
$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File: 4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier: WTSisC22YhpRRanpk0F1f1FJq4LRggSINMJb5oKdAJM=
Subject key identifier: 52:50:BC:DA:CD:DA:D5:ED:17:8B:0B:07:DC:CD:5C:D2:2B:C3:14:1E
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer: /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial: 0831
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number: 0823
Signing time: Sun 02 Aug 2026 21:31:52 +0000
Manifest this update: Sun 02 Aug 2026 21:31:51 +0000
Manifest next update: Sun 09 Aug 2026 21:31:51 +0000
Files and hashes: 1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: 4suyw+GFphH8uye/vQJwot26o9cXlIaES77ifaF9kSs=)
2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: sWItZVAsoO/9NQlv0a6tFISakAe8J+H+LJW2vp4Rwhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Aug 2026 21:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2097 (0x831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Validity
Not Before: Aug 2 21:31:51 2026 GMT
Not After : Aug 9 21:31:51 2026 GMT
Subject: CN=6a6fb748-a804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:08:62:7e:1a:a0:af:6c:27:e3:82:00:8b:
ad:20:ff:f4:cf:da:00:99:1b:d8:1b:7a:72:83:29:
68:bf:66:6b:19:4c:1f:18:89:90:a2:8a:f4:d1:b5:
00:5b:86:8d:a8:ad:2e:ac:e4:15:6b:6e:4c:d7:a3:
66:8b:0b:fc:31:6b:72:7e:98:10:d5:86:2f:a9:ee:
13:3b:b5:ee:d2:15:2e:9b:85:65:02:72:ec:e5:05:
7e:01:62:8d:fb:70:fa:1b:58:a6:53:ad:73:d0:5f:
4e:d0:6b:bb:49:0d:67:45:38:ac:14:90:1f:3a:cf:
c0:12:22:23:fa:f1:22:89:b6:61:eb:f0:27:e0:41:
d5:ec:5b:28:73:32:06:de:58:77:11:85:27:47:dd:
9e:e5:fc:b3:dc:f6:54:82:5c:21:bc:d5:37:98:6f:
20:94:78:89:d0:e6:42:af:04:bc:f5:0b:e5:a9:ca:
91:85:24:da:86:bc:c7:58:ce:ef:58:7c:45:09:a7:
c8:b7:40:22:40:62:56:10:cb:fb:2c:98:79:5b:33:
66:28:96:5a:ce:0d:27:85:ae:7c:75:fd:31:03:78:
5d:9d:14:54:d6:53:b0:a2:bd:b2:56:15:fa:39:04:
0b:99:c7:81:53:df:c3:bb:d7:34:47:0d:fe:13:79:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:50:BC:DA:CD:DA:D5:ED:17:8B:0B:07:DC:CD:5C:D2:2B:C3:14:1E
X509v3 Authority Key Identifier:
keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c4:60:ef:4e:7a:f3:9e:5a:48:5f:67:86:58:92:a7:e8:3a:
c6:25:25:c3:d1:d1:cf:dc:a7:bf:7e:cd:ca:43:9b:22:74:db:
26:75:af:bf:9a:51:35:23:ab:d8:96:9b:ff:0f:be:30:cc:a1:
58:40:ef:b7:84:aa:ce:3c:d7:ec:33:75:56:75:b0:4f:26:11:
d5:1b:2d:c6:a9:7a:bc:d1:e9:88:18:14:1a:b3:ff:52:a5:d0:
f4:17:66:61:a0:60:39:d7:e2:86:b1:b2:9f:0b:86:a5:b4:cb:
0b:60:75:ad:eb:94:cb:d3:ef:d1:d1:af:68:b7:a8:53:3f:f3:
5b:ef:97:9f:49:7a:f7:b4:e3:0b:7b:36:e9:69:4f:70:b9:91:
f9:b1:bb:25:07:d1:4b:be:0a:1a:15:fe:93:01:ff:4a:2b:1b:
34:08:35:e5:d9:05:a2:19:3e:b4:9a:88:76:a9:42:2c:cd:3d:
1e:03:cf:9b:c6:85:40:42:4e:4f:fe:de:4c:82:d7:af:e2:ed:
14:3f:76:2b:00:b2:12:73:39:2b:75:96:d1:39:e2:02:56:95:
43:2a:8a:a9:f6:b6:cb:2a:df:cd:36:41:9d:2c:fc:80:db:b3:
5c:06:45:86:e7:a9:53:d3:03:cf:a5:c3:4c:22:ee:a1:d3:33:
7d:27:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:40:43 2026 by rpki-client