d2:61:a0:cc:2c:6e:95:f1:72:0e:c7:f1:4d:b0:27:
e9:27:9d:af:75:13:9e:75:e0:3a:59:ec:ab:98:88:74:02:fc:
e3:51:9d:1c:9c:c7:66:53:f6:bf:7e:4b:71:fd:4f:08:2f:5e:
76:56:79:2c:b7:53:44:25:40:70:62:34:48:ce:a4:8a:b1:31:
86:db:92:b6:2e:aa:7f:93:0a:db:2b:34:ea:71:c0:a0:e2:46:
78:1f:37:eb:7f:df:37:09:f2:a4:73:3a:59:9d:96:f0:f2:b4:
7b:23:f5:6e:67:9f:cc:ae:ba:24:b8:9a:59:04:54:49:19:40:
8c:34:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:35 2026 by rpki-client