
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier: 9an6HOrx2P6QtMt7EoiWuyteggyal+RcYY6FXvpp4+k=
Subject key identifier: AE:2B:1C:47:67:E0:B7:68:15:AB:EC:37:1D:B3:92:A3:89:7C:18:B1
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial: 08A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number: 0899
Signing time: Fri 02 Oct 2026 20:58:25 +0000
Manifest this update: Fri 02 Oct 2026 20:58:24 +0000
Manifest next update: Fri 09 Oct 2026 20:58:24 +0000
Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: v8S3T86Dc3UqP29qv8REUCiVlVaR9VNp3EhJWGEvqSw=)
2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: cV6nrCI/WiBOL0Uk/5UHwH4C2GgLMHmzrahNJwrUuZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Validity
Not Before: Oct 2 20:58:24 2026 GMT
Not After : Oct 9 20:58:24 2026 GMT
Subject: CN=6ac01af1-414f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cc:49:e7:bf:91:12:74:d2:8c:6d:a5:cb:51:
c8:25:69:b9:e9:13:98:2a:a4:17:9f:2f:81:3b:99:
29:1a:87:2c:9d:1f:b2:7a:17:46:17:d8:e0:3d:e1:
36:a9:4c:fb:15:2d:6b:3f:4b:4e:80:54:29:7c:3f:
a2:d3:27:08:b3:5f:58:c3:49:30:31:d2:f1:6f:05:
2c:89:64:63:bb:bd:b1:62:c3:33:67:e7:91:0d:98:
d0:21:f4:3d:bb:a6:5a:f5:4f:00:72:49:64:66:8b:
81:62:e7:d7:21:83:8a:e7:b9:02:e0:09:23:92:d4:
91:3b:8d:55:07:d5:f5:e4:3a:51:9d:23:5a:b3:84:
36:e5:b9:a4:cb:c1:e9:54:8c:fd:ac:b8:1b:4f:90:
d9:46:25:77:9f:6a:e2:59:0e:b1:81:f0:3e:d2:73:
7c:e2:d3:6b:72:7e:de:b6:a0:0c:93:b6:bf:cc:9c:
fd:4c:4b:04:13:c1:6f:9b:6a:26:55:42:16:e9:81:
2c:dc:67:30:ed:6f:d2:99:7e:b7:30:f4:55:25:24:
ef:6a:73:9d:ab:0d:ad:8c:91:e8:ba:7b:80:39:60:
a0:4b:72:8c:2a:95:3e:8d:d8:b5:d8:b9:fb:fb:ed:
22:a9:01:56:59:be:91:a0:f7:ff:a1:c2:a4:26:67:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:1C:47:67:E0:B7:68:15:AB:EC:37:1D:B3:92:A3:89:7C:18:B1
X509v3 Authority Key Identifier:
keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e9:67:3b:8d:b6:ad:a4:43:16:4e:22:70:72:5f:05:78:49:
2b:0a:27:e4:c5:18:1e:5e:11:5e:0c:46:b2:5a:e3:e1:94:1c:
26:10:6e:e9:c0:f2:67:47:4e:f5:9d:ff:c9:03:66:e4:c3:39:
1d:96:c5:61:81:b8:be:19:7f:72:22:04:cc:cb:1a:0e:f5:5c:
4c:7c:7d:e3:79:c4:ef:96:07:d7:68:0c:08:4d:db:1d:9c:1e:
a4:e2:f7:96:8b:73:76:dd:c1:91:b7:4f:68:27:cb:54:7f:b2:
da:66:b6:e3:5c:5d:09:c3:09:d0:3d:a1:a2:56:e9:f2:10:0c:
69:0e:1b:f7:9b:e2:c8:03:65:4d:6d:6b:f3:8a:72:e5:09:7b:
85:26:8c:26:c5:e8:f3:bc:19:19:93:24:a4:9e:9d:e5:6d:d4:
3d:4d:eb:8f:ab:78:6c:5a:ae:57:cd:2e:35:c7:a1:ba:ed:a6:
5e:f3:34:ef:3b:4e:e6:2f:db:40:6a:de:8f:50:68:46:45:0f:
f9:ee:7e:64:bf:3a:b9:2b:7f:80:f3:ed:1e:d7:d2:ca:72:5f:
b2:6b:71:6a:cd:4d:b0:d3:dd:13:c5:fb:57:dc:ff:3c:c5:08:
51:bc:96:f6:3e:a6:31:b4:38:f9:0b:73:ef:ee:3d:1a:b4:05:
d0:d2:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:05:51 2026 by rpki-client