
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json)
Hash identifier: MRWsWaxCOa0mLdzyJqXK40wNdljvA/IjQ1Vk7/Kg3xI=
Subject key identifier: 5C:AD:2D:89:DA:F2:51:55:96:BB:2C:4D:35:ED:A8:53:61:26:F5:78
Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Certificate serial: 0D30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
Manifest number: 0CF1
Signing time: Sun 26 Jul 2026 18:45:43 +0000
Manifest this update: Sun 26 Jul 2026 18:45:42 +0000
Manifest next update: Sun 02 Aug 2026 18:45:42 +0000
Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: LMKEIN3+ct9EGy5rLE/LYVJS7X8e0LqcRRmUDVdO1+A=)
2: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: HqADfJ6PQAnaMYUSVaYaC1tzBINlqpUjolFi7987BYY=)
3: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: 2VeVxpw4IPzgEibTNEjoXK/Qy1fd2SwF+0DbU+sMNRg=)
4: 183DE570057A11EC822F230EC4F9AE02.roa (hash: KDCY6i/WJ6l1BoCfZqKbKmaeWQcqDHXYwIFR4N1iXXE=)
5: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: ApbUgdUH10Pdfa6lJVrc4XPCGZcLshELo3PIV/SWLXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3376 (0xd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Validity
Not Before: Jul 26 18:45:42 2026 GMT
Not After : Aug 2 18:45:42 2026 GMT
Subject: CN=6a6655d6-edff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:63:be:69:ba:9b:1a:3a:f0:b1:9c:de:2e:
e8:be:79:1a:74:2f:5c:bf:b6:49:c3:d3:dd:fc:30:
8e:13:f0:aa:24:f8:00:bf:02:c4:42:00:59:41:9c:
ca:4a:a8:f2:75:04:04:db:9c:4b:80:c9:37:dc:1e:
64:4a:76:26:3b:9a:42:fd:43:19:45:36:0e:b5:ce:
e9:b5:23:9e:42:d3:37:c7:77:e6:30:26:b9:2c:7d:
66:f0:6a:f6:de:37:29:d8:30:29:70:d6:9e:ad:57:
4f:9d:ea:b3:87:c6:58:7f:ea:09:52:c9:db:0a:d3:
19:72:ef:8e:72:af:cd:8f:27:cb:34:65:4d:60:51:
1c:46:e1:29:42:03:5b:95:b2:14:59:ad:54:d1:dd:
ea:d9:fe:e1:8f:28:9d:d5:df:90:06:4c:41:63:5c:
f7:7e:85:51:4e:21:88:28:37:28:60:34:2c:71:1b:
1e:5c:2d:5c:d0:78:4f:34:b6:15:53:92:9f:8e:cc:
75:5a:a1:88:d7:c1:39:9c:7c:ae:fd:13:3b:35:96:
41:83:e1:46:2a:98:5f:3b:5f:cd:b6:8a:16:a5:90:
c8:d5:01:bb:94:9c:49:b1:3b:d0:37:7e:92:52:3d:
0f:a0:7d:5a:34:72:68:00:56:40:03:8d:a9:03:19:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AD:2D:89:DA:F2:51:55:96:BB:2C:4D:35:ED:A8:53:61:26:F5:78
X509v3 Authority Key Identifier:
keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:c9:39:dc:e4:65:df:a9:85:dc:aa:aa:ad:4a:a1:c1:56:c5:
5c:86:7e:bc:bb:81:44:08:c4:77:af:96:85:2d:4b:2a:a1:df:
ad:79:c6:3c:e4:81:57:88:bb:7e:fa:53:79:e3:d5:d0:62:8e:
40:a0:bd:f8:21:7a:40:63:ed:9c:f2:72:ee:04:23:56:83:1c:
53:5e:95:1a:69:a0:43:49:95:3e:3a:08:00:84:7a:4d:70:41:
00:ee:76:bd:d6:09:27:46:28:41:d7:05:fa:14:65:8e:71:8b:
ff:58:c4:fc:9d:b8:3f:b2:45:18:43:88:49:99:55:e9:b8:02:
b9:bc:63:a8:fe:43:22:91:ab:75:cb:22:f1:0d:d1:af:7a:1c:
a3:59:5b:44:ba:cd:81:a9:74:cc:36:ba:66:06:29:6d:92:61:
f7:15:94:e7:d7:c4:f2:8a:c3:09:cd:5f:cb:a0:31:0d:06:49:
dd:e0:83:cb:75:66:c0:a7:21:bd:ef:5d:ac:4c:e1:93:ab:fe:
5b:14:90:57:50:ee:cd:b7:6e:ca:c0:f2:d7:99:92:4d:dd:28:
b6:5f:b8:4f:8e:b1:c1:a7:eb:3b:9e:c2:9b:7a:92:f8:05:5a:
6b:94:87:c3:34:16:96:95:0d:dc:97:88:f7:d7:36:c6:67:43:
d5:14:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:45:12 2026 by rpki-client