
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File: T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier: HPk5BFq6+wZeLJeMkNURajfY/fDBiWb3+BFMdAs/tMQ=
Subject key identifier: DA:AA:C1:55:4D:29:E5:80:C0:CA:7B:06:56:F6:10:39:FB:E0:1F:38
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer: /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number: 0207
Signing time: Wed 07 Oct 2026 03:34:37 +0000
Manifest this update: Wed 07 Oct 2026 03:34:36 +0000
Manifest next update: Wed 14 Oct 2026 03:34:36 +0000
Files and hashes: 1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: 8S2xelQwwlFe9PAe8mTco48UqkalBQssJ8r82QjUG9c=)
2: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
3: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Validity
Not Before: Oct 7 03:34:36 2026 GMT
Not After : Oct 14 03:34:36 2026 GMT
Subject: CN=6ac5bdcd-40a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:22:e1:6c:f9:94:9a:9c:77:3a:34:33:38:
2c:2d:db:23:9e:e3:80:6a:31:90:76:f1:c2:54:60:
94:fe:fe:83:da:18:12:7b:fc:36:92:dd:16:6d:22:
6f:ac:14:14:2c:1f:58:68:87:33:5f:a3:a9:56:03:
49:e7:db:a6:96:90:07:71:ba:62:ad:19:5c:c6:2e:
b3:65:81:6f:2a:b7:63:fd:0a:28:a2:ed:09:06:9f:
d0:26:94:13:f4:38:14:5a:ac:8b:7e:5d:94:28:00:
a0:3d:0d:59:66:4c:8b:b0:ba:16:54:2b:5d:b8:42:
5b:09:32:d5:40:57:e5:00:e2:42:35:14:17:94:a7:
40:d7:d6:c0:81:6d:ff:ed:6f:32:37:2a:73:61:b4:
8e:f8:9a:4c:44:22:1c:b4:e2:de:7f:68:1c:10:35:
79:b0:31:d9:98:ad:ce:57:df:da:bb:44:9b:3b:97:
38:a3:fa:aa:4c:ce:ab:e4:71:1f:69:29:c3:d6:a1:
af:54:41:8b:4e:76:16:f6:61:e4:80:4a:c5:ad:aa:
ab:a4:0d:d7:8e:63:18:af:e7:21:88:55:99:db:9a:
9f:62:63:37:66:b1:ee:ab:e9:ec:98:53:2d:6d:b1:
ae:fe:9d:8c:b7:a7:32:83:21:3f:17:d6:55:c4:62:
b2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AA:C1:55:4D:29:E5:80:C0:CA:7B:06:56:F6:10:39:FB:E0:1F:38
X509v3 Authority Key Identifier:
keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:91:9e:aa:0e:55:38:b0:6f:b5:3b:ef:41:a5:f8:3d:2e:83:
23:75:19:25:c9:31:d7:76:fb:ba:9b:73:40:c8:96:5c:7a:96:
22:23:70:79:ad:f2:51:89:cd:46:c1:7c:21:c2:7e:40:6e:b1:
61:53:bf:96:56:5a:0d:0d:76:21:1d:41:26:a2:e0:87:9c:47:
7a:88:69:99:a4:80:11:20:57:de:09:8a:17:64:cf:7a:31:28:
d9:1a:35:d4:15:17:6e:c4:0b:39:b5:3d:bc:f4:31:45:20:1d:
a4:9b:11:33:99:e9:ca:01:a5:b0:b1:5e:d1:c3:97:98:56:52:
5f:fc:a8:47:52:69:df:4f:b8:67:46:f4:89:75:26:9c:68:17:
5b:ff:6a:72:e6:ff:9e:3a:2f:41:1f:6e:bc:32:d5:33:63:ec:
fb:0c:8c:58:8d:7b:ce:71:d3:af:e6:40:bf:ea:da:fb:27:15:
bc:c2:7b:c6:38:57:12:f1:4b:c2:ce:52:dd:cc:0e:b5:e1:71:
75:ed:ca:e6:2b:a0:2b:fb:18:40:06:68:a2:80:80:ed:a2:e4:
9c:89:07:75:1a:99:6f:93:25:1b:15:9b:00:b5:83:9b:e8:05:
3b:13:37:88:05:5e:74:e2:49:0d:9c:bd:58:71:3a:72:ca:34:
30:68:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:58:02 2026 by rpki-client