
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json)
Hash identifier: FoVUMiUJo454LgTkgUspj18jo/daNM82g1wFWUWyGpw=
Subject key identifier: 9D:AD:8D:D8:4F:0E:21:74:63:F6:33:F0:F0:A5:EC:9D:10:C1:DA:B8
Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Certificate serial: 0D1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
Manifest number: 0CDB
Signing time: Fri 12 Jun 2026 18:28:05 +0000
Manifest this update: Fri 12 Jun 2026 18:28:05 +0000
Manifest next update: Fri 19 Jun 2026 18:28:05 +0000
Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: jlt2qGKEkW5JCNG7BoOXTEKk+6tfJ50NwA12UCUiFxc=)
2: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: 2VeVxpw4IPzgEibTNEjoXK/Qy1fd2SwF+0DbU+sMNRg=)
3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: ApbUgdUH10Pdfa6lJVrc4XPCGZcLshELo3PIV/SWLXw=)
4: 183DE570057A11EC822F230EC4F9AE02.roa (hash: KDCY6i/WJ6l1BoCfZqKbKmaeWQcqDHXYwIFR4N1iXXE=)
5: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: HqADfJ6PQAnaMYUSVaYaC1tzBINlqpUjolFi7987BYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Validity
Not Before: Jun 12 18:28:05 2026 GMT
Not After : Jun 19 18:28:05 2026 GMT
Subject: CN=6a2c4fb5-1a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:cb:79:20:3f:55:58:64:7e:e8:fb:1a:11:
ac:37:f8:e4:f9:eb:e6:02:fb:59:e1:9d:f8:71:b4:
68:25:93:5a:d8:c0:df:57:7b:b2:1a:24:a0:89:38:
29:5a:04:29:fe:3f:4b:f0:9b:41:1c:05:56:03:6b:
4c:64:8c:2a:49:9d:30:a6:73:f5:8d:ca:fb:07:7d:
96:f5:11:8a:99:fc:d7:89:b0:15:94:4b:56:5a:9f:
d3:4c:0f:b5:7d:76:fe:cb:20:4e:fc:63:4c:1d:ed:
f5:bf:4e:85:ff:39:f6:33:f4:97:8b:e4:d0:3d:ec:
62:86:52:0a:4d:8e:5c:00:f9:5c:8b:9f:9d:44:d3:
2b:5c:80:81:c2:08:5c:25:23:67:d8:db:87:43:76:
ed:bf:fa:81:69:40:05:69:c3:c5:e4:46:cd:10:a6:
89:df:04:aa:99:1b:eb:af:69:fc:9d:72:7a:17:41:
7b:42:b5:5b:25:27:23:ee:cc:3a:e6:ac:6a:33:b5:
5b:98:3a:6e:02:2d:1f:3f:3b:45:0c:d5:d6:11:0c:
03:69:50:d1:26:7a:ba:f7:9a:2e:6b:2d:4d:c4:f7:
b6:00:96:b7:a7:65:eb:40:6b:ed:08:3b:8c:89:bf:
a9:f3:e1:2b:c7:79:8b:92:22:a0:fa:27:5c:d3:9d:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:8D:D8:4F:0E:21:74:63:F6:33:F0:F0:A5:EC:9D:10:C1:DA:B8
X509v3 Authority Key Identifier:
keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d7:4f:41:73:8f:d6:1f:b7:73:79:c5:13:16:0b:18:35:56:
26:70:3c:da:dd:7e:a2:e0:e5:a5:d1:4d:e9:0d:1b:d0:a4:0e:
f1:41:d3:ce:a6:28:84:54:85:a7:f6:e5:1c:fd:58:3b:dc:7a:
55:37:74:2d:6f:c9:69:12:f1:e1:14:48:44:bd:f8:96:5a:c8:
38:00:df:25:5d:9d:3e:2d:9b:17:49:42:85:49:c6:63:a3:84:
a8:10:12:d1:68:c1:b5:e6:f6:1b:2a:4b:42:2e:d1:62:18:8f:
8f:de:33:43:f2:71:08:41:89:7f:c2:10:6d:93:0b:a4:3d:b9:
e8:eb:a6:45:14:2d:f4:70:7d:e4:6c:75:0d:9b:b7:a4:b5:ee:
df:c9:76:2e:5d:16:4f:c3:67:be:68:c7:2a:55:a8:90:94:37:
97:42:43:61:66:41:90:4c:2f:06:80:46:ba:0a:a0:d9:a4:0a:
92:40:c6:e2:74:51:70:6c:c7:96:d8:c1:2f:5e:11:2c:6d:35:
75:70:77:3e:6b:63:4c:7b:00:63:07:c8:63:a6:eb:e2:3b:a0:
a4:0e:62:6b:68:cb:c2:9b:5e:60:f2:ce:d6:c5:9d:ec:c8:88:
3a:2d:2f:96:8f:f2:03:ac:8a:ea:36:52:d4:c1:34:29:4c:13:
9f:03:8b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:58:29 2026 by rpki-client