
$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
File: 4mcctGrTmxwXJOxjzVOymz5IHpk.mft (raw, json)
Hash identifier: LdBmPISglbx1FLjUomZuI+DJy+i2VkHel3ch4/IEzEo=
Subject key identifier: B2:E6:CF:58:8C:DF:1B:39:43:91:74:7B:8F:0F:BE:76:65:B8:18:38
Authority key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
Certificate issuer: /CN=A914145F/serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
Manifest number: 48
Signing time: Tue 21 Jul 2026 10:13:00 +0000
Manifest this update: Tue 21 Jul 2026 10:12:59 +0000
Manifest next update: Tue 28 Jul 2026 10:12:59 +0000
Files and hashes: 1: 4mcctGrTmxwXJOxjzVOymz5IHpk.crl (hash: tHTgQvPIojdlUlCUax4mgAqY3ImpS35KQ33CMjWx68E=)
2: 2D0F8E9E16BA11F18FA4AADE273D8C67.roa (hash: yWwtKIoGzkza5ajepsaaRnUFxlesI9AwU+G4CnGMim4=)
3: 2C8A1D2C16BA11F18FA4AADE273D8C67.roa (hash: twoRF5oqlZ7HCh1Oa3drRkDKu566LB667OHWRh/w7Jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Validity
Not Before: Jul 21 10:12:59 2026 GMT
Not After : Jul 28 10:12:59 2026 GMT
Subject: CN=6a5f462b-7782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:15:0e:62:1c:b0:ca:24:3a:3b:0c:58:5c:
20:8d:46:f2:ad:57:ca:cc:d0:60:df:73:e6:bf:84:
75:cf:db:a6:b4:b9:75:7e:a3:ff:8b:ee:72:8e:95:
6f:ae:c0:0f:8c:2a:c9:3e:3c:e6:5e:e7:ae:43:17:
27:57:90:55:8a:bf:b6:c1:00:b0:96:55:28:91:6c:
32:de:ef:35:50:b5:ff:09:46:25:3b:59:a1:99:f0:
35:ed:6b:d6:73:b3:b9:9f:01:82:bf:bb:fe:99:ce:
7c:74:87:5b:c3:06:52:1f:3b:56:68:7f:02:59:56:
b5:9c:0e:d7:2f:f2:81:ce:b9:ed:50:71:73:7f:ad:
cd:bf:fe:a1:f1:cc:ca:2a:ea:e3:c5:24:48:05:09:
74:00:bd:dd:0a:bb:ac:30:13:77:13:31:71:92:f4:
1c:d0:b4:7b:ec:fa:29:2a:ae:62:87:4e:d6:85:97:
85:0d:15:1f:38:ac:81:2f:df:76:1d:e2:8a:40:66:
9c:09:c2:a2:64:b1:a5:d4:25:99:b0:7e:57:67:9f:
41:d9:de:f2:0c:6b:79:ee:46:3d:7c:59:88:12:56:
cc:09:5e:87:2f:e3:2b:15:58:de:05:13:c0:c6:12:
82:7d:db:68:d2:df:51:f4:76:f7:38:64:0e:e9:e4:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E6:CF:58:8C:DF:1B:39:43:91:74:7B:8F:0F:BE:76:65:B8:18:38
X509v3 Authority Key Identifier:
keyid:E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:a6:c8:ac:fc:86:f6:32:17:f9:af:12:7d:3e:59:80:be:f5:
d2:48:dd:57:e6:f2:ef:26:bf:25:45:49:75:a3:a1:86:f2:c3:
d9:0f:c1:88:87:6e:4e:0f:c6:15:a5:0e:57:43:16:6a:47:b5:
df:b2:8b:e3:07:0e:bc:39:e9:3c:ec:48:25:97:be:a8:56:dc:
53:92:8a:a2:be:57:a3:4b:3b:9f:90:77:be:3b:75:35:00:5e:
69:a4:da:f5:63:d7:04:47:e7:93:28:fb:ad:42:95:77:ee:da:
e7:e2:65:f7:dc:07:1b:ce:f2:68:71:c5:75:be:5e:de:c2:62:
a4:91:34:24:bf:42:c2:ce:30:cf:f7:ae:33:06:bb:3e:07:8b:
03:fb:f8:6f:ef:70:b7:8b:34:47:8b:cf:9d:61:be:0d:17:07:
ee:80:e6:df:b5:d0:c5:73:32:c2:88:9f:d0:b2:e8:87:23:3c:
95:c0:d0:d5:4d:46:7a:75:8b:6f:b4:b0:eb:62:05:82:5e:0c:
3b:24:2c:8f:85:7c:58:31:55:72:f8:67:e3:87:02:2e:1c:d7:
50:e5:2e:41:98:16:b2:fb:71:0f:61:d8:37:b0:81:96:91:fa:
13:fa:7d:c3:c4:73:b6:fe:ed:04:6e:9e:08:5b:3e:9d:98:a6:
b3:5a:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:51 2026 by rpki-client