
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier: nUgqhwMs52SlNFtseyD81ttaTEiLCWUa88Y0oqjdY3o=
Subject key identifier: C4:EB:9E:2F:F8:B1:59:AA:1B:E5:AF:8E:0E:0E:6D:79:63:39:CE:00
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial: 088C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number: 0882
Signing time: Tue 18 Aug 2026 21:05:33 +0000
Manifest this update: Tue 18 Aug 2026 21:05:32 +0000
Manifest next update: Tue 25 Aug 2026 21:05:32 +0000
Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: rZ0473Eln2EKky3nHRqcplpSeZ3VQZprnaZe0TgBhbw=)
2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: cV6nrCI/WiBOL0Uk/5UHwH4C2GgLMHmzrahNJwrUuZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Validity
Not Before: Aug 18 21:05:32 2026 GMT
Not After : Aug 25 21:05:32 2026 GMT
Subject: CN=6a84c91d-1390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:e2:36:6f:bc:68:ee:53:9b:7d:83:99:13:
8a:c7:fc:48:09:b1:eb:57:0c:d3:34:27:cc:ea:e9:
c0:1a:80:5c:97:5a:0c:4e:54:55:a7:e5:69:4a:84:
cb:ed:42:00:b1:fe:9b:19:fa:a5:c2:9b:0d:9c:f2:
9b:63:c7:2a:2a:dc:aa:8f:c3:eb:33:59:14:2b:84:
e0:3b:72:48:6c:ff:07:87:16:1d:3b:f8:83:1b:94:
ae:af:0f:b4:fc:14:aa:e9:e2:81:bc:76:c3:80:c5:
31:4b:0f:86:86:e2:73:ac:77:03:62:97:f5:07:9b:
1c:55:d5:7b:47:83:b0:a9:3e:da:ce:0a:2f:1b:3c:
7e:a8:36:12:59:74:6f:bc:53:ab:11:c1:61:24:8c:
3f:6d:7d:ed:3c:15:60:ce:03:94:4e:fd:78:f8:80:
3f:d4:89:3e:52:f5:b1:4c:5b:2f:c6:c6:3f:60:53:
26:58:1c:21:9a:02:47:59:ef:5b:5a:33:88:25:72:
2b:58:65:31:e0:d0:cd:da:ad:1e:df:f2:d4:d9:bd:
d5:0f:dd:1c:38:42:04:ba:71:c6:90:3d:86:70:89:
e2:19:e3:7f:f6:03:0d:8f:e0:11:a7:5a:9a:03:36:
e2:0a:84:62:6a:ce:bc:65:ed:42:20:f9:4c:f2:76:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:9E:2F:F8:B1:59:AA:1B:E5:AF:8E:0E:0E:6D:79:63:39:CE:00
X509v3 Authority Key Identifier:
keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:be:a2:6d:cd:b1:bb:35:a8:7e:16:86:f1:fa:1e:84:42:52:
8a:2e:95:83:e7:27:88:5a:92:b5:b9:c2:a0:a1:ef:84:b0:21:
ff:b6:a7:4a:ff:af:8a:45:86:e1:44:fe:c5:97:e5:ee:b5:4e:
9f:b1:7d:9f:f9:da:6d:39:20:e8:49:b3:3c:a5:48:99:af:13:
c8:3d:14:09:f7:24:e8:e0:f1:22:78:58:ed:84:5b:a4:77:df:
fc:1e:ce:e2:7e:51:c1:ea:64:3b:a6:b4:c9:73:41:85:51:3c:
5b:4a:b5:fe:dd:be:21:01:d9:41:a5:59:9a:83:7d:86:a6:e9:
96:94:f0:91:a9:0a:1e:4b:9b:fa:18:16:72:0e:cc:85:d3:8f:
34:d1:0d:b3:a3:ac:8c:5e:a2:3e:24:f4:73:7e:47:9f:fb:ab:
95:06:20:d8:e8:6f:85:05:1d:98:da:f2:dd:a6:9c:58:08:af:
6f:06:38:56:0b:ea:31:71:0e:78:50:a1:63:2a:cb:8b:48:a3:
93:40:25:48:5a:c6:d3:5a:22:08:29:9e:ab:55:f0:c8:03:eb:
5b:7f:10:ef:f4:f9:8a:8e:5c:a6:9c:55:e9:44:17:55:64:42:
7c:57:b4:ec:2e:a6:f5:69:65:d0:78:28:6b:b3:76:12:3a:cf:
73:fb:9f:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IwRDYxMTAvBgNVBAUTKEUyRDgxM0Q2NkNFNTBERDkzOEZDM0E1MzJEQjhFREUy
QzVCQTc5NUMwHhcNMjYwODE4MjEwNTMyWhcNMjYwODI1MjEwNTMyWjAYMRYwFAYD
VQQDEw02YTg0YzkxZC0xMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySriNm+8aO5Tm32DmROKx/xICbHrVwzTNCfM6unAGoBcl1oMTlRVp+VpSoTL
7UIAsf6bGfqlwpsNnPKbY8cqKtyqj8PrM1kUK4TgO3JIbP8HhxYdO/iDG5Surw+0
/BSq6eKBvHbDgMUxSw+GhuJzrHcDYpf1B5scVdV7R4OwqT7azgovGzx+qDYSWXRv
vFOrEcFhJIw/bX3tPBVgzgOUTv14+IA/1Ik+UvWxTFsvxsY/YFMmWBwhmgJHWe9b
WjOIJXIrWGUx4NDN2q0e3/LU2b3VD90cOEIEunHGkD2GcIniGeN/9gMNj+ARp1qa
AzbiCoRias68Ze1CIPlM8nY85wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTrni/4
sVmqG+Wvjg4ObXljOc4AMB8GA1UdIwQYMBaAFOLYE9Zs5Q3ZOPw6Uy247eLFunlc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjBENi84OUEwRTdBMjA4
NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERkazRfRHBUTGJqdDRzVzZl
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR0Z1QxbXpsRGRrNF9EcFRMYmp0NHNXNmVWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjBENi84OUEwRTdBMjA4NkExMUVCOURGMzM4NDJDNEY5QUUwMi80dGdUMW16bERk
azRfRHBUTGJqdDRzVzZlVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsr6ibc2xuzWofhaG8foehEJSii6Vg+cniFqStbnCoKHvhLAh/7anSv+vikWG
4UT+xZfl7rVOn7F9n/nabTkg6EmzPKVIma8TyD0UCfck6ODxInhY7YRbpHff/B7O
4n5RwepkO6a0yXNBhVE8W0q1/t2+IQHZQaVZmoN9hqbplpTwkakKHkub+hgWcg7M
hdOPNNENs6OsjF6iPiT0c35Hn/urlQYg2OhvhQUdmNry3aacWAivbwY4VgvqMXEO
eFChYyrLi0ijk0AlSFrG01oiCCmeq1XwyAPrW38Q7/T5io5cppxV6UQXVWRCfFe0
7C6m9Wll0Hgoa7N2EjrPc/ufrA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:30 2026 by rpki-client