
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
File: 4nmL4YzWTgg46agi1HhCBArIA0M.mft (raw, json)
Hash identifier: mxFQ2pPSUHEXWJAshXgLTmuSp5SUUaExfzIV+ooQl8s=
Subject key identifier: 55:A9:76:F8:DF:F2:E9:C6:BD:1D:50:63:3F:4C:39:D6:8B:09:44:2F
Authority key identifier: E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
Certificate issuer: /CN=A914823C/serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
Manifest number: 58
Signing time: Sun 25 Oct 2026 08:35:50 +0000
Manifest this update: Sun 25 Oct 2026 08:35:50 +0000
Manifest next update: Sun 01 Nov 2026 08:35:50 +0000
Files and hashes: 1: 4nmL4YzWTgg46agi1HhCBArIA0M.crl (hash: QSCROeVs+RgRdkCAsbvL1L/1Qm921EfXvjuVnLMGnwY=)
2: DB626DF24AF111F18CF4AA40CD833773.roa (hash: Qc04/3jafq1HIqjArWLPfNu0P5WLlwA1tLsJj60Zayw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 08:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914823C, serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Validity
Not Before: Oct 25 08:35:50 2026 GMT
Not After : Nov 1 08:35:50 2026 GMT
Subject: CN=6addbf66-7e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:6a:b4:6f:3a:17:b9:54:47:1d:5b:6f:67:
af:a2:a5:cc:04:91:0d:f7:0d:e9:21:c5:e0:21:24:
28:6e:e9:72:f0:7d:07:d6:f0:c1:a6:cd:16:24:bf:
8e:8a:9c:54:26:1e:79:8c:c6:e7:fe:c3:52:03:e0:
c9:87:1e:a8:e8:1a:18:c7:c2:54:ef:26:9a:e9:dd:
90:92:b6:61:3c:1e:a5:63:72:98:ce:3e:50:88:cb:
b6:f9:53:5f:dc:63:fd:7b:eb:bd:4b:dc:49:1d:08:
82:b6:10:54:ae:91:ca:5f:d3:6f:aa:fb:76:74:b6:
34:d2:c8:32:27:4f:65:f3:b8:b7:88:0e:4a:58:06:
c6:13:4d:cd:7d:2a:75:b3:ec:53:98:f5:4d:a5:6a:
cd:7c:14:04:ba:06:d8:3f:21:7e:ea:a7:c3:ca:4d:
b2:39:3a:bf:f6:4f:39:07:32:17:4a:79:4b:62:1a:
18:80:2d:d9:0f:8a:3d:f7:70:96:21:94:b5:eb:70:
58:81:c4:2d:22:43:6d:6e:46:71:5d:82:9f:05:6b:
80:e5:97:f3:e4:ef:e3:d9:f9:9b:91:14:20:52:54:
71:7a:64:3d:3e:28:77:34:1d:a9:db:2a:e3:05:cd:
65:a8:cf:a6:5d:bd:ca:07:3e:c9:86:0b:37:e3:94:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:76:F8:DF:F2:E9:C6:BD:1D:50:63:3F:4C:39:D6:8B:09:44:2F
X509v3 Authority Key Identifier:
keyid:E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:24:0e:62:7e:87:82:2e:4f:43:69:4b:a4:11:99:77:70:5d:
f6:8d:48:26:17:84:30:39:a0:39:26:3c:20:8c:68:fb:8f:47:
83:69:e2:3b:0c:12:15:70:90:89:b8:b6:2f:31:fe:90:25:28:
98:d9:e4:85:40:5b:0e:62:ed:e6:00:b0:96:0a:b2:71:99:63:
81:82:f7:59:07:c5:25:c1:5a:95:18:7b:13:44:94:b1:2e:46:
54:af:1e:2c:2e:86:49:f1:8d:2a:66:72:61:18:bb:01:c2:f8:
64:50:e2:de:ab:ef:9b:c2:8f:93:14:d0:3f:99:30:6f:f5:6d:
bd:7f:d1:97:2f:ec:32:77:8e:e9:b5:9a:27:ab:18:bc:91:7e:
ba:49:b5:ae:a4:65:8b:0c:f5:bf:6f:06:53:ad:42:4b:ca:d0:
0f:54:8f:53:54:e3:f6:61:d9:41:12:64:83:27:0f:68:9c:02:
a2:e2:ce:31:04:e9:3c:8c:33:a7:0d:03:95:e1:ea:f6:c2:51:
1f:39:29:34:14:2f:b9:87:0b:c8:19:61:dd:dd:e4:d5:39:f5:
cd:88:70:db:d2:d3:de:b3:9a:3e:12:81:13:1c:26:a5:a2:73:
d5:61:ba:2f:f5:98:1e:7a:38:2f:e5:cb:79:a4:5b:f7:d3:7b:
5b:d1:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:37:30 2026 by rpki-client