
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier: aV84jy2yfaG++9hJZCnLtIkNeudWbY4v5U1ADxobgl8=
Subject key identifier: 9C:54:76:F2:3E:93:96:99:17:04:25:3F:C0:B2:BE:19:A8:4C:DE:EA
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial: 086F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number: 0865
Signing time: Mon 22 Jun 2026 20:51:29 +0000
Manifest this update: Mon 22 Jun 2026 20:51:28 +0000
Manifest next update: Mon 29 Jun 2026 20:51:28 +0000
Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: Zx/3kJ9b6VK4Sa8Dr6exyfEfIO7qgHpCNOh0h9R9pCc=)
2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: cV6nrCI/WiBOL0Uk/5UHwH4C2GgLMHmzrahNJwrUuZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 20:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Validity
Not Before: Jun 22 20:51:28 2026 GMT
Not After : Jun 29 20:51:28 2026 GMT
Subject: CN=6a39a051-830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:5f:12:63:39:48:54:53:d8:05:5c:2a:d8:
e5:53:9d:cc:00:fa:39:a4:64:c9:a7:21:4f:94:ea:
5c:2e:51:25:c9:f2:92:6e:35:c1:3e:ea:b2:63:93:
12:cb:d0:51:ae:64:09:61:3c:21:b5:53:e5:89:81:
cd:65:3a:14:1b:49:6d:13:af:c6:bb:ac:58:0d:d4:
c0:65:84:b2:d0:20:cc:a8:13:b3:af:97:ff:26:d4:
2d:5d:f5:71:c7:ad:2d:53:24:a8:9e:ef:56:19:bf:
ca:8b:74:33:b6:63:e4:a4:2e:aa:b2:90:fc:13:fb:
fb:ce:6b:b6:b1:46:cd:38:cd:cf:72:b8:15:49:95:
1c:f4:d8:12:51:0c:74:ef:46:0e:ed:60:fd:bd:91:
4e:41:f1:dd:be:d4:56:be:b1:1e:f6:33:5f:68:c7:
ae:71:4f:82:58:8b:fd:6b:d3:d5:25:d8:05:09:ef:
f1:e2:5d:32:91:b4:51:2f:bc:85:99:24:8f:c1:5f:
64:c1:28:26:73:43:c1:0b:12:b4:62:b7:59:69:15:
16:54:97:5f:24:f3:1d:dd:9a:e5:f4:cf:a9:e3:62:
30:e8:09:e4:f1:3c:d9:d5:98:90:3a:1c:84:f0:26:
62:3b:fb:09:d6:f6:68:a8:9f:3a:23:d5:81:27:21:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:54:76:F2:3E:93:96:99:17:04:25:3F:C0:B2:BE:19:A8:4C:DE:EA
X509v3 Authority Key Identifier:
keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:55:ab:55:c8:2a:40:44:d8:e1:d4:3c:75:b4:f0:c5:d6:7b:
b9:1d:b0:d5:6f:51:6a:ad:72:69:e2:ff:eb:8d:d8:ac:e5:54:
3b:3c:cf:7b:22:db:bb:a0:27:4c:6f:8c:88:97:1c:77:b7:73:
89:34:96:a7:f3:84:4d:43:d3:b9:40:a4:c8:82:1c:e3:82:2b:
06:c5:90:5e:d1:01:8f:75:a3:db:64:1f:7f:9d:64:35:64:82:
ad:4d:1b:55:a7:98:d9:d0:72:11:ca:43:b9:98:05:9e:39:d2:
34:8c:ec:41:ab:44:da:1d:61:27:ec:96:d3:e1:89:03:aa:21:
f6:e0:67:c4:57:f5:89:01:3f:41:4f:0f:e1:79:d7:4d:c5:02:
77:93:8e:48:d6:24:6f:22:0c:80:1a:50:42:2f:33:8a:10:a9:
82:da:f2:2e:a8:8b:c7:e5:5f:34:9b:16:32:f2:25:1b:35:71:
e9:b6:2d:6b:ee:a5:62:46:9f:68:c6:a4:00:04:9b:ee:fd:41:
85:50:c8:b9:c2:2f:a6:0f:88:3d:75:8d:42:73:9e:12:a0:93:
78:de:96:9a:4a:d8:eb:1b:36:b4:68:25:d5:3e:3f:70:00:a5:
a1:29:ad:5f:4e:f1:33:6a:f2:72:56:5b:10:a5:be:db:8a:ff:
6c:e2:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:50 2026 by rpki-client