
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json)
Hash identifier: q/0tlMuV6sr7YiBl8xAlwPv03oIr1ca/G8RSmEXV0OA=
Subject key identifier: 23:CC:DA:B2:49:25:03:C3:C9:2B:CE:2C:D7:ED:B8:A8:85:CC:98:9F
Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Certificate serial: 08AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
Manifest number: 08A1
Signing time: Thu 24 Sep 2026 20:34:08 +0000
Manifest this update: Thu 24 Sep 2026 20:34:07 +0000
Manifest next update: Thu 01 Oct 2026 20:34:07 +0000
Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: +BZJxKc/ey8akv6AaATuqKjnsIbkx2LNePsEHfVNF9s=)
2: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: mcE/kCUcZ9XtkapXLq0nvxx/GVcFi46zNxigdP3tLvc=)
3: BF529990959F11EC844CAD64C4F9AE02.roa (hash: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985
Validity
Not Before: Sep 24 20:34:07 2026 GMT
Not After : Oct 1 20:34:07 2026 GMT
Subject: CN=6ab58940-0934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:c1:30:78:97:76:e2:8a:1c:e5:19:fe:95:
25:5a:7c:a5:92:47:49:39:3c:ae:ae:6a:6b:7e:7d:
91:75:bc:03:aa:fa:ce:2a:79:35:55:10:29:98:cf:
c6:63:98:a1:d4:74:e9:55:99:7c:88:8f:7e:91:21:
d2:f1:6f:f2:89:35:f3:26:0a:40:cf:84:da:b6:42:
36:3c:49:cd:ba:52:4c:07:ff:df:78:b8:45:51:85:
8e:f3:89:fc:e8:27:06:19:99:b8:ad:2a:da:83:99:
e2:85:86:a6:57:ac:ff:e8:fd:ae:ed:50:8f:a4:5d:
0d:8b:50:a3:14:67:3f:23:0a:d6:14:fd:c5:43:f9:
92:21:48:78:c3:91:03:53:fc:8e:81:93:4d:51:5c:
56:38:04:44:ef:62:7a:be:af:21:f6:3e:d4:41:52:
63:d5:9f:a6:63:bd:e3:7b:50:fe:a3:79:54:5d:b1:
65:fe:ea:29:cd:40:84:1a:3c:83:df:34:eb:52:ac:
6a:7d:98:16:0a:04:a9:e5:40:ba:f8:be:de:6a:81:
32:32:c5:b9:6f:f4:aa:ac:cc:95:1d:c4:4e:26:d8:
70:76:86:4d:d2:9e:da:73:1d:3d:90:75:55:9b:d1:
4f:2c:ff:00:30:a7:e1:0a:4c:40:0d:14:22:76:d6:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:DA:B2:49:25:03:C3:C9:2B:CE:2C:D7:ED:B8:A8:85:CC:98:9F
X509v3 Authority Key Identifier:
keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:01:2e:99:88:9d:34:29:a9:66:63:d7:92:77:6e:02:15:b4:
01:5f:2b:56:57:7e:28:f3:1f:6b:dd:e8:51:13:fb:1d:0b:3a:
cd:d0:51:b9:8a:7e:6c:4c:bf:45:8b:b1:01:8a:ef:f0:dc:cb:
9e:79:f6:32:57:90:96:49:d5:2c:a7:72:a5:65:e6:02:ea:1c:
ba:7a:c2:be:84:cc:c1:1a:f4:d9:3f:26:d4:83:2f:3a:ca:18:
1a:da:b3:d9:b9:48:63:e1:06:38:d2:1a:b5:a0:b4:2c:30:ba:
68:10:3f:a8:fa:c7:32:1a:fd:34:92:6e:a8:04:97:e5:dd:36:
9a:67:4e:d7:5a:b6:2f:3f:8e:4e:ac:70:2e:40:0e:ec:36:c3:
3b:51:19:e9:42:e4:05:44:9f:cb:df:de:5e:4e:1b:5b:f8:d5:
b0:a7:f7:65:78:ed:b3:b5:37:37:e6:7a:73:c8:5a:2d:9e:a9:
3a:50:c5:da:59:cd:d2:55:e7:3d:59:1f:a0:ed:59:86:33:c8:
3c:24:f1:4a:f7:85:6f:cb:4a:17:42:cc:11:9f:96:a5:e7:f1:
78:cf:aa:47:35:01:15:6a:3c:66:e6:ee:91:7b:3a:18:de:e9:
ca:fa:c5:22:7b:76:24:9a:12:dc:35:5d:f7:52:0f:fe:12:83:
06:7f:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:46:47 2026 by rpki-client