
$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File: 4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier: ZfCfvW4dhGSiES98QxNt/KYKCxYQNjS9WFTgEvxuV+Y=
Subject key identifier: FA:21:1A:8E:27:EF:FE:13:2C:7B:CC:47:DD:79:15:73:DC:2C:67:92
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer: /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial: 0803
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number: 07F5
Signing time: Mon 04 May 2026 21:19:11 +0000
Manifest this update: Mon 04 May 2026 21:19:11 +0000
Manifest next update: Mon 11 May 2026 21:19:11 +0000
Files and hashes: 1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: mv+LV49Ufz0YW4AkqMk/f9mget9nexvTQNN5t/Am6kU=)
2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: sWItZVAsoO/9NQlv0a6tFISakAe8J+H+LJW2vp4Rwhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051 (0x803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Validity
Not Before: May 4 21:19:11 2026 GMT
Not After : May 11 21:19:11 2026 GMT
Subject: CN=69f90d4f-b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:c0:ce:54:76:ed:cf:bf:48:93:17:f5:bb:
b6:9d:92:c4:91:78:d3:f9:b6:48:7a:ce:0b:4f:2a:
6d:eb:1b:55:82:0e:ad:84:8f:8f:45:ca:d6:5c:77:
51:c9:64:be:20:05:65:34:1a:b7:60:cb:bb:a2:7c:
fe:3b:42:6a:79:86:96:8b:1a:b4:29:62:1a:77:cd:
3b:48:29:e4:15:58:a2:d2:34:6c:ba:d0:3d:5c:02:
a4:0b:52:cf:f3:c8:ae:8e:8e:f5:9c:5b:52:5b:ed:
5b:34:9c:12:a4:d0:a6:20:e4:fb:62:f7:0a:80:5b:
d4:eb:77:a6:38:6d:22:e9:fd:01:27:1d:55:39:a3:
2c:bd:fc:e9:84:39:09:1b:52:b0:bb:16:5d:15:92:
e7:21:b4:9b:f4:89:57:5b:cb:66:30:9a:b2:f5:1e:
23:c9:7b:4b:69:2b:5d:47:64:d9:4f:c7:68:4c:59:
10:b0:16:14:3d:4e:62:b6:8f:ac:0d:69:6d:e1:9a:
1d:51:d3:da:b0:da:c0:21:88:46:d3:08:fc:56:76:
b5:c4:bf:c4:39:e2:28:46:16:71:f0:dc:9e:92:da:
f5:4c:2c:9d:e6:81:ef:ab:3a:03:ab:23:15:9b:50:
1a:84:6d:ea:d7:07:34:a0:7f:b3:6c:43:ea:4b:33:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:1A:8E:27:EF:FE:13:2C:7B:CC:47:DD:79:15:73:DC:2C:67:92
X509v3 Authority Key Identifier:
keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:3d:68:fc:9f:8f:8f:bc:cc:29:cc:5f:21:85:49:74:c6:15:
8c:bf:95:d4:18:3a:a8:81:28:20:4c:c2:5a:9e:f3:b6:f3:18:
0b:ce:3f:5c:9a:7c:72:d3:82:df:68:cd:93:64:fa:5d:ec:d5:
1a:fd:af:77:9d:60:86:ad:88:e6:3e:4d:fd:9c:7b:17:7a:76:
d0:0a:1d:2b:3d:f5:d6:7e:cc:7a:4d:d4:6c:74:96:63:ab:e3:
c7:fb:dd:4d:30:e8:46:dd:cf:16:5d:8b:59:0f:40:f5:2e:3f:
5d:aa:bc:f5:a0:bf:18:8b:99:1b:fe:c3:e1:7a:ef:cf:ba:fb:
41:b4:72:e0:17:0d:64:6f:f4:d5:48:a5:7d:39:e9:ac:f7:6d:
76:97:a7:b7:7b:7e:d8:5e:78:b1:95:af:0d:41:9e:3b:e6:50:
36:a3:23:bc:95:13:6c:a2:ce:dc:c7:f6:5b:aa:03:d7:ee:83:
ec:09:be:af:9c:37:fe:91:91:5c:c8:2b:89:ea:6c:59:04:6b:
3b:cf:2e:c9:ff:64:d7:41:4e:a3:e7:01:ab:39:71:dc:ff:2c:
01:d1:a3:a7:26:96:3d:2f:7f:e4:0f:6d:d2:5d:4e:f4:76:10:
9a:41:e7:70:f5:c8:6f:5c:5a:8c:a4:8d:e6:3b:1c:c7:cc:90:
f2:55:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:28:23 2026 by rpki-client